last executing test programs: 31.71491891s ago: executing program 0 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 31.513669086s ago: executing program 0 (id=128): r0 = syz_io_uring_setup(0x94f, &(0x7f00000016c0), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x160341) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) io_uring_enter(r0, 0x7, 0x464f, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x3961, 0x0, 0x0, 0x0, 0x0) 30.195331302s ago: executing program 0 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x829c0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) mount(&(0x7f0000000380)=@md0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)='binfmt_misc\x00', 0x80000, &(0x7f0000000480)='GPL\x00') r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[], 0xb0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000000000181100000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0xddd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='xen_cpu_write_idt_entry\x00', r5}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={0x0, 0xa8}}, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x22) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) 28.109277221s ago: executing program 0 (id=144): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) close$binfmt(0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@xino_auto}, {@userxattr}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400000001"], 0x48) fallocate(0xffffffffffffffff, 0x700100, 0x0, 0x1000f4) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x43a040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ptrace$getregs(0xc, r1, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000002c80)={0x2020}, 0x2020) pread64(r7, &(0x7f0000000180)=""/75, 0x4b, 0xa0ef) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x60ea0002}}}}}, 0x0) read$FUSE(r7, &(0x7f0000000380)={0x2020}, 0x2020) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r5], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x20040001) 27.74994939s ago: executing program 0 (id=151): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000180)) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, &(0x7f0000000300)=""/93, 0x5d, 0x40000040, &(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 26.903580438s ago: executing program 0 (id=156): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='errors=continue,namecase=1,iocharset=none,errors=continue,fmask=00000000000000000000011,iocharset=cp950,gid=', @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000127435,gid=', @ANYRES16=0x0, @ANYBLOB="0514"], 0x5, 0x1510, &(0x7f0000000240)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x4802, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800, 0x0) 26.820374575s ago: executing program 32 (id=156): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='errors=continue,namecase=1,iocharset=none,errors=continue,fmask=00000000000000000000011,iocharset=cp950,gid=', @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000127435,gid=', @ANYRES16=0x0, @ANYBLOB="0514"], 0x5, 0x1510, &(0x7f0000000240)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x4802, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800, 0x0) 7.451688409s ago: executing program 1 (id=227): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './mnt'}}, {@uuid_on}, {@workdir={'workdir', 0x3d, './file1'}}], [{@euid_lt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x322060, &(0x7f0000000dc0)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) syz_usb_connect(0x0, 0x4b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001000016470904000003080662000905070000000000000924"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x88, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0xb, 0x50, 0x6b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "6d67d0c5146b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x8, 0x7}, {0x6, 0x24, 0x1a, 0x7, 0x4}, [@country_functional={0x8, 0x24, 0x7, 0x9, 0xffff, [0x6]}, @dmm={0x7, 0x24, 0x14, 0x8, 0x1}, @obex={0x5, 0x24, 0x15, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x6, 0xa5}}, {{0x9, 0x5, 0x3, 0x2, 0x630, 0x7, 0x8, 0xdc}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x4, 0x1, 0xfb, 0x8, 0xf9}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x240a}}, {0xd9, &(0x7f00000001c0)=@string={0xd9, 0x3, "802491d09b3deee822c71ae129233d924a45728218a1ecdad5db9050636a2f55490812904bb2292f23dd9163e736007945975aec951a9023e336ef07cd18c54cd9166568e1b106d19fd25098275c4534813f553505518004a6090ea591e787298905de15614e8ee143de8860b6b9afc01ead34d2b0ccd8d084d5461621cb94028e8780d255c6c351ad2e69aaa6ecc85428f5dc184b2e4d2465c8f1e2c1d3b1a21d332eef7c8be177b59d9a3d6ec156de1bf23b4ef27eb13229119b761c77e930da892673ba141c439dd7c5159f82e6dfbfe3effb45ef80"}}, {0x1c, &(0x7f00000002c0)=@string={0x1c, 0x3, "0fbecaf7fcd8a9360be1d807ac5ab7609fab487c35290b16340f"}}, {0x1f, &(0x7f0000000300)=ANY=[@ANYBLOB="9bba038f18cc7f18a07db21c15799f84065450a3b72534950000f100000000"]}, {0x18, &(0x7f0000000340)=@string={0x18, 0x3, "c0ade86d4a185a49cc304d9573c277e1e1d79b53ba0c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x458}}, {0x1b, &(0x7f0000000400)=@string={0x1b, 0x3, "6f3909ed6e859e7afe11a84e55d5398cc504a44e172272baa7"}}]}) 6.94258364s ago: executing program 2 (id=232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000000), 0x202, 0x12582) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x20, 0x1, 0x2, 0x41, 0x0, 0x5, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r3, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x30) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010008105000400"/20, @ANYRES32=r4, @ANYBLOB="0580040000000000280012800b000100697036746e6c00001800028014000200fc01000000000000000000000000004057895ad8e746cf5a0b1ab3386567e083f912788842b71cbbf2c17a07b471b92d2e6b55088a703a793b9634b45bb752cccbcb4ce6eef36585"], 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0xffffff4d, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 6.891714684s ago: executing program 2 (id=233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="130000001000000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) 6.868090796s ago: executing program 2 (id=234): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b640a11c", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000009564d49b2db2eb544e1138f118bf5f8cb9c13d1153400984b0ed201ef37d75fbce8edfa30e245dee42a0ace25a7daa841a39e7f39403391aa0ce0627fa22a8284ebd65db38ed5366176bc31aaf0558567d04e910349b3bb56ac6f54cc9fb5c7e0815d6a882ae9a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffcb2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1}, 0x20) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x210800, &(0x7f0000000480)={[{@clone_children}]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000082, &(0x7f00000001c0)=ANY=[], 0x1, 0x358, &(0x7f0000000800)="$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") r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x0) shutdown(r3, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="86f000030001090224000101ff08050904000502070102020905010208000409c3090582024000077077"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0xc0, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x3, 0x1, 0x2b, 0x40, 0xf3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x6}, [@processing_unit={0x7, 0x24, 0x7, 0x4, 0x0, 0x1}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x9, 0x9, 0x9], 0x4}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x2, 0x2, [0x4, 0x5], 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x1, 0x10, 0x6c}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xc, 0x1, 0x10, 0xb4, "", "b1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x3, 0x3, {0x7, 0x25, 0x1, 0x1, 0x5, 0xa5c3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x3, 0xfd, 0x93}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x3, 0x81, 0x2, "ff"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xc0, 0x4, 0xb, 0x0, "a5acf90a836f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x9, {0x7, 0x25, 0x1, 0x0, 0xf6, 0x400}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x2, 0xa, 0xf, 0x8, 0x5}, 0x14, &(0x7f0000000080)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xf8, 0x0, 0x8, 0xf00, 0x3ff}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2f}}, {0xf4, &(0x7f0000000200)=@string={0xf4, 0x3, "921bf881cdbf941f05edb94dbdce6f1de6d2f134759e4d3c183bc804134a061c23d9b4fc631e9ee6c8cd536e62796eb170ae9eb913090c0d907d585ce97344039425fcf0e2e566ecbcf0a56279754bef6465e5ab32a3e876a3aa5899cbad9cffa73bf7a4c9173e2a7aa61dc75022c5b016ba423c5493c9a586f9b24b2e580414cd11c173822234982395003d88c749788a8937d9f5c521bdbfcf73e7acd19440286614550830f81dbafbde031ada6a1046986217d3e580da3c59ed7e60fcdd85ae31d703ca902c60ef5407f7ff3813426e4573762a6fec235354dfa7268e22b57e91ee1732efa0f802c8d470db4ecbd7f825"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44d}}]}) 6.615483816s ago: executing program 4 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 6.365818716s ago: executing program 4 (id=238): mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000075981400000000003b810000850000007d000000760000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r6, 0x8800000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendfile(r7, r6, 0x0, 0x20000578410e9) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x3c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000600)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8no}, {@utf8}, {@shortname_winnt}, {@numtail}, {}, {@shortname_lower}, {@utf8no}, {@shortname_win95}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@fat=@check_strict}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbb2}}]}, 0x1, 0x363, &(0x7f0000000280)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004"], 0x48) mkdir(&(0x7f0000000080)='./file0\x00', 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x3, 0x40, 0x41}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.508047096s ago: executing program 1 (id=240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1263, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.502901777s ago: executing program 4 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000000), 0x202, 0x12582) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x20, 0x1, 0x2, 0x41, 0x0, 0x5, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r3, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x30) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010008105000400"/20, @ANYRES32=r4, @ANYBLOB="0580040000000000280012800b000100697036746e6c00001800028014000200fc01000000000000000000000000004057895ad8e746cf5a0b1ab3386567e083f912788842b71cbbf2c17a07b471b92d2e6b55088a703a793b9634b45bb752cccbcb4ce6eef36585"], 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0xffffff4d, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 4.387872186s ago: executing program 3 (id=243): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32=0xffffffffffffffff, @ANYRES64=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181200"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @local}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000240)={0x1d, r9}, 0x10) write$binfmt_script(r8, &(0x7f0000000100), 0x10) r10 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000040)='bpf_lsm_socket_getpeersec_stream\x00') bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRESHEX=r3], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.329226351s ago: executing program 5 (id=244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="130000001000000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) 4.328629041s ago: executing program 4 (id=245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000000000000416000005000000000000005c3a1c7df91c5f508b230beed0595d7983c693b13a5e7148ac891551c36a44e7baaa75ec16f1cada1a45e79497e7527457d6514057cf9b9ce2a067d7996f649dfc40625cb7dd64067c86348e70fcff15a884dff2a2eb41030c61635487d27364ce1c48edfdd930d5438773048e6bc5f58c19255410bce48a5ca3db10b0810e3b26fd4abe7c99d72a7955b2fdad1092a2e71390697eed93f1059a6076ddc764ba01c83d057c93aef65fd5d99718eb60272c79ce6a7c18d7acc0333a5f7d3e7fd9b27060f3ff5f90cca74a0105619244e8c25da1b87416", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x100, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x19}, {0x6, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x4}}, {0xc, 0x2, [0xffff, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x23, 0x4, 0x69, 0x0, 0x1, 0x80000000, 0x9, 0x3}}, {0xa, 0x2, [0x21, 0xffff, 0x7]}}, {{0x1c, 0x1, {0x7, 0x6, 0x2, 0x6, 0x2, 0x9, 0xfffffff3, 0x9}}, {0x16, 0x2, [0x10, 0x3, 0xb000, 0x8001, 0x9, 0x3, 0xe, 0x800, 0x1]}}, {{0x1c, 0x1, {0x8, 0x5, 0x7, 0x1, 0x0, 0x6, 0x9, 0x3}}, {0xa, 0x2, [0x1, 0x5, 0x1c]}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x11}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="591a1d9a2bdb0180c225000008004500007800000000002990780000e000e00000010000000000649078200200000000000000000000bfd809dd2002c0215205d7d1b23928894379df42c4391145badd28fd7f0ffc0e896f38da000000000000000bb10000085b2e0058306558a70864bef1f0524a72fc460b8cd26e09af44a09013b88635b405889017510a5f24ab642591"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4.316417311s ago: executing program 1 (id=246): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002e00), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000003000)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @private=0xa010100, 0xffffff00, 0xff000000, 'vlan0\x00', 'vxcan1\x00', {}, {}, 0x32, 0x1, 0xa0}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xa, 0xffff}}}, {{@ip={@remote, @local, 0x0, 0xff000000, 'erspan0\x00', 'vlan1\x00', {0xff}, {}, 0x2e, 0x1, 0x42}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x7f, 0x2, [0x3c, 0xf, 0x3d, 0x0, 0x12, 0x26, 0x7, 0x1, 0x9, 0x1d, 0x0, 0x19, 0x11, 0x7, 0x2, 0x1a], 0x2, 0x2, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000000f0ff00bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe000000008500000019000000b700000000000000950000000000000000e154cd844a954b26c933f7e38e52c997b03b72b3d0ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da00000080f24bf901115e17392ac66ad029d1c00000614600d53daeacea799a22812a1b3cab4d785c908c54f7a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b48610e9eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c2815df09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa9a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a62ec45c3af97a8f17da954aff3ec8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac70af2df2c772b0031fe13cab6692402a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cac8b4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf1301800000ff14a99202d9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ec7966130b547dbd8b0000f0a77fbcf2cd1d0000002000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf90040662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f64293091c989f72dcbbad3fdcd6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d506d7a59a3ad09e8802e8f4f535447cc0fc9d5f89a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd11642d5577fb9030036bce9c764c714c9402c21d181aa0820d89f235a3f1c5fc853e59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa809000008e1d41e1dcf6e6879545b92bd49000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84937e859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af40fffe0000000000749efd3763655500344bae34137f5ab0d534b8d43e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b850580994484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b00cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe44dc87c92332af00f191b66b6a6f7323e8faffc0886f4af7fc100dcb39c77a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a437367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85cff7f000000002c331fca0e541b7ca211c28ed61c5257080f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce4616d42b07199de8b99231ace58c77819ee2b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e604bae6b13df468ad87a6c769f952283a1f4e3842edb3d40c68a2001000006dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa671e934e94d1eb3de6a5f99f301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6e9a84aebe6e6e79900369c17b0ed16acdce1b12b70000000000f4e8cdbadbec962a7edc91c6b80f53e3b19c372e40e2139ff4c1180365eb5b71d834eb0293e252b96e6c90ec4d23cc42e88d262c1fdc317c7c000000acbc1248f2389d7fbcc10a377cc4e28460c0516534bdb3ff372bfd94efa0d32b214b39cea885557d39265a1c5e08c29914db042aa4fe23a92f387ae6d7565d3ca6ceb040f859de2e47f6c04bc55f3b81249faf3a505ac0d29e053b9c1832e8a25a54ae433e43036b032518200e2875736fc139a344bf3bf4d8f6f57e5c4b7f62a23758cb30e43f1974b14d4f3e1a8ce71995ce28564a50f418af2b6f22a7c70c2213ec629288604aa1a9f418487c864af9368a08bd37eecb0a810c5c24d7a82c07a8e68caa7ff2eaf100f6fd4c3af07d7a86b34f2f4d34abf2f92f1a41a330a4e8fbb4876393b38f79573cb53c263090d620a37ea25cde9445ccb74ebc22156465f4871436b44981455eccc221a8251f71c047203ac4d62b0012cab329a5d9003ceff42b007aa61880da20b0ad83ae368a19d2827840b8d00f92745508e63cddaac6d2d3c6cb03d512c5be9e7fd86e461e1e6a228e630029dbeddf37a6990c75ff6dcb6f32f61e59e3bf97f48954fd7908ab05e74815d909548b277bf5c4570eaeb265f4ffeacc3a4ec2edb261d53d09ebb6bdf811e2a4ef0be6392d86a5285a7fd2e4345e14786abafdd4852d3d62c334760c05e1bba37d0f0742c53242596e13bc22682ae15694aaaadef41bbd7185b74feaf59dea096a23a48c9eb3be5c546eda0f4b07916ab14e12839318e953f15fab94c9ba783015ebb6983d514e3b1f246f0a63c5a58cc2be0cb179791ec1b9a3e7e62c165ae39855182266b36ce9d2943c49a7f9a2a89a948b37f2bb830ea790a2b2c2fcd06bc499434dda842cfa91b2df4368f07eb2410aa387d146bccd22698f8f322fbdf4cddf11fd3b85325af8df473c8f156833e5488f31165e6a56d4c1c661bcbefcefd10f47b2e593b836be67bdc15c3b7fb497ecbca1506a577e81947505553dfdfe963c20c12575c4abc45cf9229af181317fde5262a73600f90e7457280ff4229507178c5df9acc273a7be76f6596b2ac36a2d28627e0012f989d7f7a20f2b38eef5efc339b8784ad5fe6fac77926d83a73e3647a6351c23d7e51cf459e5d169d42566b012193338f67612c22eab89fb14a40edd2694696048f9d51d26fa256eede4a9b5dd3508f9308883194ab3b0661d51b18dbdca9b5f70a91db8fc9b19291664eccc8274340eef00c743588b0ae4e7280db3b7bce3041a5bb9fced08059a2518eaf35df7388a518965a9b4c6ee27872be887b37319370a4587e50f28060b963a6e4d73b338f4e8929bc5ada66b6920c633119d17c090e72daa679c6e5bb155710679660004705fd8d4cac660fc32554a20feb5d74cafe562aff12fe126abf5927205867d5fca4a4ff8c7d0933cdfaf5864f4dae435d1ab9e711f48cd03f4cc130b54e18428341e675968ac19509fe7bff5ef0e55d71987e44027e29d02ac36f3c486bcf22f86170cbeeee2a5eb3adadb7d906f25c73df5cd22a8d1ca00b027a1ab966ab4799e631a21042685fc8c05d5e04ab21a66c5f221dabdac52b43a5980b1efb49d9e03d05f4d1a8756085d0305ff3c4cec8500000000000000000000924f7fdfa25a3331d13a50233f70742f16f6e13bd716905299ab21864ec9d3a93b1de03592b73b327348427508a2dcb953dd23e42adfc18fc891a247ba5c7ebd7fa6da7e3ef3d11d4b1bb534b48064aed03c5850c12abf87240b65221a64ec331c31ce394dad6142619893bff5c810f53dbd875837705ad5139a31ff058aacd51eed21216e0bd179cb00bf02af8dc25be8f318bca707c05a0235b86f37606e1cfbc9ee5cd9741c7648713b24107697039cc40aa538c24e8934cd88238237b21f0a901c488c55178984597ef91e7a8d60081cf34081b5df32ef9a89a25203093b8cbb5cd416d189cffcbdb6a336e3adefa39ea04e2c425864c766283829db5c2beb709da87edcee6b682f18abcac4fb9d785beb2f840079b54dfb9a8ab1a6bf4eea20bb51804ec3d3848bfd11ba6a42bc2823559b70eaed4c673e0e834611b6fec4816ee94c62e88b13037d02cffd561f9bb97d6569114d0e6a7170e229ab9e938c18a568184bd6759e5c3526fbcb46da794c5bcb6303f8a4abfe0d37a0d757c686b0b5171892f867020778fcc567a21b04e684e9da29e86c3e392564f93b38d7bec00e82cd32e2a521a715ae603c12ff286ca67757d74553ce8607a1c5c4856e50094904bf08ecde97b7c513bf64252e839439b65ae0125fd8e9c6d142ee7a6af20cd5370396db6f616fb9e5a2824a5cd9c10000000000000000000000000000fd6a689d6779abe81e6aa2c63fce0faf9531a700c8cc02ea5d83f57fbfaee919668e9ba4776f2d5a1d544ea17288de3895fc39713fe150efeb27d43fcc1b53c00a4ade36652ecdb7fab04afa69e2b6611c0233670808a206578c5a7d0266ccf6c80ec69b22c8c71c6d8a057b71d39b18f15311dd7149a75f91ce676516532c0b89e0a2d4323080444686a790eca0390eea32e6fb0bd40b79e2c86d01435be3ba1224970c7e10e4bc54323decb110fb66f25477e309041ce13c8d8b077ead176bc45c5050a88acae7f8aaf962a990e6269de74cb1a915b85c01019066f2858cf322a21ebec7e060da478e31f943e7c31bbdb43c26702a0257e7103b4d532336dc6f0bd5d33a6f7d1134872859afb35a4e0731b38d3a914ed3aa376917b0bc84f5"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000100)={0x5, 0x802, 0x1fff, 0xfff7, 0x8b, "a8dff370f0fff7fd"}) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x2000, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0xeeef0000, 0x1000, &(0x7f0000341000/0x1000)=nil}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 4.08149677s ago: executing program 5 (id=247): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(0x0, 0x0, 0x200000000000000, 0x0, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r4}, 0x0, &(0x7f0000004040)}, 0x20) futimesat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) inotify_init() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x80}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) unshare(0x28020480) 2.777355906s ago: executing program 1 (id=248): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000180)) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, &(0x7f0000000300)=""/93, 0x5d, 0x40000040, &(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r6, 0x851, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.910970196s ago: executing program 2 (id=249): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0x11, 0x4623f, 0x6, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0xa, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x985, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x5, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x800, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x8, 0x8, 0x401, 0x1, 0x1fd, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) readv(r6, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1.905165186s ago: executing program 3 (id=250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.877949429s ago: executing program 5 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b77c0f41ec855d98b18e7b56abeaf05f61e40b399a217aa05b5cdbab3f3b819a249261ce7cf49", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) 897.715968ms ago: executing program 5 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 897.331608ms ago: executing program 4 (id=253): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000180)) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, &(0x7f0000000300)=""/93, 0x5d, 0x40000040, &(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r7, 0x851, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 897.061288ms ago: executing program 5 (id=254): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) eventfd2(0x808, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) syz_clone3(&(0x7f0000000000)={0x13824400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) 804.189085ms ago: executing program 2 (id=255): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r0) 802.019435ms ago: executing program 1 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1263, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 754.680839ms ago: executing program 3 (id=257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="130000001000000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) 730.080751ms ago: executing program 3 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 695.408164ms ago: executing program 2 (id=259): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5962, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_get$pid(0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x78000100) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x4, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, 0x0) 694.112774ms ago: executing program 1 (id=260): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) eventfd2(0x808, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) syz_clone3(&(0x7f0000000000)={0x13824400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) 615.06024ms ago: executing program 3 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0) r1 = open(0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000005c0)='i2c_read\x00', r1, 0x0, 0xffffffffbffffffe}, 0x18) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$incfs(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, 0x0) mkdir(0x0, 0x100) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000540)={0xff, 0x3ec, 0xfffffffe, 0x7fffffef, 0x0, "dc00", 0x1003, 0x2}) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000580), 0xa0, &(0x7f0000000080)=ANY=[@ANYBLOB="d354447633518d428af49559afb6443b0ca9bb872e84aee9288d643d67a73780247e6de33136fc6f49fe4017d91718bbbe528a2f77d4ecb3bda4456edb7629889bd5a3174655e2e3f57197461150b0ff0797311cfe80fe7b33ad2a19648f35aeda1de4be3b3489c00b1f20859ca4b1334cf3d4cda8047c50f9d122c049c5b5e7ef56a54fce93f32bb573e14374e2de97dbc4675c27be45de245134823cd380d63804eb88fe62ce08ff2dafb3037d07470214f0ab82d2e08590d7ad8390"]) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f0000000300)={0x9, "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"}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='ext4_ext_show_extent\x00', r7, 0x0, 0x3}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d666092a5ac0a6e6f3d", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 366.30159ms ago: executing program 3 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0) r1 = open(0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000005c0)='i2c_read\x00', r1, 0x0, 0xffffffffbffffffe}, 0x18) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$incfs(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0) mkdir(0x0, 0x100) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000540)={0xff, 0x3ec, 0xfffffffe, 0x7fffffef, 0x0, "dc00", 0x1003, 0x2}) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000580), 0xa0, &(0x7f0000000080)=ANY=[@ANYBLOB="d354447633518d428af49559afb6443b0ca9bb872e84aee9288d643d67a73780247e6de33136fc6f49fe4017d91718bbbe528a2f77d4ecb3bda4456edb7629889bd5a3174655e2e3f57197461150b0ff0797311cfe80fe7b33ad2a19648f35aeda1de4be3b3489c00b1f20859ca4b1334cf3d4cda8047c50f9d122c049c5b5e7ef56a54fce93f32bb573e14374e2de97dbc4675c27be45de245134823cd380d63804eb88fe62ce08ff2dafb3037d07470214f0ab82d2e08590d7ad8390"]) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f0000000300)={0x9, "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"}) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='ext4_ext_show_extent\x00', r7, 0x0, 0x3}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d666092a5ac0a6e6f3d", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 14.419499ms ago: executing program 4 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000004e63fb38a136c937e3e00000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x15ba42, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x100, 0xffffffffffffffff, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r8, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) 0s ago: executing program 5 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000004e63fb38a136c937e3e00000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x15ba42, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x100, 0xffffffffffffffff, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r8, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 20.476884][ T28] audit: type=1400 audit(1754734727.754:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.478010][ T275] cgroup: Unknown subsys name 'net' [ 20.499592][ T28] audit: type=1400 audit(1754734727.754:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.526813][ T28] audit: type=1400 audit(1754734727.784:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.526982][ T275] cgroup: Unknown subsys name 'devices' [ 20.671749][ T275] cgroup: Unknown subsys name 'hugetlb' [ 20.677358][ T275] cgroup: Unknown subsys name 'rlimit' [ 20.779772][ T28] audit: type=1400 audit(1754734728.054:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.802985][ T28] audit: type=1400 audit(1754734728.054:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.811148][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.827913][ T28] audit: type=1400 audit(1754734728.064:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.859405][ T28] audit: type=1400 audit(1754734728.124:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.884892][ T28] audit: type=1400 audit(1754734728.124:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.919233][ T28] audit: type=1400 audit(1754734728.194:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.944762][ T28] audit: type=1400 audit(1754734728.194:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.944976][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.218259][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.225459][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.232872][ T283] device bridge_slave_0 entered promiscuous mode [ 22.250984][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.258044][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.265948][ T283] device bridge_slave_1 entered promiscuous mode [ 22.287702][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.294889][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.302232][ T285] device bridge_slave_0 entered promiscuous mode [ 22.320567][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.327617][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.335121][ T285] device bridge_slave_1 entered promiscuous mode [ 22.385680][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.392769][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.400343][ T284] device bridge_slave_0 entered promiscuous mode [ 22.407744][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.414815][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.422128][ T284] device bridge_slave_1 entered promiscuous mode [ 22.428652][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.435725][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.443027][ T286] device bridge_slave_0 entered promiscuous mode [ 22.466668][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.473756][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.481151][ T286] device bridge_slave_1 entered promiscuous mode [ 22.529460][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.536608][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.544065][ T287] device bridge_slave_0 entered promiscuous mode [ 22.550929][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.557950][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.565517][ T287] device bridge_slave_1 entered promiscuous mode [ 22.690280][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.697352][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.704653][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.711675][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.732478][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.739581][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.746892][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.753923][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.769079][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.776150][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.783427][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.790454][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.802556][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.809606][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.816903][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.823928][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.837875][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.845581][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.852846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.860486][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.867812][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.875214][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.882449][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.889982][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.897123][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.912804][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.921034][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.928046][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.959180][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.968089][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.975153][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.009165][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.017200][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.025184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.033263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.041919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.050110][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.057252][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.064705][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.072954][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.079990][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.109325][ T285] device veth0_vlan entered promiscuous mode [ 23.116704][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.124727][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.133083][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.141757][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.149431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.157497][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.165878][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.172936][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.180329][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.188462][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.195495][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.203107][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.211125][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.219219][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.226246][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.233724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.241920][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.248930][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.256333][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.264287][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.272627][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.298313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.305840][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.313383][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.321616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.329508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.338020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.346237][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.353258][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.360764][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.368982][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.377189][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.384236][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.391765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.399800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.407874][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.415936][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.430518][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.438881][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.447482][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.455910][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.464900][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.473003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.483727][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.492105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.504202][ T284] device veth0_vlan entered promiscuous mode [ 23.511664][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.519554][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.527632][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.535583][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.543707][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.551269][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.558613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.566230][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.574924][ T287] device veth0_vlan entered promiscuous mode [ 23.590043][ T287] device veth1_macvtap entered promiscuous mode [ 23.597554][ T285] device veth1_macvtap entered promiscuous mode [ 23.604172][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.611962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.620363][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.628684][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.636726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.644679][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.652797][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.660965][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.669160][ T283] device veth0_vlan entered promiscuous mode [ 23.681556][ T284] device veth1_macvtap entered promiscuous mode [ 23.690531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.697989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.705637][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.713420][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.721458][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.729309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.737472][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.745537][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.753746][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.780054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.788608][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.788714][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 23.797653][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.813033][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.821470][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.829543][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.837786][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.846158][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.854623][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.862981][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.871362][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.879483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.895418][ T283] device veth1_macvtap entered promiscuous mode [ 23.929186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.943351][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.963665][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.003647][ T286] device veth0_vlan entered promiscuous mode [ 24.010393][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.020493][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.055372][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.064475][ T348] incfs: Backing dir is not set, filesystem can't be mounted. [ 24.066104][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.079480][ T348] incfs: mount failed -2 [ 24.098993][ T349] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 24.102744][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.104021][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.105397][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.106781][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.107907][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.108927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.123825][ T286] device veth1_macvtap entered promiscuous mode [ 24.162825][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.163820][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.164636][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.206408][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.207350][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.927758][ T361] loop4: detected capacity change from 0 to 256 [ 24.929691][ T361] exfat: Deprecated parameter 'namecase' [ 25.462215][ T361] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 25.480128][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 25.480144][ T28] audit: type=1400 audit(1754734732.754:111): avc: denied { connect } for pid=364 comm="syz.2.7" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.507047][ T359] input: syz0 as /devices/virtual/input/input4 [ 25.527792][ T28] audit: type=1400 audit(1754734732.754:112): avc: denied { write } for pid=364 comm="syz.2.7" laddr=172.20.20.18 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.563063][ T28] audit: type=1400 audit(1754734732.754:113): avc: denied { write } for pid=364 comm="syz.2.7" laddr=172.20.20.18 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.589603][ T28] audit: type=1400 audit(1754734732.784:114): avc: denied { ioctl } for pid=357 comm="syz.0.1" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 25.615271][ T365] syz.2.7 (365) used greatest stack depth: 21696 bytes left [ 25.620701][ T28] audit: type=1400 audit(1754734732.894:115): avc: denied { create } for pid=360 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.717946][ T378] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 25.727310][ T378] FAULT_INJECTION: forcing a failure. [ 25.727310][ T378] name failslab, interval 1, probability 0, space 0, times 0 [ 25.739980][ T378] CPU: 1 PID: 378 Comm: syz.3.8 Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 25.749441][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 25.759508][ T378] Call Trace: [ 25.762781][ T378] [ 25.765700][ T378] __dump_stack+0x21/0x24 [ 25.770046][ T378] dump_stack_lvl+0xee/0x150 [ 25.774629][ T378] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.779648][ T378] dump_stack+0x15/0x24 [ 25.783797][ T378] should_fail_ex+0x3d4/0x520 [ 25.788470][ T378] __should_failslab+0xac/0xf0 [ 25.793231][ T378] should_failslab+0x9/0x20 [ 25.797732][ T378] slab_pre_alloc_hook+0x30/0x1e0 [ 25.802752][ T378] kmem_cache_alloc_lru+0x49/0x280 [ 25.807856][ T378] ? __d_alloc+0x34/0x6c0 [ 25.812177][ T378] __d_alloc+0x34/0x6c0 [ 25.816327][ T378] d_alloc_cursor+0x41/0xd0 [ 25.820822][ T378] dcache_dir_open+0x3b/0x80 [ 25.825404][ T378] do_dentry_open+0x88e/0x1260 [ 25.830162][ T378] ? __cfi_dcache_dir_open+0x10/0x10 [ 25.835440][ T378] dentry_open+0xbb/0x100 [ 25.839763][ T378] ovl_path_open+0x16e/0x190 [ 25.844345][ T378] ovl_dir_read+0x29/0x5c0 [ 25.848751][ T378] ? ovl_path_upper+0xd5/0x130 [ 25.853503][ T378] ? ovl_path_next+0x1e1/0x270 [ 25.858257][ T378] ovl_dir_read_merged+0x134/0x2f0 [ 25.863359][ T378] ? ovl_check_empty_dir+0x480/0x480 [ 25.868634][ T378] ? __cfi_ovl_fill_merge+0x10/0x10 [ 25.873820][ T378] ? kasan_save_alloc_info+0x25/0x30 [ 25.879097][ T378] ? __kasan_kmalloc+0x95/0xb0 [ 25.883851][ T378] ? ovl_iterate+0xec8/0x1ec0 [ 25.888518][ T378] ? kmalloc_trace+0x40/0xb0 [ 25.893102][ T378] ovl_iterate+0xf96/0x1ec0 [ 25.897601][ T378] ? kstrtouint+0x74/0xe0 [ 25.901926][ T378] ? __cfi_ovl_iterate+0x10/0x10 [ 25.906854][ T378] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 25.912568][ T378] ? irqentry_exit+0x37/0x40 [ 25.917165][ T378] ? sysvec_call_function_single+0x61/0xc0 [ 25.922960][ T378] ? asm_sysvec_call_function_single+0x1b/0x20 [ 25.929108][ T378] ? rwsem_write_trylock+0x130/0x300 [ 25.934388][ T378] ? avc_policy_seqno+0x1b/0x70 [ 25.939232][ T378] ? clear_nonspinnable+0x60/0x60 [ 25.944252][ T378] ? __kasan_check_read+0x11/0x20 [ 25.949270][ T378] ? fsnotify_perm+0x269/0x5b0 [ 25.954025][ T378] iterate_dir+0x271/0x610 [ 25.958436][ T378] __se_sys_getdents+0xe5/0x240 [ 25.963277][ T378] ? fput+0x154/0x1a0 [ 25.967250][ T378] ? __x64_sys_getdents+0x90/0x90 [ 25.972259][ T378] ? ksys_write+0x1eb/0x240 [ 25.976756][ T378] ? __cfi_filldir+0x10/0x10 [ 25.981332][ T378] ? __cfi_ksys_write+0x10/0x10 [ 25.986177][ T378] ? debug_smp_processor_id+0x17/0x20 [ 25.991538][ T378] __x64_sys_getdents+0x7b/0x90 [ 25.996381][ T378] x64_sys_call+0x212/0x9a0 [ 26.000877][ T378] do_syscall_64+0x4c/0xa0 [ 26.005289][ T378] ? clear_bhb_loop+0x30/0x80 [ 26.009957][ T378] ? clear_bhb_loop+0x30/0x80 [ 26.014626][ T378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.020508][ T378] RIP: 0033:0x7efddab8ebe9 [ 26.024923][ T378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 26.044516][ T378] RSP: 002b:00007efddb916038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 26.052928][ T378] RAX: ffffffffffffffda RBX: 00007efddadb6180 RCX: 00007efddab8ebe9 [ 26.060889][ T378] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000009 [ 26.068848][ T378] RBP: 00007efddb916090 R08: 0000000000000000 R09: 0000000000000000 [ 26.076806][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.084763][ T378] R13: 00007efddadb6218 R14: 00007efddadb6180 R15: 00007ffd94bb8048 [ 26.092728][ T378] [ 26.101756][ T28] audit: type=1400 audit(1754734733.014:116): avc: denied { create } for pid=367 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.131094][ T375] loop2: detected capacity change from 0 to 1024 [ 26.180633][ T375] ======================================================= [ 26.180633][ T375] WARNING: The mand mount option has been deprecated and [ 26.180633][ T375] and is ignored by this kernel. Remove the mand [ 26.180633][ T375] option from the mount to silence this warning. [ 26.180633][ T375] ======================================================= [ 26.260975][ T383] loop1: detected capacity change from 0 to 4096 [ 26.299776][ T383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.321078][ T375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 26.346235][ T375] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.450512][ T28] audit: type=1400 audit(1754734733.644:117): avc: denied { write } for pid=370 comm="syz.2.10" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.471981][ T28] audit: type=1400 audit(1754734733.644:118): avc: denied { add_name } for pid=370 comm="syz.2.10" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.492587][ T28] audit: type=1400 audit(1754734733.644:119): avc: denied { create } for pid=370 comm="syz.2.10" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.520376][ T28] audit: type=1400 audit(1754734733.644:120): avc: denied { read write } for pid=370 comm="syz.2.10" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.548519][ T394] loop0: detected capacity change from 0 to 2048 [ 26.564143][ T285] EXT4-fs (loop2): unmounting filesystem. [ 26.579361][ T398] netlink: 'syz.1.11': attribute type 4 has an invalid length. [ 26.587265][ T398] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.11'. [ 26.597969][ T398] fs-verity: sha512 using implementation "sha512-avx2" [ 26.602761][ T394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.614526][ T402] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.957461][ T405] loop4: detected capacity change from 0 to 256 [ 26.975779][ T405] FAT-fs (loop4): Unrecognized mount option "shortna\e=winnt" or missing value [ 27.016663][ T411] loop2: detected capacity change from 0 to 4096 [ 27.030896][ T284] EXT4-fs (loop1): unmounting filesystem. [ 27.037883][ T411] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.192253][ T405] loop4: detected capacity change from 0 to 512 [ 27.209630][ T405] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 27.243066][ T405] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 27.256913][ T405] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.312483][ T419] loop1: detected capacity change from 0 to 128 [ 27.541456][ T286] EXT4-fs (loop0): unmounting filesystem. [ 27.555368][ T287] EXT4-fs (loop4): unmounting filesystem. [ 27.611306][ T285] EXT4-fs (loop2): unmounting filesystem. [ 28.089655][ T440] loop0: detected capacity change from 0 to 512 [ 28.097496][ T440] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.110684][ T440] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 28.208324][ T440] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 28.222126][ T440] EXT4-fs (loop0): 1 truncate cleaned up [ 28.227806][ T440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.700346][ T444] syz.4.27 (444) used obsolete PPPIOCDETACH ioctl [ 28.895431][ T286] EXT4-fs (loop0): unmounting filesystem. [ 29.148278][ T452] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=452 comm=syz.0.29 [ 29.202251][ T452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 29.384743][ T461] netlink: 148 bytes leftover after parsing attributes in process `syz.3.31'. [ 29.419505][ T461] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 29.602422][ T451] syz.2.28 (451) used greatest stack depth: 20600 bytes left [ 29.742469][ T468] cgroup: fork rejected by pids controller in /syz0 [ 29.925814][ T470] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 30.481829][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.499047][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.509538][ T473] device bridge_slave_0 entered promiscuous mode [ 30.571814][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.643522][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.660310][ T473] device bridge_slave_1 entered promiscuous mode [ 30.667402][ T8] device bridge_slave_1 left promiscuous mode [ 30.679976][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.991690][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 30.993344][ T28] audit: type=1400 audit(1754734738.204:165): avc: denied { connect } for pid=477 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.102146][ T8] device bridge_slave_0 left promiscuous mode [ 31.108316][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.124669][ T28] audit: type=1400 audit(1754734738.374:166): avc: denied { ioctl } for pid=477 comm="syz.2.37" path="socket:[16848]" dev="sockfs" ino=16848 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.125421][ T8] device veth1_macvtap left promiscuous mode [ 31.194454][ T8] device veth0_vlan left promiscuous mode [ 31.444983][ T28] audit: type=1400 audit(1754734738.724:167): avc: denied { append } for pid=485 comm="syz.2.39" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.491880][ T486] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3354154791 (6708309582 ns) > initial count (4455734788 ns). Using initial count to start timer. [ 31.553958][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.564317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.575447][ T28] audit: type=1400 audit(1754734738.854:168): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 31.598114][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.606728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.615044][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.622099][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.633088][ T28] audit: type=1400 audit(1754734738.914:169): avc: denied { create } for pid=494 comm="syz.1.40" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.666132][ T28] audit: type=1400 audit(1754734738.914:170): avc: denied { map } for pid=494 comm="syz.1.40" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.666965][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.699168][ T28] audit: type=1400 audit(1754734738.914:171): avc: denied { read write } for pid=494 comm="syz.1.40" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.730682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.738812][ T28] audit: type=1400 audit(1754734738.974:172): avc: denied { read write } for pid=498 comm="syz.3.42" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.772662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.779722][ T28] audit: type=1400 audit(1754734738.974:173): avc: denied { open } for pid=498 comm="syz.3.42" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.782238][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.810689][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.812847][ T28] audit: type=1400 audit(1754734738.974:174): avc: denied { ioctl } for pid=498 comm="syz.3.42" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.819415][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.885689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.895945][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.909340][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.917325][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.924906][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.933800][ T473] device veth0_vlan entered promiscuous mode [ 31.972045][ T473] device veth1_macvtap entered promiscuous mode [ 31.998424][ T508] netlink: 56 bytes leftover after parsing attributes in process `syz.4.43'. [ 32.046979][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.055479][ T39] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 32.102886][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.113764][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.280756][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.289495][ T39] usb 4-1: not running at top speed; connect to a high speed hub [ 32.298248][ T39] usb 4-1: config 0 has no interfaces? [ 32.307764][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.317234][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.326212][ T39] usb 4-1: Product: syz [ 32.331566][ T39] usb 4-1: Manufacturer: syz [ 32.336200][ T39] usb 4-1: SerialNumber: syz [ 32.344472][ T39] usb 4-1: config 0 descriptor?? [ 32.402671][ T516] incfs: Backing dir is not set, filesystem can't be mounted. [ 32.410263][ T516] incfs: mount failed -2 [ 32.419323][ T516] 9pnet: Could not find request transport: f`Тем [ 32.419323][ T516] no=0x000000000000000a [ 32.442953][ T518] incfs: Backing dir is not set, filesystem can't be mounted. [ 32.450512][ T518] incfs: mount failed -2 [ 32.456950][ T518] 9pnet: Could not find request transport: f`Тем [ 32.456950][ T518] no=0x000000000000000a [ 32.552144][ T347] usb 4-1: USB disconnect, device number 2 [ 33.346241][ T535] loop1: detected capacity change from 0 to 128 [ 34.086782][ T540] overlayfs: missing 'lowerdir' [ 34.647492][ T550] incfs: Backing dir is not set, filesystem can't be mounted. [ 34.655362][ T550] incfs: mount failed -2 [ 34.671403][ T550] 9pnet: Could not find request transport: f`Тем [ 34.671403][ T550] no=0x000000000000000a [ 34.735065][ T552] loop3: detected capacity change from 0 to 128 [ 35.009357][ T557] loop2: detected capacity change from 0 to 512 [ 35.230363][ T557] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.254809][ T557] EXT4-fs (loop2): 1 truncate cleaned up [ 35.260538][ T557] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.274615][ T555] capability: warning: `syz.0.54' uses deprecated v2 capabilities in a way that may be insecure [ 35.590938][ T564] loop4: detected capacity change from 0 to 256 [ 35.713091][ T285] EXT4-fs (loop2): unmounting filesystem. [ 35.990805][ T572] FAULT_INJECTION: forcing a failure. [ 35.990805][ T572] name failslab, interval 1, probability 0, space 0, times 0 [ 36.003521][ T572] CPU: 1 PID: 572 Comm: syz.3.59 Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 36.013059][ T572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.023108][ T572] Call Trace: [ 36.026380][ T572] [ 36.029303][ T572] __dump_stack+0x21/0x24 [ 36.033658][ T572] dump_stack_lvl+0xee/0x150 [ 36.038245][ T572] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.043265][ T572] dump_stack+0x15/0x24 [ 36.047415][ T572] should_fail_ex+0x3d4/0x520 [ 36.052084][ T572] __should_failslab+0xac/0xf0 [ 36.056836][ T572] should_failslab+0x9/0x20 [ 36.061334][ T572] slab_pre_alloc_hook+0x30/0x1e0 [ 36.066353][ T572] kmem_cache_alloc_lru+0x49/0x280 [ 36.071471][ T572] ? __d_alloc+0x34/0x6c0 [ 36.075798][ T572] ? finish_task_switch+0x16b/0x7b0 [ 36.080998][ T572] __d_alloc+0x34/0x6c0 [ 36.085225][ T572] ? __schedule+0xb8f/0x14e0 [ 36.089811][ T572] d_alloc_parallel+0xd6/0x1240 [ 36.094658][ T572] ? release_firmware_map_entry+0x194/0x194 [ 36.100554][ T572] ? __kasan_check_read+0x11/0x20 [ 36.105574][ T572] ? preempt_schedule_irq+0xbb/0x110 [ 36.109929][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 36.109941][ T28] audit: type=1400 audit(1754734743.254:216): avc: denied { unlink } for pid=566 comm="syz.3.59" name="#9" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 36.110846][ T572] ? __cfi_d_alloc_parallel+0x10/0x10 [ 36.110869][ T572] ? privileged_wrt_inode_uidgid+0x20e/0x260 [ 36.149851][ T572] ? __kasan_check_write+0x14/0x20 [ 36.154949][ T572] ? rwsem_read_trylock+0x29a/0x620 [ 36.160127][ T572] ? downgrade_write+0x350/0x350 [ 36.165046][ T572] __lookup_slow+0x141/0x3f0 [ 36.169615][ T572] ? lookup_one_len+0x2d0/0x2d0 [ 36.174440][ T572] ? down_read+0xa0/0xf0 [ 36.178664][ T572] ? lookup_one_common+0x321/0x460 [ 36.183754][ T572] lookup_one_unlocked+0x17a/0x2a0 [ 36.188842][ T572] ? __cfi_lookup_one_unlocked+0x10/0x10 [ 36.194456][ T572] ovl_lookup_single+0x11c/0x9a0 [ 36.199381][ T572] ? ovl_lower_positive+0x350/0x350 [ 36.204559][ T572] ? push_rt_task+0x35f/0x5b0 [ 36.209221][ T572] ovl_lookup_layer+0x355/0x420 [ 36.214049][ T572] ovl_lookup+0x354/0x18e0 [ 36.218443][ T572] ? kasan_save_alloc_info+0x25/0x30 [ 36.223710][ T572] ? __kasan_check_read+0x11/0x20 [ 36.228722][ T572] ? __cfi_ovl_lookup+0x10/0x10 [ 36.233550][ T572] ? preempt_schedule_thunk+0x16/0x18 [ 36.238905][ T572] ? _raw_spin_unlock+0x5f/0x70 [ 36.243737][ T572] ? d_alloc+0x199/0x1d0 [ 36.247959][ T572] lookup_one_qstr_excl+0x125/0x270 [ 36.253137][ T572] do_unlinkat+0x189/0x6b0 [ 36.257530][ T572] ? __cfi_do_unlinkat+0x10/0x10 [ 36.262447][ T572] ? getname_flags+0x206/0x500 [ 36.267192][ T572] __x64_sys_unlink+0x49/0x50 [ 36.271855][ T572] x64_sys_call+0x958/0x9a0 [ 36.276336][ T572] do_syscall_64+0x4c/0xa0 [ 36.280735][ T572] ? clear_bhb_loop+0x30/0x80 [ 36.285390][ T572] ? clear_bhb_loop+0x30/0x80 [ 36.290050][ T572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.295921][ T572] RIP: 0033:0x7efddab8ebe9 [ 36.300316][ T572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.319896][ T572] RSP: 002b:00007efddb916038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 36.328297][ T572] RAX: ffffffffffffffda RBX: 00007efddadb6180 RCX: 00007efddab8ebe9 [ 36.336246][ T572] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 36.344193][ T572] RBP: 00007efddb916090 R08: 0000000000000000 R09: 0000000000000000 [ 36.352141][ T572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.360086][ T572] R13: 00007efddadb6218 R14: 00007efddadb6180 R15: 00007ffd94bb8048 [ 36.368039][ T572] [ 36.372194][ T571] fuse: Unknown parameter './bus' [ 37.188144][ T28] audit: type=1400 audit(1754734744.464:217): avc: denied { append } for pid=586 comm="syz.0.65" name="event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.310147][ T28] audit: type=1400 audit(1754734744.594:218): avc: denied { write } for pid=581 comm="syz.1.64" name="nf_conntrack" dev="proc" ino=4026532378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 38.008208][ T587] loop0: detected capacity change from 0 to 40427 [ 38.024896][ T587] F2FS-fs (loop0): invalid crc value [ 38.173674][ T587] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.185963][ T588] loop1: detected capacity change from 0 to 512 [ 38.195656][ T28] audit: type=1400 audit(1754734745.474:219): avc: denied { mounton } for pid=581 comm="syz.1.64" path="/7/file1" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.217908][ T588] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.310950][ T588] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 38.335949][ T588] System zones: 0-2, 18-18, 34-34 [ 38.379066][ T588] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 38.413399][ T587] F2FS-fs (loop0): Start checkpoint disabled! [ 38.441288][ T587] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 38.543686][ T588] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.768524][ T588] EXT4-fs (loop1): unmounting filesystem. [ 39.898929][ T614] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 39.908375][ T614] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 39.950485][ T616] incfs: Backing dir is not set, filesystem can't be mounted. [ 39.968221][ T616] incfs: mount failed -2 [ 39.974890][ T616] 9pnet: Could not find request transport: f`Тем [ 39.974890][ T616] no=0xffffffffffffffff [ 40.532536][ T620] loop1: detected capacity change from 0 to 512 [ 40.623681][ T620] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.660614][ T620] EXT4-fs (loop1): 1 truncate cleaned up [ 40.666299][ T620] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.705390][ T284] EXT4-fs (loop1): unmounting filesystem. [ 40.712856][ T623] loop0: detected capacity change from 0 to 128 [ 40.747961][ T28] audit: type=1400 audit(1754734748.024:220): avc: denied { read write } for pid=633 comm="syz.1.74" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.774347][ T634] loop1: detected capacity change from 0 to 512 [ 40.793457][ T634] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 40.803659][ T28] audit: type=1400 audit(1754734748.054:221): avc: denied { open } for pid=633 comm="syz.1.74" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.842869][ T634] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 41.075454][ T646] loop3: detected capacity change from 0 to 256 [ 41.774767][ T352] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.812447][ T634] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.998058][ T634] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.74: bad orphan inode 267 [ 43.023868][ T28] audit: type=1400 audit(1754734750.274:222): avc: denied { ioctl } for pid=639 comm="syz.2.76" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17508 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.050540][ T634] EXT4-fs (loop1): Remounting filesystem read-only [ 43.057059][ T634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.273807][ T659] loop3: detected capacity change from 0 to 256 [ 43.280392][ T659] exfat: Unknown parameter '' [ 43.350683][ T634] EXT4-fs (loop1): unmounting filesystem. [ 44.234428][ T352] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.244749][ T658] loop3: detected capacity change from 0 to 512 [ 44.528288][ T669] incfs: Backing dir is not set, filesystem can't be mounted. [ 44.535880][ T669] incfs: mount failed -2 [ 44.547911][ T669] 9pnet: Could not find request transport: f`Тем [ 44.547911][ T669] no=0xffffffffffffffff [ 44.549844][ C1] sched: RT throttling activated [ 44.581831][ T658] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.590969][ T658] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.606519][ T658] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.79: iget: bad i_size value: 2533274857506816 [ 44.683769][ T674] loop1: detected capacity change from 0 to 512 [ 44.690721][ T674] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.702806][ T674] EXT4-fs (loop1): 1 truncate cleaned up [ 44.708471][ T674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.718281][ T28] audit: type=1400 audit(1754734751.884:223): avc: denied { create } for pid=654 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.819253][ T283] EXT4-fs (loop3): unmounting filesystem. [ 44.826111][ T284] EXT4-fs (loop1): unmounting filesystem. [ 44.876751][ T685] loop3: detected capacity change from 0 to 128 [ 45.577526][ T693] netlink: 56 bytes leftover after parsing attributes in process `syz.1.88'. [ 45.939922][ T28] audit: type=1400 audit(1754734753.214:224): avc: denied { relabelfrom } for pid=697 comm="syz.4.92" name="" dev="pipefs" ino=18578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 45.965673][ T702] FAULT_INJECTION: forcing a failure. [ 45.965673][ T702] name failslab, interval 1, probability 0, space 0, times 0 [ 45.977480][ T699] loop4: detected capacity change from 0 to 512 [ 45.997377][ T702] CPU: 1 PID: 702 Comm: syz.2.91 Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 46.006947][ T702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.016986][ T702] Call Trace: [ 46.020250][ T702] [ 46.023163][ T702] __dump_stack+0x21/0x24 [ 46.027480][ T702] dump_stack_lvl+0xee/0x150 [ 46.032054][ T702] ? __cfi_dump_stack_lvl+0x8/0x8 [ 46.037062][ T702] dump_stack+0x15/0x24 [ 46.041198][ T702] should_fail_ex+0x3d4/0x520 [ 46.045861][ T702] __should_failslab+0xac/0xf0 [ 46.050605][ T702] ? alloc_fdtable+0xb4/0x2b0 [ 46.055275][ T702] should_failslab+0x9/0x20 [ 46.059758][ T702] __kmem_cache_alloc_node+0x3d/0x2c0 [ 46.065108][ T702] ? alloc_fdtable+0xb4/0x2b0 [ 46.069764][ T702] kmalloc_trace+0x29/0xb0 [ 46.074162][ T702] alloc_fdtable+0xb4/0x2b0 [ 46.078644][ T702] ? _find_last_bit+0x7c/0x120 [ 46.083389][ T702] dup_fd+0x668/0x8f0 [ 46.087380][ T702] ksys_unshare+0x436/0x7b0 [ 46.091865][ T702] ? __cfi_ksys_unshare+0x10/0x10 [ 46.096875][ T702] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 46.102926][ T702] __x64_sys_unshare+0x38/0x40 [ 46.107674][ T702] x64_sys_call+0x767/0x9a0 [ 46.112157][ T702] do_syscall_64+0x4c/0xa0 [ 46.116554][ T702] ? clear_bhb_loop+0x30/0x80 [ 46.121214][ T702] ? clear_bhb_loop+0x30/0x80 [ 46.125881][ T702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.131753][ T702] RIP: 0033:0x7f78c9f8ebe9 [ 46.136146][ T702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.155727][ T702] RSP: 002b:00007f78caec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 46.164134][ T702] RAX: ffffffffffffffda RBX: 00007f78ca1b5fa0 RCX: 00007f78c9f8ebe9 [ 46.172085][ T702] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 46.180035][ T702] RBP: 00007f78caec0090 R08: 0000000000000000 R09: 0000000000000000 [ 46.187985][ T702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.195931][ T702] R13: 00007f78ca1b6038 R14: 00007f78ca1b5fa0 R15: 00007ffc26f63a88 [ 46.203891][ T702] [ 46.220626][ T699] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.92: inode #1: comm syz.4.92: iget: illegal inode # [ 46.238510][ T699] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.92: error while reading EA inode 1 err=-117 [ 46.264264][ T699] EXT4-fs (loop4): 1 orphan inode deleted [ 46.271319][ T699] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.600678][ T721] loop0: detected capacity change from 0 to 512 [ 46.608160][ T721] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.724747][ T287] EXT4-fs (loop4): unmounting filesystem. [ 47.253558][ T721] EXT4-fs (loop0): 1 truncate cleaned up [ 47.259234][ T721] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.319141][ T473] EXT4-fs (loop0): unmounting filesystem. [ 47.337304][ T726] loop4: detected capacity change from 0 to 512 [ 47.401981][ T726] EXT4-fs (loop4): Test dummy encryption mode enabled [ 47.469057][ T726] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.480853][ T726] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.99: inode #13: comm syz.4.99: iget: illegal inode # [ 47.508044][ T726] EXT4-fs (loop4): Remounting filesystem read-only [ 47.524762][ T726] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.99: couldn't read orphan inode 13 (err -117) [ 47.579546][ T732] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 47.642667][ T28] audit: type=1400 audit(1754734754.844:225): avc: denied { mount } for pid=727 comm="syz.0.100" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 47.710695][ T726] EXT4-fs (loop4): Remounting filesystem read-only [ 47.732606][ T726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.654068][ T28] audit: type=1400 audit(1754734755.314:226): avc: denied { create } for pid=725 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.656291][ T287] EXT4-fs (loop4): unmounting filesystem. [ 48.674259][ T28] audit: type=1400 audit(1754734755.324:227): avc: denied { write } for pid=725 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.733894][ T28] audit: type=1400 audit(1754734755.324:228): avc: denied { nlmsg_write } for pid=725 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.771017][ T747] loop3: detected capacity change from 0 to 512 [ 48.878160][ T747] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.170282][ T753] netlink: 148 bytes leftover after parsing attributes in process `syz.2.106'. [ 49.179339][ T753] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 49.605513][ T28] audit: type=1400 audit(1754734756.084:229): avc: denied { unmount } for pid=473 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.668705][ T747] EXT4-fs: failed to create workqueue [ 51.674508][ T747] EXT4-fs (loop3): mount failed [ 53.251751][ T784] loop3: detected capacity change from 0 to 128 [ 53.299105][ T785] loop2: detected capacity change from 0 to 256 [ 53.317069][ T785] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205a2abe, utbl_chksum : 0xe619d30d) [ 53.370794][ T780] bridge: RTM_NEWNEIGH with invalid ether address [ 53.381875][ T780] loop0: detected capacity change from 0 to 1024 [ 53.388858][ T780] EXT4-fs: Ignoring removed bh option [ 53.402455][ T771] loop4: detected capacity change from 0 to 40427 [ 53.441550][ T771] F2FS-fs (loop4): invalid crc value [ 53.453110][ T771] F2FS-fs (loop4): Found nat_bits in checkpoint [ 53.492485][ T780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 53.575996][ T771] F2FS-fs (loop4): Start checkpoint disabled! [ 53.620174][ T771] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 53.814561][ T28] audit: type=1400 audit(1754734761.094:230): avc: denied { setattr } for pid=779 comm="syz.0.114" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.298980][ T28] audit: type=1400 audit(1754734762.574:231): avc: denied { create } for pid=805 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 55.483580][ T816] loop2: detected capacity change from 0 to 256 [ 55.525999][ T816] exfat: Deprecated parameter 'namecase' [ 55.549617][ T816] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 55.692307][ T473] EXT4-fs (loop0): unmounting filesystem. [ 56.524791][ T827] netlink: 148 bytes leftover after parsing attributes in process `syz.4.123'. [ 56.533861][ T827] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 57.078891][ T837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=837 comm=syz.1.126 [ 57.120954][ T28] audit: type=1400 audit(1754734764.354:232): avc: denied { read write } for pid=838 comm="syz.2.127" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 57.145791][ T28] audit: type=1400 audit(1754734764.354:233): avc: denied { open } for pid=838 comm="syz.2.127" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 57.261292][ T837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 57.819021][ T28] audit: type=1400 audit(1754734765.094:234): avc: denied { create } for pid=854 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 57.833300][ T857] syz.4.129 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.868892][ T28] audit: type=1400 audit(1754734765.144:235): avc: denied { load_policy } for pid=854 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 57.869934][ T855] SELinux: failed to load policy [ 57.982454][ T859] loop2: detected capacity change from 0 to 1024 [ 57.994689][ T859] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 58.017453][ T859] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.026476][ T859] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.038847][ T859] FAULT_INJECTION: forcing a failure. [ 58.038847][ T859] name failslab, interval 1, probability 0, space 0, times 0 [ 58.051583][ T859] CPU: 1 PID: 859 Comm: syz.2.133 Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 58.061207][ T859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.071237][ T859] Call Trace: [ 58.074495][ T859] [ 58.077412][ T859] __dump_stack+0x21/0x24 [ 58.081724][ T859] dump_stack_lvl+0xee/0x150 [ 58.086306][ T859] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.091332][ T859] ? __find_get_block+0xafd/0xee0 [ 58.096347][ T859] dump_stack+0x15/0x24 [ 58.100495][ T859] should_fail_ex+0x3d4/0x520 [ 58.105157][ T859] ? mb_cache_entry_create+0x166/0x7a0 [ 58.110598][ T859] __should_failslab+0xac/0xf0 [ 58.115349][ T859] should_failslab+0x9/0x20 [ 58.119838][ T859] kmem_cache_alloc+0x3b/0x330 [ 58.124584][ T859] ? kasan_set_track+0x60/0x70 [ 58.129324][ T859] mb_cache_entry_create+0x166/0x7a0 [ 58.134591][ T859] ? __kasan_check_read+0x11/0x20 [ 58.139608][ T859] ext4_xattr_get+0x339/0x650 [ 58.144267][ T859] ext4_xattr_security_get+0x32/0x40 [ 58.149537][ T859] ? __cfi_ext4_xattr_security_get+0x10/0x10 [ 58.155509][ T859] __vfs_getxattr+0x3b1/0x3e0 [ 58.160171][ T859] cap_inode_need_killpriv+0x45/0x60 [ 58.165446][ T859] security_inode_need_killpriv+0x73/0xa0 [ 58.171154][ T859] __file_remove_privs+0x225/0x5c0 [ 58.176247][ T859] ? file_remove_privs+0x20/0x20 [ 58.181165][ T859] ? current_time+0x1c2/0x2b0 [ 58.185821][ T859] ? __cfi_current_time+0x10/0x10 [ 58.190824][ T859] file_modified_flags+0xac/0x430 [ 58.195828][ T859] ? file_modified+0x20/0x20 [ 58.200397][ T859] file_modified+0x17/0x20 [ 58.204791][ T859] ext4_buffered_write_iter+0x316/0x660 [ 58.210317][ T859] ext4_file_write_iter+0x18f/0x13d0 [ 58.215583][ T859] ? stack_trace_save+0x98/0xe0 [ 58.220414][ T859] ? __stack_depot_save+0x36/0x480 [ 58.225508][ T859] ? _parse_integer_limit+0x18a/0x1d0 [ 58.230859][ T859] ? avc_policy_seqno+0x1b/0x70 [ 58.235693][ T859] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 58.241397][ T859] ? fsnotify_perm+0x67/0x5b0 [ 58.246050][ T859] ? security_file_permission+0x8a/0xb0 [ 58.251576][ T859] do_iter_write+0x650/0xb10 [ 58.256149][ T859] ? _copy_from_user+0x8f/0xc0 [ 58.260891][ T859] ? vfs_iter_write+0xa0/0xa0 [ 58.265553][ T859] ? import_iovec+0x7c/0xb0 [ 58.270035][ T859] vfs_writev+0x30b/0x590 [ 58.274350][ T859] ? do_writev+0x2b0/0x2b0 [ 58.278746][ T859] ? __bpf_ringbuf_reserve+0x436/0x500 [ 58.284191][ T859] ? __fdget+0x19c/0x220 [ 58.288421][ T859] ? __se_sys_pwritev2+0xad/0x2b0 [ 58.293424][ T859] __se_sys_pwritev2+0x1a9/0x2b0 [ 58.298341][ T859] ? __x64_sys_pwritev2+0xd0/0xd0 [ 58.303342][ T859] ? __cfi_ksys_write+0x10/0x10 [ 58.308176][ T859] ? __bpf_trace_sys_enter+0x62/0x70 [ 58.313437][ T859] __x64_sys_pwritev2+0xbf/0xd0 [ 58.318266][ T859] x64_sys_call+0x2d6/0x9a0 [ 58.322748][ T859] do_syscall_64+0x4c/0xa0 [ 58.327154][ T859] ? clear_bhb_loop+0x30/0x80 [ 58.331813][ T859] ? clear_bhb_loop+0x30/0x80 [ 58.336470][ T859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.342342][ T859] RIP: 0033:0x7f78c9f8ebe9 [ 58.346737][ T859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.366317][ T859] RSP: 002b:00007f78caec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 58.374712][ T859] RAX: ffffffffffffffda RBX: 00007f78ca1b5fa0 RCX: 00007f78c9f8ebe9 [ 58.382669][ T859] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007 [ 58.390620][ T859] RBP: 00007f78caec0090 R08: 0000000000000000 R09: 0000000000000000 [ 58.398568][ T859] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000001 [ 58.406516][ T859] R13: 00007f78ca1b6038 R14: 00007f78ca1b5fa0 R15: 00007ffc26f63a88 [ 58.414469][ T859] [ 58.420018][ T859] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 58.435096][ T859] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 58.447708][ T859] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.447708][ T859] [ 58.457413][ T859] EXT4-fs (loop2): Total free blocks count 0 [ 58.463537][ T859] EXT4-fs (loop2): Free/Dirty block details [ 58.469483][ T859] EXT4-fs (loop2): free_blocks=4293918720 [ 58.475331][ T859] EXT4-fs (loop2): dirty_blocks=64 [ 58.480497][ T859] EXT4-fs (loop2): Block reservation details [ 58.495414][ T859] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 58.510832][ T28] audit: type=1400 audit(1754734765.794:236): avc: denied { create } for pid=866 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.545383][ T285] EXT4-fs (loop2): unmounting filesystem. [ 58.632102][ T876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=876 comm=syz.4.138 [ 58.656868][ T876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'. [ 59.724054][ T889] netlink: 148 bytes leftover after parsing attributes in process `syz.4.140'. [ 59.733048][ T889] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 60.604703][ T903] incfs: Backing dir is not set, filesystem can't be mounted. [ 60.624828][ T905] loop0: detected capacity change from 0 to 1024 [ 60.634961][ T905] EXT4-fs: Ignoring removed bh option [ 60.640828][ T903] incfs: mount failed -2 [ 60.649294][ T903] 9pnet: Could not find request transport: f`Тем [ 60.649294][ T903] no=0x000000000000000a [ 60.667713][ T905] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 60.705887][ T28] audit: type=1400 audit(1754734767.984:237): avc: denied { mounton } for pid=904 comm="syz.0.144" path="/21/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.705949][ T905] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 60.788101][ T905] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 60.889748][ T473] EXT4-fs error (device loop0): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 60.912242][ T473] EXT4-fs (loop0): Remounting filesystem read-only [ 60.919305][ T473] EXT4-fs error (device loop0): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 60.941827][ T473] EXT4-fs (loop0): Remounting filesystem read-only [ 60.948448][ T473] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 60.968996][ T473] EXT4-fs (loop0): Remounting filesystem read-only [ 60.977045][ T473] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 60.993889][ T473] EXT4-fs error (device loop0): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 61.021127][ T473] EXT4-fs (loop0): Remounting filesystem read-only [ 61.028148][ T473] EXT4-fs error (device loop0): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 61.051228][ T473] EXT4-fs (loop0): Remounting filesystem read-only [ 61.057977][ T473] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 61.078029][ T473] EXT4-fs (loop0): Remounting filesystem read-only [ 61.084899][ T473] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.099566][ T473] EXT4-fs error (device loop0): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 61.121912][ T473] EXT4-fs (loop0): Remounting filesystem read-only [ 61.128483][ T473] EXT4-fs error (device loop0): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 61.129612][ T928] loop1: detected capacity change from 0 to 40427 [ 61.151265][ T473] EXT4-fs (loop0): Remounting filesystem read-only [ 61.163589][ T473] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 61.167557][ T928] F2FS-fs (loop1): invalid crc value [ 61.188789][ T473] EXT4-fs (loop0): Remounting filesystem read-only [ 61.191639][ T928] F2FS-fs (loop1): Found nat_bits in checkpoint [ 61.195711][ T473] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.216189][ T473] EXT4-fs error (device loop0): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 61.224297][ T928] F2FS-fs (loop1): Start checkpoint disabled! [ 61.240067][ T473] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.244992][ T928] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 61.259302][ T473] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.280883][ T473] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.295916][ T473] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.310911][ T473] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.326382][ T473] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.347327][ T473] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 61.750279][ T940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 61.752300][ T28] audit: type=1400 audit(1754734769.034:238): avc: denied { write } for pid=932 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.779914][ T940] netlink: 'syz.4.153': attribute type 3 has an invalid length. [ 61.915513][ T952] loop3: detected capacity change from 0 to 128 [ 62.061947][ T28] audit: type=1400 audit(1754734769.344:239): avc: denied { mounton } for pid=953 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.485286][ T953] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.492481][ T953] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.939477][ T953] device bridge_slave_0 entered promiscuous mode [ 65.008658][ T953] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.025057][ T953] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.050129][ T953] device bridge_slave_1 entered promiscuous mode [ 65.257821][ T8] device bridge_slave_1 left promiscuous mode [ 65.555664][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.644390][ T8] device bridge_slave_0 left promiscuous mode [ 65.661202][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.674588][ T8] device veth1_macvtap left promiscuous mode [ 65.694004][ T8] device veth0_vlan left promiscuous mode [ 65.701833][ T28] audit: type=1400 audit(1754734772.974:240): avc: denied { name_bind } for pid=991 comm="syz.3.171" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 65.707416][ T992] 9pnet_fd: Insufficient options for proto=fd [ 66.155537][ T28] audit: type=1400 audit(1754734773.094:241): avc: denied { bind } for pid=985 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.819945][ T350] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 67.004468][ T28] audit: type=1400 audit(1754734774.284:242): avc: denied { ioctl } for pid=1011 comm="syz.1.177" path="socket:[19479]" dev="sockfs" ino=19479 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.079957][ T350] usb 4-1: Using ep0 maxpacket: 16 [ 67.087274][ T350] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.204943][ T350] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 67.305917][ T350] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 67.446344][ T350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.543470][ T350] usb 4-1: Product: syz [ 67.591613][ T350] usb 4-1: Manufacturer: syz [ 67.644877][ T350] usb 4-1: SerialNumber: syz [ 67.843233][ T953] device veth0_vlan entered promiscuous mode [ 67.871093][ T953] device veth1_macvtap entered promiscuous mode [ 67.891398][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.899690][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.915254][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.923993][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.932470][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.947420][ T350] usb 4-1: config 0 descriptor?? [ 67.964661][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.979152][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.997632][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.005325][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.013019][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.021618][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.031397][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.038430][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.047360][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.056990][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.066623][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.073677][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.117944][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.152172][ T1028] fuse: Bad value for 'fd' [ 68.166024][ T1028] input: syz0 as /devices/virtual/input/input5 [ 68.180608][ T28] audit: type=1400 audit(1754734775.464:243): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=697 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.221019][ T1029] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.244066][ T350] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 68.257455][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.267832][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.278263][ T350] asix: probe of 4-1:0.0 failed with error -71 [ 68.284688][ T28] audit: type=1400 audit(1754734775.464:244): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=697 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.290981][ T350] usb 4-1: USB disconnect, device number 3 [ 68.310049][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.330315][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.338658][ T28] audit: type=1400 audit(1754734775.464:245): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=697 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.403216][ T28] audit: type=1400 audit(1754734775.684:246): avc: denied { mounton } for pid=953 comm="syz-executor" path="/root/syzkaller.m5AVml/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.573800][ T1035] loop5: detected capacity change from 0 to 128 [ 69.458437][ T1045] bridge: RTM_NEWNEIGH with invalid ether address [ 71.903633][ T1074] loop3: detected capacity change from 0 to 512 [ 71.969144][ T1074] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.979220][ T28] audit: type=1400 audit(1754734779.254:247): avc: denied { ioctl } for pid=1079 comm="syz.1.191" path="socket:[20667]" dev="sockfs" ino=20667 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.119874][ T1074] EXT4-fs (loop3): 1 truncate cleaned up [ 72.125565][ T1074] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.211405][ T1088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 72.229355][ T1088] device bridge0 entered promiscuous mode [ 72.237044][ T1088] bridge0: port 3(macsec1) entered blocking state [ 72.243750][ T1088] bridge0: port 3(macsec1) entered disabled state [ 72.254745][ T1088] device bridge0 left promiscuous mode [ 72.489306][ T1094] incfs: Backing dir is not set, filesystem can't be mounted. [ 72.500120][ T1094] incfs: mount failed -2 [ 72.509386][ T1094] 9pnet: Could not find request transport: f`Тем [ 72.509386][ T1094] no=0x000000000000000a [ 72.655222][ T1096] loop4: detected capacity change from 0 to 1024 [ 73.761000][ T1116] FAULT_INJECTION: forcing a failure. [ 73.761000][ T1116] name failslab, interval 1, probability 0, space 0, times 0 [ 73.773740][ T28] audit: type=1400 audit(1754734781.044:248): avc: denied { map } for pid=1111 comm="syz.2.198" path="socket:[19797]" dev="sockfs" ino=19797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 73.797423][ T1116] CPU: 1 PID: 1116 Comm: syz.2.198 Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 73.807132][ T1116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.817165][ T1116] Call Trace: [ 73.820421][ T1116] [ 73.823331][ T1116] __dump_stack+0x21/0x24 [ 73.827667][ T1116] dump_stack_lvl+0xee/0x150 [ 73.832249][ T1116] ? __cfi_dump_stack_lvl+0x8/0x8 [ 73.837253][ T1116] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 73.843906][ T1116] dump_stack+0x15/0x24 [ 73.848043][ T1116] should_fail_ex+0x3d4/0x520 [ 73.852702][ T1116] __should_failslab+0xac/0xf0 [ 73.857446][ T1116] ? percpu_ref_init+0xce/0x350 [ 73.862279][ T1116] should_failslab+0x9/0x20 [ 73.866774][ T1116] __kmem_cache_alloc_node+0x3d/0x2c0 [ 73.872126][ T1116] ? percpu_ref_init+0xce/0x350 [ 73.876959][ T1116] kmalloc_trace+0x29/0xb0 [ 73.881357][ T1116] percpu_ref_init+0xce/0x350 [ 73.886016][ T1116] ? __cfi_free_ioctx_reqs+0x10/0x10 [ 73.891367][ T1116] ioctx_alloc+0x265/0x730 [ 73.895766][ T1116] __se_sys_io_setup+0x6f/0x230 [ 73.900595][ T1116] __x64_sys_io_setup+0x5b/0x70 [ 73.905422][ T1116] x64_sys_call+0x840/0x9a0 [ 73.909904][ T1116] do_syscall_64+0x4c/0xa0 [ 73.914302][ T1116] ? clear_bhb_loop+0x30/0x80 [ 73.918961][ T1116] ? clear_bhb_loop+0x30/0x80 [ 73.923619][ T1116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.929492][ T1116] RIP: 0033:0x7f78c9f8ebe9 [ 73.933897][ T1116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.953489][ T1116] RSP: 002b:00007f78cae7e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 73.961893][ T1116] RAX: ffffffffffffffda RBX: 00007f78ca1b6180 RCX: 00007f78c9f8ebe9 [ 73.969854][ T1116] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0 [ 73.977806][ T1116] RBP: 00007f78cae7e090 R08: 0000000000000000 R09: 0000000000000000 [ 73.985753][ T1116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.993700][ T1116] R13: 00007f78ca1b6218 R14: 00007f78ca1b6180 R15: 00007ffc26f63a88 [ 74.001660][ T1116] [ 74.120648][ T1120] fuse: Bad value for 'fd' [ 74.132151][ T1120] input: syz0 as /devices/virtual/input/input6 [ 74.690209][ T1124] loop4: detected capacity change from 0 to 1024 [ 74.716374][ T1124] EXT4-fs: Ignoring removed i_version option [ 74.801382][ T1124] EXT4-fs (loop4): Test dummy encryption mode enabled [ 74.964838][ T1124] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.035548][ T1124] fscrypt: AES-256-XTS using blk-crypto-fallback [ 75.075696][ T28] audit: type=1400 audit(1754734782.354:249): avc: denied { read append open } for pid=1123 comm="syz.4.201" path="/43/file0/cpuset.effective_mems" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.101948][ T283] EXT4-fs (loop3): unmounting filesystem. [ 75.183956][ T1134] loop3: detected capacity change from 0 to 128 [ 75.204121][ T28] audit: type=1400 audit(1754734782.484:250): avc: denied { map } for pid=1123 comm="syz.4.201" path="/43/file0/cpuset.effective_mems" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.230464][ T1134] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.254869][ T1124] bridge0: port 3(vlan2) entered blocking state [ 75.267273][ T28] audit: type=1400 audit(1754734782.484:251): avc: denied { write } for pid=1123 comm="syz.4.201" path="/43/file0/cpuset.effective_mems" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.273530][ T1124] bridge0: port 3(vlan2) entered disabled state [ 75.319936][ T1134] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.359159][ T28] audit: type=1400 audit(1754734782.634:252): avc: denied { watch watch_reads } for pid=1133 comm="syz.3.203" path="/33/file1" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 76.282339][ T366] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.297039][ T287] EXT4-fs (loop4): unmounting filesystem. [ 77.331508][ T28] audit: type=1400 audit(1754734784.614:253): avc: denied { create } for pid=1147 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.468151][ T28] audit: type=1400 audit(1754734784.744:254): avc: denied { write } for pid=1147 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.041774][ T1182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.212'. [ 78.082688][ T1182] device bridge0 entered promiscuous mode [ 78.094537][ T1182] bridge0: port 3(macsec1) entered blocking state [ 78.101081][ T1182] bridge0: port 3(macsec1) entered disabled state [ 78.564019][ T1182] device bridge0 left promiscuous mode [ 78.573738][ T1173] netlink: 44 bytes leftover after parsing attributes in process `syz.4.208'. [ 79.821615][ T1224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 79.859402][ T1224] device bridge0 entered promiscuous mode [ 79.870804][ T1224] bridge0: port 3(macsec1) entered blocking state [ 79.877285][ T1224] bridge0: port 3(macsec1) entered disabled state [ 80.473426][ T1224] device bridge0 left promiscuous mode [ 81.409655][ T1242] loop1: detected capacity change from 0 to 128 [ 81.433238][ T1242] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.446435][ T1242] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.462329][ T1242] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 81.472017][ T28] audit: type=1400 audit(1754734788.754:255): avc: denied { remount } for pid=1241 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.512925][ T1249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1249 comm=syz.2.229 [ 81.526796][ T1249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 81.567359][ T1250] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 81.664331][ T1256] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1256 comm=syz.2.232 [ 81.679158][ T1256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 81.739878][ T442] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.778539][ T1260] loop2: detected capacity change from 0 to 256 [ 81.789692][ T1260] FAT-fs (loop2): Directory bread(block 64) failed [ 81.796669][ T1260] FAT-fs (loop2): Directory bread(block 65) failed [ 81.803446][ T1260] FAT-fs (loop2): Directory bread(block 66) failed [ 81.810207][ T1260] FAT-fs (loop2): Directory bread(block 67) failed [ 81.816867][ T1260] FAT-fs (loop2): Directory bread(block 68) failed [ 81.823566][ T1260] FAT-fs (loop2): Directory bread(block 69) failed [ 81.830170][ T1260] FAT-fs (loop2): Directory bread(block 70) failed [ 81.836833][ T1260] FAT-fs (loop2): Directory bread(block 71) failed [ 81.843573][ T1260] FAT-fs (loop2): Directory bread(block 72) failed [ 81.850221][ T1260] FAT-fs (loop2): Directory bread(block 73) failed [ 81.904601][ T1262] loop3: detected capacity change from 0 to 512 [ 81.929856][ T442] usb 2-1: Using ep0 maxpacket: 16 [ 81.937601][ T442] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.943657][ T1262] EXT4-fs (loop3): Test dummy encryption mode enabled [ 81.958564][ T442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 81.972876][ T28] audit: type=1400 audit(1754734789.254:256): avc: denied { shutdown } for pid=1259 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.997194][ T1262] EXT4-fs (loop3): orphan cleanup on readonly fs [ 81.999896][ T442] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 82.009890][ T1262] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.235: inode #13: comm syz.3.235: iget: illegal inode # [ 82.032584][ T442] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 82.049863][ T442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.050098][ T1262] EXT4-fs (loop3): Remounting filesystem read-only [ 82.057889][ T442] usb 2-1: Product: syz [ 82.068539][ T442] usb 2-1: Manufacturer: syz [ 82.073183][ T442] usb 2-1: SerialNumber: syz [ 82.083861][ T1262] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.235: couldn't read orphan inode 13 (err -117) [ 82.087450][ T442] usb 2-1: config 0 descriptor?? [ 82.116821][ T1262] EXT4-fs (loop3): Remounting filesystem read-only [ 82.127551][ T1262] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.179202][ T575] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 83.190652][ T1242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.199098][ T1242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.222352][ T283] EXT4-fs (loop3): unmounting filesystem. [ 83.234807][ T1278] usb 2-1: USB disconnect, device number 2 [ 83.470750][ T1279] loop4: detected capacity change from 0 to 256 [ 83.479268][ T1279] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.532663][ T1279] FAT-fs (loop4): Directory bread(block 64) failed [ 83.539228][ T1279] FAT-fs (loop4): Directory bread(block 65) failed [ 83.545918][ T1279] FAT-fs (loop4): Directory bread(block 66) failed [ 83.552484][ T1279] FAT-fs (loop4): Directory bread(block 67) failed [ 83.559134][ T1279] FAT-fs (loop4): Directory bread(block 68) failed [ 83.565697][ T1279] FAT-fs (loop4): Directory bread(block 69) failed [ 83.572352][ T1279] FAT-fs (loop4): Directory bread(block 70) failed [ 83.578899][ T1279] FAT-fs (loop4): Directory bread(block 71) failed [ 83.585575][ T1279] FAT-fs (loop4): Directory bread(block 72) failed [ 83.592134][ T1279] FAT-fs (loop4): Directory bread(block 73) failed [ 83.612941][ T575] usb 3-1: device descriptor read/64, error -71 [ 84.094652][ T284] EXT4-fs (loop1): unmounting filesystem. [ 84.121046][ T575] usb 3-1: device descriptor read/64, error -71 [ 84.175658][ T1286] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1286 comm=syz.4.241 [ 84.202068][ T1286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 84.325863][ T28] audit: type=1400 audit(1754734791.604:257): avc: denied { relabelfrom } for pid=1292 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.346573][ T28] audit: type=1400 audit(1754734791.604:258): avc: denied { relabelto } for pid=1292 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 86.344949][ T575] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 86.670414][ T28] audit: type=1400 audit(1754734793.944:259): avc: denied { read } for pid=1310 comm="syz.2.249" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.721312][ T28] audit: type=1400 audit(1754734793.944:260): avc: denied { open } for pid=1310 comm="syz.2.249" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.754841][ T1315] input: syz1 as /devices/virtual/input/input7 [ 86.763198][ T28] audit: type=1400 audit(1754734794.044:261): avc: denied { write } for pid=1316 comm="syz.5.251" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.792406][ T28] audit: type=1400 audit(1754734794.064:262): avc: denied { map } for pid=1316 comm="syz.5.251" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.866697][ T1319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 87.686424][ T1319] device bridge0 entered promiscuous mode [ 87.693969][ T1319] bridge0: port 3(macsec1) entered blocking state [ 87.700564][ T1319] bridge0: port 3(macsec1) entered disabled state [ 87.707792][ T1319] device bridge0 left promiscuous mode [ 87.847058][ T1334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 87.856761][ T1334] device bridge0 entered promiscuous mode [ 87.863271][ T1334] bridge0: port 3(macsec1) entered blocking state [ 87.869712][ T1334] bridge0: port 3(macsec1) entered disabled state [ 87.877007][ T1334] device bridge0 left promiscuous mode [ 88.246635][ T1347] 9pnet: Could not find request transport: f`Тем [ 88.246635][ T1347] no=0x000000000000000b [ 88.323320][ T1356] incfs: Backing dir is not set, filesystem can't be mounted. [ 88.330937][ T1356] incfs: mount failed -2 [ 88.336457][ T1356] 9pnet: Could not find request transport: f`Тем [ 88.336457][ T1356] no=0x0000000000000009 [ 89.222189][ T1361] FAULT_INJECTION: forcing a failure. [ 89.222189][ T1361] name failslab, interval 1, probability 0, space 0, times 0 [ 89.234891][ T1361] CPU: 0 PID: 1361 Comm: syz.5.264 Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 89.244610][ T1361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.254652][ T1361] Call Trace: [ 89.257926][ T1361] [ 89.260845][ T1361] __dump_stack+0x21/0x24 [ 89.265179][ T1361] dump_stack_lvl+0xee/0x150 [ 89.269764][ T1361] ? __cfi_dump_stack_lvl+0x8/0x8 [ 89.274783][ T1361] ? call_rcu+0xb83/0xf90 [ 89.279105][ T1361] ? exit_to_user_mode_loop+0x9b/0xb0 [ 89.284468][ T1361] dump_stack+0x15/0x24 [ 89.288621][ T1361] should_fail_ex+0x3d4/0x520 [ 89.293294][ T1361] __should_failslab+0xac/0xf0 [ 89.298049][ T1361] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 89.304019][ T1361] should_failslab+0x9/0x20 [ 89.308516][ T1361] __kmem_cache_alloc_node+0x3d/0x2c0 [ 89.313878][ T1361] ? __cfi_mutex_lock+0x10/0x10 [ 89.318730][ T1361] ? delete_node+0x2b3/0xa60 [ 89.323311][ T1361] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 89.329281][ T1361] __kmalloc+0xa1/0x1e0 [ 89.333432][ T1361] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 89.339495][ T1361] tracepoint_probe_unregister+0x1e6/0x8b0 [ 89.345293][ T1361] bpf_probe_unregister+0x61/0x70 [ 89.350314][ T1361] bpf_raw_tp_link_release+0x63/0x90 [ 89.355591][ T1361] bpf_link_free+0x13a/0x390 [ 89.360176][ T1361] ? bpf_link_put_deferred+0x20/0x20 [ 89.365457][ T1361] ? security_file_free+0xd8/0xf0 [ 89.370471][ T1361] bpf_link_release+0x15f/0x170 [ 89.375318][ T1361] ? __cfi_bpf_link_release+0x10/0x10 [ 89.380676][ T1361] __fput+0x1fc/0x8f0 [ 89.384652][ T1361] ? _raw_spin_unlock+0x4c/0x70 [ 89.389495][ T1361] ____fput+0x15/0x20 [ 89.393468][ T1361] task_work_run+0x1db/0x240 [ 89.398055][ T1361] ? __cfi_task_work_run+0x10/0x10 [ 89.403160][ T1361] ? __cfi___close_range+0x10/0x10 [ 89.408267][ T1361] exit_to_user_mode_loop+0x9b/0xb0 [ 89.413463][ T1361] exit_to_user_mode_prepare+0x5a/0xa0 [ 89.418912][ T1361] syscall_exit_to_user_mode+0x1a/0x30 [ 89.424362][ T1361] do_syscall_64+0x58/0xa0 [ 89.428771][ T1361] ? clear_bhb_loop+0x30/0x80 [ 89.433436][ T1361] ? clear_bhb_loop+0x30/0x80 [ 89.438102][ T1361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.443984][ T1361] RIP: 0033:0x7f098f38ebe9 [ 89.448388][ T1361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.467979][ T1361] RSP: 002b:00007f0990115038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 89.476381][ T1361] RAX: 0000000000000000 RBX: 00007f098f5b6090 RCX: 00007f098f38ebe9 [ 89.484341][ T1361] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 89.492299][ T1361] RBP: 00007f0990115090 R08: 0000000000000000 R09: 0000000000000000 [ 89.500258][ T1361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.508216][ T1361] R13: 00007f098f5b6128 R14: 00007f098f5b6090 R15: 00007ffdab2848b8 [ 89.516183][ T1361] [ 89.519483][ T1358] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 89.531223][ T1358] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 89.537262][ T1358] CPU: 1 PID: 1358 Comm: syz.4.263 Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 89.546968][ T1358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.557006][ T1358] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 89.563137][ T1358] Code: 80 3c 30 00 74 05 e8 74 61 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 89.582730][ T1358] RSP: 0018:ffffc90010ce73d0 EFLAGS: 00010096 [ 89.588775][ T1358] RAX: 1ffff1102181f9a6 RBX: ffff88810c0fcd28 RCX: ffff8881162c5100 [ 89.596717][ T1358] RDX: ffff8881083b0000 RSI: 0000000000000000 RDI: ffffc90010d4f000 [ 89.604659][ T1358] RBP: ffffc90010ce7410 R08: 0000000000000001 R09: 0000000000400000 [ 89.612604][ T1358] R10: 00000000b720eca3 R11: 1ffffffff0ee4a7d R12: 0000000000000000 [ 89.620565][ T1358] R13: ffff88810c0fcd28 R14: dffffc0000000000 R15: ffffffff81711ed0 [ 89.628510][ T1358] FS: 00007ffa9b7946c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 89.637410][ T1358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.643966][ T1358] CR2: 00007ffa9b772f98 CR3: 0000000134c7e000 CR4: 00000000003506a0 [ 89.651923][ T1358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.659873][ T1358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.667821][ T1358] Call Trace: [ 89.671072][ T1358] [ 89.673979][ T1358] __schedule+0x1263/0x14e0 [ 89.678457][ T1358] ? release_firmware_map_entry+0x194/0x194 [ 89.684324][ T1358] ? avc_has_perm+0x158/0x240 [ 89.688977][ T1358] schedule+0xbd/0x170 [ 89.693016][ T1358] schedule_timeout+0xa6/0x2e0 [ 89.697754][ T1358] ? __cfi_schedule_timeout+0x10/0x10 [ 89.703096][ T1358] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 89.708890][ T1358] ? prepare_to_wait_exclusive+0x191/0x1d0 [ 89.714671][ T1358] unix_wait_for_peer+0x1e5/0x2e0 [ 89.719671][ T1358] ? unix_find_other+0x880/0x880 [ 89.724581][ T1358] ? __cfi_autoremove_wake_function+0x10/0x10 [ 89.730618][ T1358] ? __cfi__raw_spin_lock+0x10/0x10 [ 89.735790][ T1358] ? security_unix_may_send+0x8c/0xb0 [ 89.741140][ T1358] unix_dgram_sendmsg+0xed4/0x16d0 [ 89.746224][ T1358] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 89.751745][ T1358] ? security_socket_sendmsg+0x93/0xb0 [ 89.757181][ T1358] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 89.762709][ T1358] ____sys_sendmsg+0x5a9/0x990 [ 89.767446][ T1358] ? _raw_spin_unlock+0x4c/0x70 [ 89.772273][ T1358] ? __sys_sendmsg_sock+0x40/0x40 [ 89.777268][ T1358] ? __schedule+0xb8f/0x14e0 [ 89.781829][ T1358] ? import_iovec+0x7c/0xb0 [ 89.786323][ T1358] ___sys_sendmsg+0x21c/0x290 [ 89.790973][ T1358] ? __sys_sendmsg+0x270/0x270 [ 89.795708][ T1358] ? futex_unqueue+0x132/0x160 [ 89.800444][ T1358] ? __cfi_futex_wait+0x10/0x10 [ 89.805265][ T1358] ? __fdget+0x19c/0x220 [ 89.809485][ T1358] __sys_sendmmsg+0x274/0x460 [ 89.814147][ T1358] ? __cfi___sys_sendmmsg+0x10/0x10 [ 89.819321][ T1358] ? __secure_computing+0xea/0x290 [ 89.824405][ T1358] __x64_sys_sendmmsg+0xa0/0xb0 [ 89.829223][ T1358] x64_sys_call+0x3f5/0x9a0 [ 89.833710][ T1358] do_syscall_64+0x4c/0xa0 [ 89.838101][ T1358] ? clear_bhb_loop+0x30/0x80 [ 89.842750][ T1358] ? clear_bhb_loop+0x30/0x80 [ 89.847396][ T1358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.853258][ T1358] RIP: 0033:0x7ffa9a98ebe9 [ 89.857648][ T1358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.877225][ T1358] RSP: 002b:00007ffa9b794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 89.885607][ T1358] RAX: ffffffffffffffda RBX: 00007ffa9abb5fa0 RCX: 00007ffa9a98ebe9 [ 89.893552][ T1358] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000005 [ 89.901503][ T1358] RBP: 00007ffa9aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 89.909472][ T1358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.917425][ T1358] R13: 00007ffa9abb6038 R14: 00007ffa9abb5fa0 R15: 00007ffe08751758 [ 89.925387][ T1358] [ 89.928385][ T1358] Modules linked in: [ 89.932262][ T1358] ---[ end trace 0000000000000000 ]--- [ 89.937689][ T1358] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 89.943823][ T1358] Code: 80 3c 30 00 74 05 e8 74 61 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 89.963402][ T1358] RSP: 0018:ffffc90010ce73d0 EFLAGS: 00010096 [ 89.969441][ T1358] RAX: 1ffff1102181f9a6 RBX: ffff88810c0fcd28 RCX: ffff8881162c5100 [ 89.977382][ T1358] RDX: ffff8881083b0000 RSI: 0000000000000000 RDI: ffffc90010d4f000 [ 89.985324][ T1358] RBP: ffffc90010ce7410 R08: 0000000000000001 R09: 0000000000400000 [ 89.993269][ T1358] R10: 00000000b720eca3 R11: 1ffffffff0ee4a7d R12: 0000000000000000 [ 90.001211][ T1358] R13: ffff88810c0fcd28 R14: dffffc0000000000 R15: ffffffff81711ed0 [ 90.009159][ T1358] FS: 00007ffa9b7946c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 90.018065][ T1358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.024631][ T1358] CR2: 00007ffa9b772f98 CR3: 0000000134c7e000 CR4: 00000000003506a0 [ 90.032581][ T1358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.040529][ T1358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.048477][ T1358] Kernel panic - not syncing: Fatal exception [ 91.155353][ T1358] Shutting down cpus with NMI [ 91.160286][ T1358] Kernel Offset: disabled [ 91.164592][ T1358] Rebooting in 86400 seconds..