last executing test programs: 13.539575008s ago: executing program 0 (id=231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000010000000000001302000000002e5f300024d82a62007fda45d637a7887a5b9eea353deb20bec81db41647975909f9fcfd7312d23c75da3f5d8a28172ccebb157da1b91a159ce5d6829bacde9c2d0efb87"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0002000000000100"/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) sigaltstack(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/20, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r9, &(0x7f0000000000)="fa", 0xfffffdef) 12.402585466s ago: executing program 0 (id=235): syz_emit_ethernet(0x9a, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x64, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {}]}}}}}}, 0x0) 12.349117737s ago: executing program 0 (id=237): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = io_uring_setup(0x3b69, &(0x7f0000001d80)={0x0, 0x714, 0x2, 0x1, 0x3d7}) io_uring_enter(r6, 0x5756, 0x9d76, 0x5, &(0x7f0000001e00), 0x8) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) socket(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0xfffffffc, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7ff, 0xfffffffc, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x45c) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 10.830895638s ago: executing program 4 (id=241): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000006d0000009500"/25], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x101ff, 0x2, 0xeeef0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe8000008737614d1d322de6e3e11a0000000000000000000000bbfe80c44a3d87e4a700000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}}}, 0x50}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000ca21a9fd43db2d67716ed02ba2ba329e8caaf96512ebd7899962c024d607678c07ad3852292218dceff1231a41bece6a9d26cdca468b40e89cfb6352d69656ef8dc3ed8568"], 0x0) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x6, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xf6, &(0x7f0000000180)=""/246, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = getpid() (async) setresgid(0xee00, 0xee01, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r8, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) (async) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file0\x00', 0x14d842, 0x5) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r7, r6, 0x0, 0x108, &(0x7f0000000380)='\x02a%hi/g\xa4H\x1dCj\xa8\xbe%1\x04M\xe1\xdc\xe9\xa7a\x9a\xb4\x90}\x8c.\x1f\xf7Qk!Y4\xc9\xa1\xd3\x04A\x1c\x9a$\xab\xb5\x80+z\x06\xa0U\xb8\xe0\xa7\xfc\x9e\xc3n\xb8\xc7\xd7;\xe9\v\xfeO\xfd\x0f\xae@\xc2z\xb1\xfd\xc0\x857\xf2\x02\x910\x9b\xab\x87Q\xecC\x06=\xc0w\xedZm\xd3\xfa\x8d\x0e\xd6\xc0\xa4\x10F\xec\x86\v\xf8.\xdf\xcf\x02\xb9\x8a\xd4\xe9\xbf\xf1\v\xb6\xfcci\xaa\n\x1a\xff\xfb=\x99hI4\x15\x16\xf6\xbd\x88\x1azAt\xc5~\xdavp\x1a\xe2\xc5\xf3\xcb\xd7\xa9;-@\xa40\x173=\xb3\x19wd\x7f\xf5\xd2BG\v\xfe\xc19\xb4\xb28\xcd\x18\xc0n\xf5\xc1u\x96\x9b\x8c\xb3\xa6\t\xc8fs\x8c\xd8\x17\xe5+{\x877D\xd8\x02Uv\xae\x9e\xf1\xf9\xb2\x04\xde.\xc39\x0ej\x95!\xff\xae\x88\xcfaV\a\xee,J\xa0\x11\xcf\xb8\xdc\xb4\xcb\xf8\xdb\x12\xb2\x14\xcdL\xb8\xb0\xe0\x15R\xad\x80I\xa448vzo{po\xf9\x93'}, 0x30) (async) r9 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x22000407, &(0x7f0000000400)={[{@data_err_abort}, {@noblock_validity}, {@nogrpid}, {@orlov}, {@data_err_abort}, {@grpjquota, 0x2e}, {@sb={'sb', 0x3d, 0x1}}, {@init_itable}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x10000}}], [], 0x2c}, 0x0, 0x4bf, &(0x7f0000001600)="$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") (async) r10 = timerfd_create(0x0, 0x0) r11 = eventfd2(0x4, 0x1) flock(r11, 0x5) (async) flock(r10, 0x6) (async) mknodat$null(r9, &(0x7f0000000000)='./file0\x00', 0x10, 0x103) ioctl$int_in(r6, 0x5421, &(0x7f0000000580)=0x40) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 10.690887789s ago: executing program 4 (id=242): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="99f3f35cc379253d8504e714b9142e331923bc73bea93f893dd0963f83545aebe47f4bccae528ce3a0917f1cdef81e3e77ca768ec242b754a69560552f661598c5d1e7c695f6b26c7654cae0b1bfda62a261c1fc3e48da1b2ea40082b712e94427e74b2a3a00ca82abd8edfae69e2b08393167e9672d5483458b9c13c2292255a3cdecd4dbf80a270c554a0713a4c2cbb7b8917c58f6947450ff23f9bf951d6259cde38cecb8a47e4bcdb6ee30dbc9b150a618ddc73719998f569e73d914feda24298140fafecd8ea1eb2e8132a2f41e52f2b20eb1ddea2f086ff15879a6920f5777399016e2f8adaa97ff487ae5ed06a2b90e1b15bf55e88e"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xff4a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) rt_sigpending(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x6bfb) write$cgroup_int(r2, &(0x7f0000000000)=0x700, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000006000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x33fe0, 0x1) (fail_nth: 3) write$cgroup_devices(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="551e"], 0x8) 10.58789624s ago: executing program 4 (id=243): open(0x0, 0x64842, 0x0) open(0x0, 0x14927e, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2b570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000004a00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$key(0xf, 0x3, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 9.356284619s ago: executing program 4 (id=245): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000010000000000001302000000002e5f300024d82a62007fda45d637a7887a5b9eea353deb20bec81db41647975909f9fcfd7312d23c75da3f5d8a28172ccebb157da1b91a159ce5d6829bacde9c2d0efb87"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0002000000000100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) sigaltstack(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/20, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) 9.221510751s ago: executing program 0 (id=246): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x0, 0x300, 0x9, 0x0, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 8.949184322s ago: executing program 2 (id=248): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) 8.948822013s ago: executing program 0 (id=249): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) 7.771306081s ago: executing program 3 (id=250): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = io_uring_setup(0x3b69, &(0x7f0000001d80)={0x0, 0x714, 0x2, 0x1, 0x3d7}) io_uring_enter(r7, 0x5756, 0x9d76, 0x5, &(0x7f0000001e00), 0x8) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6}], 0x2c, 0xffffffffffbffff8) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) tkill(r4, 0x13) socket(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0xfffffffc, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7ff, 0xfffffffc, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x45c) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 6.815381019s ago: executing program 3 (id=251): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8ff0047e9315b198de7000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x22, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES64], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) 5.567945348s ago: executing program 2 (id=252): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0xa, 0x800, 0x1) socket$inet6(0xa, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r7}, 0x10) nanosleep(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') io_uring_setup(0x5b82, &(0x7f0000000300)={0x0, 0xabd4, 0x20, 0x3, 0x203c2, 0x0, r8}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r9, 0x4, 0x7, 0x7, 0x6, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7, 0x10, 0x3, 0x3}}) 5.566833758s ago: executing program 3 (id=253): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = io_uring_setup(0x3b69, &(0x7f0000001d80)={0x0, 0x714, 0x2, 0x1, 0x3d7}) io_uring_enter(r6, 0x5756, 0x9d76, 0x5, &(0x7f0000001e00), 0x8) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) socket(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0xfffffffc, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7ff, 0xfffffffc, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x45c) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 5.566369218s ago: executing program 4 (id=254): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) 5.124706721s ago: executing program 1 (id=256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000100)={0x3}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x6, 0x0, [{0xc0000000, 0x91, 0x5, 0x9, 0x5, 0x851, 0x20}, {0x80000019, 0x8, 0x4, 0x1, 0x7, 0x4, 0x5}, {0x2, 0x6, 0x6, 0x50000, 0xfffffffb, 0xf4, 0xb}, {0x80000008, 0xffffff01, 0x4, 0xd, 0xffff, 0x800, 0x8001}, {0xc0000000, 0x6042, 0x1, 0x9, 0x5, 0x6, 0x1}, {0xc000000c, 0x5, 0x2, 0xfffffff9, 0xe0000, 0x60d86f57, 0x4}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0xf6, @none, 0x0, 0x2}, 0xe) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0xfffffffe}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0xee01, 0xee00) keyctl$chown(0x4, r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.742831134s ago: executing program 1 (id=257): io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000001a80)={[{@test_dummy_encryption}, {@dioread_lock}, {@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@noinit_itable}, {@abort}, {@dioread_nolock}]}, 0xd, 0x5e9, &(0x7f0000001340)="$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") read$msr(r0, &(0x7f00000014c0)=""/4096, 0x1000) socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x802, &(0x7f00000025c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703836352c73686f72746e616d653d77696e39352c636f6465706167653d3836312c73686f72746e616d653d6d697865642c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d6d697865642c757466383d312c636865636b3d7374726963742c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c0074c3d84072de322569bdaf85"], 0x25, 0x34c, &(0x7f0000001740)="$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") (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x802, &(0x7f00000025c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703836352c73686f72746e616d653d77696e39352c636f6465706167653d3836312c73686f72746e616d653d6d697865642c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d6d697865642c757466383d312c636865636b3d7374726963742c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c0074c3d84072de322569bdaf85"], 0x25, 0x34c, &(0x7f0000001740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) (async) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) 4.630128575s ago: executing program 2 (id=258): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000080000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006780), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r4, 0x0, 0x0, 0x5, 0xa, 0x14) 4.612020645s ago: executing program 1 (id=259): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x0, 0x300, 0x9, 0x0, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 4.534865255s ago: executing program 1 (id=260): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000010000000000001302000000002e5f300024d82a62007fda45d637a7887a5b9eea353deb20bec81db41647975909f9fcfd7312d23c75da3f5d8a28172ccebb157da1b91a159ce5d6829bacde9c2d0efb87"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) sigaltstack(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/20, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r9, &(0x7f0000000000)="fa", 0xfffffdef) 3.619765073s ago: executing program 1 (id=261): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b35, &(0x7f0000000080)={'wlan1\x00', @random="000000008000"}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @local}, 0x10) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) inotify_init() openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000013c0)=""/208, 0x31, 0x401) read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x5fb, 0xffffffffffffffa4) 3.599710713s ago: executing program 3 (id=262): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@RTM_NEWMDB={0x18, 0x1e, 0x25, 0x0, 0xfffffffc}, 0xffffffffffffffa8}, 0x1, 0xf00, 0x0, 0x4}, 0x4000840) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$packet(0x11, 0x2, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x401, 0x0, 0x3, 0x8, 0x0, 0xfffd}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 3.128805716s ago: executing program 2 (id=263): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) 2.047046504s ago: executing program 1 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYBLOB='\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x1e, 0x80004, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r7, r6, 0x0) pipe2$9p(&(0x7f0000000000), 0x84800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sched_switch\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0xc0027080, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 1.365594879s ago: executing program 2 (id=265): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) 280.443618ms ago: executing program 0 (id=266): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = io_uring_setup(0x3b69, &(0x7f0000001d80)={0x0, 0x714, 0x2, 0x1, 0x3d7}) io_uring_enter(r6, 0x5756, 0x9d76, 0x5, &(0x7f0000001e00), 0x8) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) 259.769058ms ago: executing program 3 (id=267): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="99f3f35cc379253d8504e714b9142e331923bc73bea93f893dd0963f83545aebe47f4bccae528ce3a0917f1cdef81e3e77ca768ec242b754a69560552f661598c5d1e7c695f6b26c7654cae0b1bfda62a261c1fc3e48da1b2ea40082b712e94427e74b2a3a00ca82abd8edfae69e2b08393167e9672d5483458b9c13c2292255a3cdecd4dbf80a270c554a0713a4c2cbb7b8917c58f6947450ff23f9bf951d6259cde38cecb8a47e4bcdb6ee30dbc9b150a618ddc73719998f569e73d914feda24298140fafecd8ea1eb2e8132a2f41e52f2b20eb1ddea2f086ff15879a6920f5777399016e2f8adaa97ff487ae5ed06a2b90e1b15bf55e88e"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) rt_sigpending(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x6bfb) write$cgroup_int(r2, &(0x7f0000000000)=0x700, 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000006000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='hugepage_update\x00', r6, 0x0, 0x81}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0xa, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x38}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r10, 0x4) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0xe, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0xd0, &(0x7f0000000680)=""/208, 0x41000, 0x7, '\x00', 0x0, @fallback=0x24, r2, 0x8, &(0x7f00000004c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x10, 0x2, 0x9}, 0x10, r10, r11, 0x5, &(0x7f00000008c0)=[0xffffffffffffffff, r9, r12, r8, r2], &(0x7f0000000900)=[{0x3, 0x4, 0x9, 0x4}, {0x4, 0x1, 0x10, 0x4}, {0x2, 0x4, 0x7, 0x9}, {0x4, 0x5, 0xb, 0xb}, {0x2, 0x3, 0x3, 0x5}], 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r13, 0x0, r7, 0x0, 0x33fe0, 0x1) write$cgroup_devices(r14, &(0x7f00000001c0)=ANY=[@ANYBLOB="551e"], 0x8) 98.884929ms ago: executing program 3 (id=268): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0xa, 0x800, 0x1) socket$inet6(0xa, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r7}, 0x10) nanosleep(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') io_uring_setup(0x5b82, &(0x7f0000000300)={0x0, 0xabd4, 0x20, 0x3, 0x203c2, 0x0, r8}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r9, 0x4, 0x7, 0x7, 0x6, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7, 0x10, 0x3, 0x3}}) 1.84641ms ago: executing program 4 (id=269): open(0x0, 0x64842, 0x0) open(0x0, 0x14927e, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2b570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000004a00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) r6 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 2 (id=270): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x0, 0x300, 0x9, 0x0, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. [ 25.860107][ T28] audit: type=1400 audit(1742046165.397:66): avc: denied { mounton } for pid=284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.861475][ T284] cgroup: Unknown subsys name 'net' [ 25.882614][ T28] audit: type=1400 audit(1742046165.397:67): avc: denied { mount } for pid=284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.909504][ T28] audit: type=1400 audit(1742046165.427:68): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.909674][ T284] cgroup: Unknown subsys name 'devices' [ 26.054255][ T284] cgroup: Unknown subsys name 'hugetlb' [ 26.059701][ T284] cgroup: Unknown subsys name 'rlimit' [ 26.165113][ T28] audit: type=1400 audit(1742046165.707:69): avc: denied { setattr } for pid=284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.188213][ T28] audit: type=1400 audit(1742046165.707:70): avc: denied { mounton } for pid=284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.213340][ T28] audit: type=1400 audit(1742046165.707:71): avc: denied { mount } for pid=284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.223103][ T287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.245491][ T28] audit: type=1400 audit(1742046165.787:72): avc: denied { relabelto } for pid=287 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.270707][ T28] audit: type=1400 audit(1742046165.787:73): avc: denied { write } for pid=287 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.301305][ T28] audit: type=1400 audit(1742046165.837:74): avc: denied { read } for pid=284 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.301824][ T284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.326679][ T28] audit: type=1400 audit(1742046165.837:75): avc: denied { open } for pid=284 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.363541][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.370402][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.378123][ T295] device bridge_slave_0 entered promiscuous mode [ 27.385204][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.392148][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.399272][ T295] device bridge_slave_1 entered promiscuous mode [ 27.416646][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.423646][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.430807][ T294] device bridge_slave_0 entered promiscuous mode [ 27.437726][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.444610][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.451885][ T294] device bridge_slave_1 entered promiscuous mode [ 27.523686][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.530538][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.538050][ T296] device bridge_slave_0 entered promiscuous mode [ 27.547110][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.554062][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.561288][ T296] device bridge_slave_1 entered promiscuous mode [ 27.608914][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.615811][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.623116][ T298] device bridge_slave_0 entered promiscuous mode [ 27.629609][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.636482][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.643769][ T297] device bridge_slave_0 entered promiscuous mode [ 27.650516][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.657385][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.664697][ T297] device bridge_slave_1 entered promiscuous mode [ 27.675402][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.682265][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.689548][ T298] device bridge_slave_1 entered promiscuous mode [ 27.880638][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.887520][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.894647][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.901571][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.915413][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.922374][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.929472][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.936277][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.945728][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.952605][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.959677][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.966585][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.975767][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.982641][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.989738][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.996522][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.013959][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.020813][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.027946][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.034720][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.086086][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.093356][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.100432][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.108196][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.115336][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.122578][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.129571][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.136746][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.143789][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.150733][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.158656][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.165944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.194085][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.201944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.209651][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.217938][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.224808][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.233220][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.241166][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.248039][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.255185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.263231][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.270065][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.277334][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.285617][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.292474][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.317416][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.325846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.334151][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.341021][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.348718][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.356541][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.364596][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.372792][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.379737][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.387011][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.395116][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.401982][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.409341][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.417435][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.424285][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.441832][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.450024][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.457961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.466288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.474462][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.482648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.491869][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.499232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.511728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.519761][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.545817][ T295] device veth0_vlan entered promiscuous mode [ 28.553286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.561436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.569026][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.576565][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.584708][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.592579][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.600508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.608493][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.616823][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.625179][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.632950][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.640759][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.649105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.657155][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.664146][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.671352][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.678893][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.686560][ T296] device veth0_vlan entered promiscuous mode [ 28.703016][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.710974][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.719078][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.727378][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.735915][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.744313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.752496][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.760570][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.768683][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.775526][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.784422][ T295] device veth1_macvtap entered promiscuous mode [ 28.795942][ T297] device veth0_vlan entered promiscuous mode [ 28.805618][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.813374][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.821074][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.829410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.836868][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.857972][ T297] device veth1_macvtap entered promiscuous mode [ 28.865288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.873543][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.881581][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.890113][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.898534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.906949][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.915296][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.923306][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.934642][ T296] device veth1_macvtap entered promiscuous mode [ 28.941423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.949626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.971039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.979361][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.979656][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 28.988513][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.003186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.014404][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.022598][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.057935][ T298] device veth0_vlan entered promiscuous mode [ 29.078501][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.094270][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.105598][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.435573][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.445474][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.864942][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.902546][ T294] device veth0_vlan entered promiscuous mode [ 29.950344][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.959119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.967844][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.975652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.050251][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.064064][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.100326][ T294] device veth1_macvtap entered promiscuous mode [ 30.167344][ T337] syz.3.6[337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.167529][ T337] syz.3.6[337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.180192][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.201300][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.210037][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.218331][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.226859][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.325681][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.423886][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.506613][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.538366][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.587689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.600258][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.617278][ T298] device veth1_macvtap entered promiscuous mode [ 30.650499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.664915][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.689097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.704733][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.821801][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 31.821821][ T28] audit: type=1400 audit(1742046171.357:111): avc: denied { create } for pid=358 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.880697][ T359] loop0: detected capacity change from 0 to 512 [ 31.929265][ T28] audit: type=1400 audit(1742046171.467:112): avc: denied { mounton } for pid=358 comm="syz.0.9" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.966445][ T359] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 31.984839][ T28] audit: type=1400 audit(1742046171.527:113): avc: denied { mount } for pid=358 comm="syz.0.9" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.008017][ T349] loop1: detected capacity change from 0 to 40427 [ 32.015053][ T28] audit: type=1400 audit(1742046171.527:114): avc: denied { create } for pid=358 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.035258][ T28] audit: type=1400 audit(1742046171.527:115): avc: denied { write } for pid=358 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.056280][ T28] audit: type=1400 audit(1742046171.527:116): avc: denied { read write } for pid=358 comm="syz.0.9" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.094141][ T28] audit: type=1400 audit(1742046171.527:117): avc: denied { open } for pid=358 comm="syz.0.9" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.177727][ T28] audit: type=1400 audit(1742046171.527:118): avc: denied { ioctl } for pid=358 comm="syz.0.9" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.204165][ T349] F2FS-fs (loop1): fault_type options not supported [ 32.255133][ T371] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 3: comm syz.0.9: lblock 0 mapped to illegal pblock 3 (length 1) [ 32.288962][ T349] F2FS-fs (loop1): invalid crc value [ 32.374240][ T349] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.409623][ T371] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.9: error -117 reading directory block [ 32.572510][ T28] audit: type=1400 audit(1742046171.627:119): avc: denied { watch watch_reads } for pid=362 comm="syz.2.11" path="/1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.687728][ T349] F2FS-fs (loop1): Start checkpoint disabled! [ 33.059114][ T349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 33.107433][ T297] EXT4-fs (loop0): unmounting filesystem. [ 33.109277][ T28] audit: type=1400 audit(1742046172.137:120): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 33.124122][ T379] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.239119][ T385] loop3: detected capacity change from 0 to 512 [ 34.097215][ T349] F2FS-fs (loop1): ino:10, start:0, end:4096, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 34.264090][ T385] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 34.273229][ T385] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.051751][ C1] sched: RT throttling activated [ 35.083016][ T406] FAULT_INJECTION: forcing a failure. [ 35.083016][ T406] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.097585][ T406] CPU: 1 PID: 406 Comm: syz.0.17 Not tainted 6.1.128-syzkaller-00012-g4da91a8e563c #0 [ 35.100816][ T326] kworker/u4:5: attempt to access beyond end of device [ 35.100816][ T326] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 35.106960][ T406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 35.106980][ T406] Call Trace: [ 35.106986][ T406] [ 35.106993][ T406] dump_stack_lvl+0x151/0x1b7 [ 35.107037][ T406] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 35.107063][ T406] ? vfs_write+0x952/0xed0 [ 35.107095][ T406] dump_stack+0x15/0x18 [ 35.154617][ T406] should_fail_ex+0x3d0/0x520 [ 35.159133][ T406] should_fail+0xb/0x10 [ 35.163120][ T406] should_fail_usercopy+0x1a/0x20 [ 35.167984][ T406] _copy_from_user+0x1e/0xc0 [ 35.172408][ T406] __se_sys_prlimit64+0x134/0x900 [ 35.177270][ T406] ? __kasan_check_write+0x14/0x20 [ 35.182302][ T406] ? __x64_sys_prlimit64+0xb0/0xb0 [ 35.187252][ T406] ? ksys_write+0x260/0x2c0 [ 35.191590][ T406] ? __ia32_sys_read+0x90/0x90 [ 35.196192][ T406] ? debug_smp_processor_id+0x17/0x20 [ 35.201397][ T406] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 35.207302][ T406] __x64_sys_prlimit64+0x9b/0xb0 [ 35.212072][ T406] x64_sys_call+0x7fa/0x9a0 [ 35.216413][ T406] do_syscall_64+0x3b/0xb0 [ 35.220676][ T406] ? clear_bhb_loop+0x55/0xb0 [ 35.225193][ T406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.230916][ T406] RIP: 0033:0x7f3addf8d169 [ 35.235157][ T406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.254822][ T406] RSP: 002b:00007f3adee1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 35.263067][ T406] RAX: ffffffffffffffda RBX: 00007f3ade1a5fa0 RCX: 00007f3addf8d169 [ 35.270880][ T406] RDX: 0000400000000140 RSI: 0000000000000000 RDI: 0000000000000015 [ 35.278687][ T406] RBP: 00007f3adee1a090 R08: 0000000000000000 R09: 0000000000000000 [ 35.286499][ T406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.294303][ T406] R13: 0000000000000000 R14: 00007f3ade1a5fa0 R15: 00007ffc4ff5cfa8 [ 35.302297][ T406] [ 35.412206][ T410] loop2: detected capacity change from 0 to 512 [ 35.497201][ T295] EXT4-fs (loop3): unmounting filesystem. [ 35.568254][ T410] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.577603][ T410] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.473783][ T424] loop3: detected capacity change from 0 to 512 [ 36.694949][ T298] EXT4-fs (loop2): unmounting filesystem. [ 36.750582][ T425] loop0: detected capacity change from 0 to 128 [ 36.826434][ T424] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.835422][ T424] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.091912][ T425] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4543: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 37.171573][ T434] syz.2.23[434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.177770][ T434] syz.2.23[434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.471924][ T425] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 38.673705][ T295] EXT4-fs (loop3): unmounting filesystem. [ 38.725499][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 38.725516][ T28] audit: type=1400 audit(1742046178.267:154): avc: denied { ioctl } for pid=418 comm="syz.0.21" path="socket:[16945]" dev="sockfs" ino=16945 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.862231][ T28] audit: type=1400 audit(1742046178.267:155): avc: denied { write } for pid=418 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.916529][ T28] audit: type=1400 audit(1742046179.457:156): avc: denied { read write } for pid=461 comm="syz.1.27" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 39.984074][ T28] audit: type=1400 audit(1742046179.457:157): avc: denied { open } for pid=461 comm="syz.1.27" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.007236][ T28] audit: type=1400 audit(1742046179.517:158): avc: denied { read } for pid=467 comm="syz.0.28" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.030307][ T28] audit: type=1400 audit(1742046179.527:159): avc: denied { open } for pid=467 comm="syz.0.28" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.102299][ T28] audit: type=1400 audit(1742046179.627:160): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 40.165482][ T478] syz.1.31[478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.165569][ T478] syz.1.31[478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.253337][ T480] loop2: detected capacity change from 0 to 512 [ 40.530724][ T480] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.539808][ T480] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.390702][ T491] loop0: detected capacity change from 0 to 512 [ 41.410597][ T298] EXT4-fs (loop2): unmounting filesystem. [ 41.497609][ T491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.506663][ T491] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.374951][ T506] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 42.382527][ T506] audit: out of memory in audit_log_start [ 43.071892][ T28] audit: type=1400 audit(1742046181.907:161): avc: denied { create } for pid=501 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.125277][ T513] FAULT_INJECTION: forcing a failure. [ 43.125277][ T513] name failslab, interval 1, probability 0, space 0, times 0 [ 43.146894][ T513] CPU: 1 PID: 513 Comm: syz.3.38 Not tainted 6.1.128-syzkaller-00012-g4da91a8e563c #0 [ 43.156384][ T513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 43.166280][ T513] Call Trace: [ 43.169398][ T513] [ 43.172186][ T513] dump_stack_lvl+0x151/0x1b7 [ 43.176690][ T513] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 43.181989][ T513] dump_stack+0x15/0x18 [ 43.185977][ T513] should_fail_ex+0x3d0/0x520 [ 43.190491][ T513] __should_failslab+0xaf/0xf0 [ 43.195089][ T513] ? __se_sys_mount+0x156/0x3b0 [ 43.199778][ T513] should_failslab+0x9/0x20 [ 43.204125][ T513] __kmem_cache_alloc_node+0x3d/0x2a0 [ 43.209326][ T513] ? _copy_from_user+0x90/0xc0 [ 43.213926][ T513] ? __se_sys_mount+0x156/0x3b0 [ 43.218610][ T513] kmalloc_trace+0x2a/0xa0 [ 43.222874][ T513] __se_sys_mount+0x156/0x3b0 [ 43.227464][ T513] ? __this_cpu_preempt_check+0x13/0x20 [ 43.232845][ T513] ? __x64_sys_mount+0xd0/0xd0 [ 43.237445][ T513] ? debug_smp_processor_id+0x17/0x20 [ 43.242654][ T513] __x64_sys_mount+0xbf/0xd0 [ 43.247084][ T513] x64_sys_call+0x49d/0x9a0 [ 43.251421][ T513] do_syscall_64+0x3b/0xb0 [ 43.255676][ T513] ? clear_bhb_loop+0x55/0xb0 [ 43.260187][ T513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.265914][ T513] RIP: 0033:0x7f8e46b8d169 [ 43.270165][ T513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.289638][ T513] RSP: 002b:00007f8e47abc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.297859][ T513] RAX: ffffffffffffffda RBX: 00007f8e46da5fa0 RCX: 00007f8e46b8d169 [ 43.305669][ T513] RDX: 0000400000000b80 RSI: 0000400000000040 RDI: 0000000000000000 [ 43.313479][ T513] RBP: 00007f8e47abc090 R08: 0000400000000600 R09: 0000000000000000 [ 43.321288][ T513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.329113][ T513] R13: 0000000000000000 R14: 00007f8e46da5fa0 R15: 00007ffdab7d76d8 [ 43.336921][ T513] [ 43.367021][ T297] EXT4-fs (loop0): unmounting filesystem. [ 43.431603][ T517] loop2: detected capacity change from 0 to 512 [ 43.636728][ T517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.645786][ T517] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.445388][ T525] FAULT_INJECTION: forcing a failure. [ 44.445388][ T525] name failslab, interval 1, probability 0, space 0, times 0 [ 44.468029][ T525] CPU: 0 PID: 525 Comm: syz.3.40 Not tainted 6.1.128-syzkaller-00012-g4da91a8e563c #0 [ 44.477435][ T525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.487318][ T525] Call Trace: [ 44.490531][ T525] [ 44.493309][ T525] dump_stack_lvl+0x151/0x1b7 [ 44.497818][ T525] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 44.503116][ T525] ? avc_denied+0x1b0/0x1b0 [ 44.507451][ T525] dump_stack+0x15/0x18 [ 44.511446][ T525] should_fail_ex+0x3d0/0x520 [ 44.515962][ T525] __should_failslab+0xaf/0xf0 [ 44.520560][ T525] should_failslab+0x9/0x20 [ 44.524900][ T525] kmem_cache_alloc_node+0x42/0x330 [ 44.529934][ T525] ? __alloc_skb+0xcc/0x2d0 [ 44.534400][ T525] __alloc_skb+0xcc/0x2d0 [ 44.538565][ T525] alloc_skb_with_frags+0xa6/0x680 [ 44.543512][ T525] sock_alloc_send_pskb+0x915/0xa50 [ 44.548541][ T525] ? copyin+0x74/0x90 [ 44.552365][ T525] ? sock_kzfree_s+0x60/0x60 [ 44.556787][ T525] ? avc_has_perm_noaudit+0x348/0x430 [ 44.561995][ T525] packet_sendmsg+0x3d72/0x6510 [ 44.566682][ T525] ? avc_denied+0x1b0/0x1b0 [ 44.571021][ T525] ? kstrtouint+0xf6/0x180 [ 44.575272][ T525] ? avc_has_perm+0x16f/0x260 [ 44.579787][ T525] ? avc_has_perm_noaudit+0x430/0x430 [ 44.584995][ T525] ? kstrtouint_from_user+0x124/0x180 [ 44.590202][ T525] ? kstrtol_from_user+0x180/0x180 [ 44.595170][ T525] ? selinux_socket_accept+0x5b0/0x5b0 [ 44.599326][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 44.599346][ T28] audit: type=1400 audit(1742046183.987:165): avc: denied { setopt } for pid=524 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.600440][ T525] ? selinux_file_permission+0x2bb/0x560 [ 44.630827][ T525] ? packet_getsockopt+0xea0/0xea0 [ 44.635767][ T525] ? security_socket_sendmsg+0x82/0xb0 [ 44.641062][ T525] ? packet_getsockopt+0xea0/0xea0 [ 44.646007][ T525] __sys_sendto+0x480/0x600 [ 44.650345][ T525] ? __ia32_sys_getpeername+0x90/0x90 [ 44.655552][ T525] ? mutex_unlock+0xb2/0x260 [ 44.659979][ T525] ? __kasan_check_write+0x14/0x20 [ 44.664931][ T525] ? debug_smp_processor_id+0x17/0x20 [ 44.670136][ T525] __x64_sys_sendto+0xe5/0x100 [ 44.674737][ T525] x64_sys_call+0x15c/0x9a0 [ 44.679086][ T525] do_syscall_64+0x3b/0xb0 [ 44.683328][ T525] ? clear_bhb_loop+0x55/0xb0 [ 44.687851][ T525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.693707][ T525] RIP: 0033:0x7f8e46b8d169 [ 44.697937][ T525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.717467][ T525] RSP: 002b:00007f8e47abc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 44.725711][ T525] RAX: ffffffffffffffda RBX: 00007f8e46da5fa0 RCX: 00007f8e46b8d169 [ 44.733720][ T525] RDX: 000000000001fffc RSI: 0000400000000180 RDI: 0000000000000006 [ 44.741593][ T525] RBP: 00007f8e47abc090 R08: 0000400000000140 R09: 0000000000000014 [ 44.749406][ T525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.757216][ T525] R13: 0000000000000000 R14: 00007f8e46da5fa0 R15: 00007ffdab7d76d8 [ 44.765033][ T525] [ 44.824379][ T28] audit: type=1400 audit(1742046184.367:166): avc: denied { name_bind } for pid=526 comm="syz.0.39" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.850391][ T28] audit: type=1400 audit(1742046184.367:167): avc: denied { node_bind } for pid=526 comm="syz.0.39" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 44.879534][ T298] EXT4-fs (loop2): unmounting filesystem. [ 45.148479][ T542] loop3: detected capacity change from 0 to 4096 [ 45.836040][ T543] loop0: detected capacity change from 0 to 512 [ 48.099890][ T543] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.099954][ T542] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 48.108702][ T543] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.146638][ T295] EXT4-fs (loop3): unmounting filesystem. [ 48.295880][ T28] audit: type=1400 audit(1742046187.837:168): avc: denied { create } for pid=559 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.108492][ T28] audit: type=1400 audit(1742046187.837:169): avc: denied { connect } for pid=559 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.128191][ T28] audit: type=1400 audit(1742046187.837:170): avc: denied { getopt } for pid=559 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.229852][ T297] EXT4-fs (loop0): unmounting filesystem. [ 49.635325][ T576] process 'syz.1.50' launched './file0' with NULL argv: empty string added [ 50.825283][ T572] loop4: detected capacity change from 0 to 512 [ 50.875669][ T28] audit: type=1400 audit(1742046190.417:171): avc: denied { create } for pid=587 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.877204][ T572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 50.904279][ T572] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.924879][ T28] audit: type=1400 audit(1742046190.417:172): avc: denied { connect } for pid=587 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.976111][ T28] audit: type=1400 audit(1742046190.517:173): avc: denied { write } for pid=587 comm="syz.1.52" path="socket:[17755]" dev="sockfs" ino=17755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.091157][ T296] EXT4-fs (loop4): unmounting filesystem. [ 51.131424][ T602] loop2: detected capacity change from 0 to 2048 [ 51.163653][ T602] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.211187][ T602] netlink: 40 bytes leftover after parsing attributes in process `syz.2.55'. [ 51.223079][ T28] audit: type=1400 audit(1742046190.767:174): avc: denied { create } for pid=601 comm="syz.2.55" name="file6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 51.253958][ T28] audit: type=1400 audit(1742046190.767:175): avc: denied { remove_name } for pid=601 comm="syz.2.55" name="file6" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.278551][ T298] EXT4-fs (loop2): unmounting filesystem. [ 51.285317][ T28] audit: type=1400 audit(1742046190.767:176): avc: denied { rename } for pid=601 comm="syz.2.55" name="file6" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 51.310121][ T28] audit: type=1400 audit(1742046190.767:177): avc: denied { unlink } for pid=601 comm="syz.2.55" name="file3" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.312120][ T604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'. [ 51.355777][ T28] audit: type=1400 audit(1742046190.857:178): avc: denied { create } for pid=603 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.377185][ T28] audit: type=1400 audit(1742046190.857:179): avc: denied { write } for pid=603 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.400891][ T28] audit: type=1400 audit(1742046190.857:180): avc: denied { nlmsg_write } for pid=603 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.484243][ T613] loop2: detected capacity change from 0 to 512 [ 51.618538][ T613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.627686][ T613] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.005411][ T298] EXT4-fs (loop2): unmounting filesystem. [ 54.179451][ T633] tipc: Started in network mode [ 54.184198][ T633] tipc: Node identity 7f000001, cluster identity 4711 [ 54.190966][ T633] tipc: Enabled bearer , priority 10 [ 54.222226][ T633] tipc: Enabling of bearer rejected, failed to enable media [ 55.127875][ T645] loop0: detected capacity change from 0 to 512 [ 55.182795][ T496] tipc: Node number set to 2130706433 [ 55.266459][ T645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 55.275692][ T645] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.120620][ T655] loop3: detected capacity change from 0 to 512 [ 56.133524][ T655] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 56.142626][ T655] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.839052][ T295] EXT4-fs (loop3): unmounting filesystem. [ 56.958441][ T669] loop1: detected capacity change from 0 to 512 [ 57.514891][ T669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec119, mo2=0002] [ 57.522950][ T669] System zones: 1-12 [ 57.533683][ T669] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.66: corrupted in-inode xattr [ 57.549859][ T669] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.66: couldn't read orphan inode 15 (err -117) [ 57.562937][ T669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.650450][ T297] EXT4-fs (loop0): unmounting filesystem. [ 57.661935][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 57.661971][ T28] audit: type=1400 audit(1742046197.167:187): avc: denied { watch watch_reads } for pid=662 comm="syz.1.66" path="/11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.204880][ T294] EXT4-fs (loop1): unmounting filesystem. [ 58.245559][ T686] loop3: detected capacity change from 0 to 512 [ 58.751434][ T688] FAULT_INJECTION: forcing a failure. [ 58.751434][ T688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.764570][ T688] CPU: 1 PID: 688 Comm: syz.0.68 Not tainted 6.1.128-syzkaller-00012-g4da91a8e563c #0 [ 58.773941][ T688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 58.783837][ T688] Call Trace: [ 58.786959][ T688] [ 58.789739][ T688] dump_stack_lvl+0x151/0x1b7 [ 58.794253][ T688] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 58.799548][ T688] ? __check_object_size+0x76/0x650 [ 58.804580][ T688] ? ___ratelimit+0xb2/0x5a0 [ 58.809007][ T688] dump_stack+0x15/0x18 [ 58.812997][ T688] should_fail_ex+0x3d0/0x520 [ 58.817513][ T688] should_fail+0xb/0x10 [ 58.821505][ T688] should_fail_usercopy+0x1a/0x20 [ 58.826365][ T688] _copy_from_user+0x1e/0xc0 [ 58.830793][ T688] __sys_bpf+0x23b/0x7f0 [ 58.834869][ T688] ? bpf_link_show_fdinfo+0x300/0x300 [ 58.840083][ T688] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 58.845549][ T688] __x64_sys_bpf+0x7c/0x90 [ 58.849805][ T688] x64_sys_call+0x87f/0x9a0 [ 58.854146][ T688] do_syscall_64+0x3b/0xb0 [ 58.858477][ T688] ? clear_bhb_loop+0x55/0xb0 [ 58.862993][ T688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.868721][ T688] RIP: 0033:0x7f3addf8d169 [ 58.873410][ T688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.892857][ T688] RSP: 002b:00007f3adedd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.901094][ T688] RAX: ffffffffffffffda RBX: 00007f3ade1a6160 RCX: 00007f3addf8d169 [ 58.908916][ T688] RDX: 0000000000000048 RSI: 0000400000000540 RDI: 0000000000000000 [ 58.916717][ T688] RBP: 00007f3adedd8090 R08: 0000000000000000 R09: 0000000000000000 [ 58.924532][ T688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.932339][ T688] R13: 0000000000000000 R14: 00007f3ade1a6160 R15: 00007ffc4ff5cfa8 [ 58.940156][ T688] [ 59.112823][ T686] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.121650][ T686] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.734542][ T295] EXT4-fs (loop3): unmounting filesystem. [ 60.126896][ T28] audit: type=1400 audit(1742046199.667:188): avc: denied { unlink } for pid=714 comm="syz.3.76" name="#1" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.152904][ T28] audit: type=1400 audit(1742046199.667:189): avc: denied { execute } for pid=714 comm="syz.3.76" path="/18/bus/bus" dev="overlay" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.364749][ T719] loop3: detected capacity change from 0 to 512 [ 60.568305][ T719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec119, mo2=0002] [ 60.576727][ T719] System zones: 1-12 [ 60.619302][ T719] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.77: corrupted in-inode xattr [ 60.632210][ T719] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.77: couldn't read orphan inode 15 (err -117) [ 60.645031][ T719] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 60.788356][ T723] loop4: detected capacity change from 0 to 512 [ 62.135178][ T733] syz.2.80[733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.135910][ T733] syz.2.80[733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.387427][ T723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.407320][ T723] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.138303][ T740] loop1: detected capacity change from 0 to 512 [ 63.287515][ T295] EXT4-fs (loop3): unmounting filesystem. [ 63.294713][ T296] EXT4-fs (loop4): unmounting filesystem. [ 63.416890][ T740] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.425954][ T740] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.883403][ T748] loop0: detected capacity change from 0 to 16 [ 63.925583][ T748] erofs: (device loop0): mounted with root inode @ nid 36. [ 63.945670][ T754] loop4: detected capacity change from 0 to 512 [ 63.986316][ T28] audit: type=1400 audit(1742046203.527:190): avc: denied { mounton } for pid=746 comm="syz.0.82" path="/15/file0/file0" dev="loop0" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.021497][ T754] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.030735][ T754] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.046006][ T748] incfs: Can't find or create .index dir in ./file0 [ 64.087626][ T748] incfs: mount failed -30 [ 64.228569][ T763] loop3: detected capacity change from 0 to 128 [ 64.285617][ T28] audit: type=1400 audit(1742046203.787:191): avc: denied { mount } for pid=758 comm="syz.3.83" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 64.326736][ T294] EXT4-fs (loop1): unmounting filesystem. [ 64.930939][ T296] EXT4-fs (loop4): unmounting filesystem. [ 68.576441][ T772] syz.0.88 (772) used greatest stack depth: 18808 bytes left [ 68.691782][ T28] audit: type=1400 audit(1742046208.177:192): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 68.827847][ T791] loop1: detected capacity change from 0 to 256 [ 68.840357][ T28] audit: type=1326 audit(1742046208.357:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6a58d169 code=0x7ffc0000 [ 68.931615][ T28] audit: type=1326 audit(1742046208.357:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6a58d169 code=0x7ffc0000 [ 68.954911][ T28] audit: type=1326 audit(1742046208.357:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b6a58d169 code=0x7ffc0000 [ 68.978477][ T28] audit: type=1326 audit(1742046208.357:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6a58d169 code=0x7ffc0000 [ 69.003229][ T791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.92'. [ 69.012163][ T791] sch_fq: defrate 0 ignored. [ 69.016623][ T791] netlink: 100 bytes leftover after parsing attributes in process `syz.1.92'. [ 69.155370][ T28] audit: type=1326 audit(1742046208.357:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6a58d169 code=0x7ffc0000 [ 69.322126][ T28] audit: type=1326 audit(1742046208.367:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b6a58d169 code=0x7ffc0000 [ 69.351778][ T28] audit: type=1400 audit(1742046208.367:199): avc: denied { create } for pid=783 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.386063][ T28] audit: type=1326 audit(1742046208.367:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6a58d169 code=0x7ffc0000 [ 69.432629][ T28] audit: type=1326 audit(1742046208.367:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6a58d169 code=0x7ffc0000 [ 69.480489][ T28] audit: type=1326 audit(1742046208.377:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b6a58d169 code=0x7ffc0000 [ 69.549621][ T28] audit: type=1400 audit(1742046208.377:203): avc: denied { ioctl } for pid=783 comm="syz.2.90" path="socket:[18451]" dev="sockfs" ino=18451 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.615943][ T28] audit: type=1326 audit(1742046208.377:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6a58d169 code=0x7ffc0000 [ 69.796581][ T811] loop0: detected capacity change from 0 to 512 [ 69.958082][ T811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec119, mo2=0002] [ 69.966208][ T811] System zones: 1-12 [ 70.013045][ T28] audit: type=1326 audit(1742046208.377:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6a58d169 code=0x7ffc0000 [ 70.059008][ T811] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.94: corrupted in-inode xattr [ 70.071900][ T811] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.94: couldn't read orphan inode 15 (err -117) [ 70.084927][ T811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.752099][ T817] loop3: detected capacity change from 0 to 512 [ 70.831658][ T817] EXT4-fs (loop3): 1 truncate cleaned up [ 70.837381][ T817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.851215][ T817] EXT4-fs (loop3): unmounting filesystem. [ 70.865670][ T28] audit: type=1326 audit(1742046208.377:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b6a58d169 code=0x7ffc0000 [ 70.932779][ T297] EXT4-fs (loop0): unmounting filesystem. [ 70.951006][ T817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 71.072189][ T822] loop0: detected capacity change from 0 to 16 [ 71.078734][ T822] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 71.122844][ T784] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.425544][ T830] loop2: detected capacity change from 0 to 512 [ 71.590337][ T830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 71.599201][ T830] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.801852][ T837] loop0: detected capacity change from 0 to 512 [ 72.862522][ T298] EXT4-fs (loop2): unmounting filesystem. [ 72.897653][ T837] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.906863][ T837] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.443620][ T848] loop2: detected capacity change from 0 to 512 [ 73.652665][ T297] EXT4-fs (loop0): unmounting filesystem. [ 73.764658][ T848] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.773684][ T848] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.213872][ T856] loop4: detected capacity change from 0 to 256 [ 74.251568][ T856] exfat: Unknown parameter 'ei$' [ 74.333417][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 74.333433][ T28] audit: type=1400 audit(1742046213.877:239): avc: denied { write } for pid=855 comm="syz.4.103" name="task" dev="proc" ino=18665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 74.431332][ T28] audit: type=1400 audit(1742046213.897:240): avc: denied { add_name } for pid=855 comm="syz.4.103" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 74.477772][ T28] audit: type=1400 audit(1742046213.897:241): avc: denied { create } for pid=855 comm="syz.4.103" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 74.503670][ T298] EXT4-fs (loop2): unmounting filesystem. [ 74.511104][ T28] audit: type=1400 audit(1742046213.897:242): avc: denied { associate } for pid=855 comm="syz.4.103" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.601947][ T869] syz.2.107[869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.602030][ T869] syz.2.107[869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.705939][ T870] loop4: detected capacity change from 0 to 512 [ 74.932243][ T870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec119, mo2=0002] [ 74.940328][ T870] System zones: 1-12 [ 74.948828][ T870] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.106: corrupted in-inode xattr [ 74.962693][ T870] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.106: couldn't read orphan inode 15 (err -117) [ 74.975820][ T870] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.962877][ T296] EXT4-fs (loop4): unmounting filesystem. [ 75.968716][ T879] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 76.205624][ T887] loop1: detected capacity change from 0 to 512 [ 77.426695][ T887] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.436061][ T887] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.442478][ T901] loop0: detected capacity change from 0 to 512 [ 78.456747][ T906] loop3: detected capacity change from 0 to 512 [ 78.477569][ T901] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.487181][ T901] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.552384][ T906] EXT4-fs: Ignoring removed nobh option [ 78.579322][ T906] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.611797][ T28] audit: type=1400 audit(1742046218.117:243): avc: denied { create } for pid=909 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 78.670690][ T28] audit: type=1400 audit(1742046218.207:244): avc: denied { write } for pid=909 comm="syz.2.114" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.697377][ T906] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.113: corrupted inode contents [ 78.711465][ T906] EXT4-fs (loop3): Remounting filesystem read-only [ 78.717913][ T906] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #16: comm syz.3.113: mark_inode_dirty error [ 78.730304][ T906] EXT4-fs (loop3): Remounting filesystem read-only [ 78.736855][ T906] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.113: corrupted inode contents [ 78.749445][ T906] EXT4-fs (loop3): Remounting filesystem read-only [ 78.755856][ T906] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.113: mark_inode_dirty error [ 78.767412][ T906] EXT4-fs (loop3): Remounting filesystem read-only [ 78.773859][ T906] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.113: corrupted inode contents [ 78.786022][ T906] EXT4-fs (loop3): Remounting filesystem read-only [ 78.792600][ T906] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 78.801484][ T906] EXT4-fs (loop3): Remounting filesystem read-only [ 78.807931][ T906] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.113: corrupted inode contents [ 78.820091][ T906] EXT4-fs (loop3): Remounting filesystem read-only [ 78.826503][ T906] EXT4-fs error (device loop3): ext4_truncate:4313: inode #16: comm syz.3.113: mark_inode_dirty error [ 78.837805][ T906] EXT4-fs (loop3): Remounting filesystem read-only [ 78.844205][ T906] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 78.853434][ T906] EXT4-fs (loop3): Remounting filesystem read-only [ 78.860276][ T906] EXT4-fs (loop3): 1 truncate cleaned up [ 78.866112][ T906] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 78.875223][ T906] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.895964][ T906] FAULT_INJECTION: forcing a failure. [ 78.895964][ T906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.909094][ T906] CPU: 1 PID: 906 Comm: syz.3.113 Not tainted 6.1.128-syzkaller-00012-g4da91a8e563c #0 [ 78.918549][ T906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.928445][ T906] Call Trace: [ 78.931574][ T906] [ 78.934360][ T906] dump_stack_lvl+0x151/0x1b7 [ 78.938866][ T906] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 78.944151][ T906] ? is_bpf_text_address+0x172/0x190 [ 78.949274][ T906] dump_stack+0x15/0x18 [ 78.953265][ T906] should_fail_ex+0x3d0/0x520 [ 78.957777][ T906] should_fail+0xb/0x10 [ 78.961769][ T906] should_fail_usercopy+0x1a/0x20 [ 78.966630][ T906] _copy_from_user+0x1e/0xc0 [ 78.971059][ T906] ext4_ioctl+0xc1e/0x5900 [ 78.975311][ T906] ? memcpy+0x56/0x70 [ 78.979128][ T906] ? avc_has_extended_perms+0xad7/0x10f0 [ 78.984599][ T906] ? ext4_fileattr_set+0x16e0/0x16e0 [ 78.989715][ T906] ? avc_flush+0x290/0x290 [ 78.993964][ T906] ? kstrtouint+0xf6/0x180 [ 78.998305][ T906] ? _kstrtol+0x150/0x150 [ 79.002473][ T906] ? do_vfs_ioctl+0x19df/0x29a0 [ 79.007157][ T906] ? kstrtouint_from_user+0x124/0x180 [ 79.012374][ T906] ? __x64_compat_sys_ioctl+0x90/0x90 [ 79.017578][ T906] ? kstrtol_from_user+0x180/0x180 [ 79.022526][ T906] ? ioctl_has_perm+0x3f0/0x560 [ 79.027212][ T906] ? selinux_file_ioctl+0x3cc/0x540 [ 79.032241][ T906] ? __mutex_lock_slowpath+0x10/0x10 [ 79.037374][ T906] ? selinux_file_alloc_security+0x120/0x120 [ 79.043182][ T906] ? __fget_files+0x2cb/0x330 [ 79.047694][ T906] ? security_file_ioctl+0x84/0xb0 [ 79.052641][ T906] ? ext4_fileattr_set+0x16e0/0x16e0 [ 79.057758][ T906] __se_sys_ioctl+0x114/0x190 [ 79.062276][ T906] __x64_sys_ioctl+0x7b/0x90 [ 79.066725][ T906] x64_sys_call+0x98/0x9a0 [ 79.070951][ T906] do_syscall_64+0x3b/0xb0 [ 79.075205][ T906] ? clear_bhb_loop+0x55/0xb0 [ 79.079717][ T906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.085446][ T906] RIP: 0033:0x7f8e46b8d169 [ 79.089701][ T906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.109145][ T906] RSP: 002b:00007f8e47abc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.117386][ T906] RAX: ffffffffffffffda RBX: 00007f8e46da5fa0 RCX: 00007f8e46b8d169 [ 79.125196][ T906] RDX: 0000000000000000 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 79.133010][ T906] RBP: 00007f8e47abc090 R08: 0000000000000000 R09: 0000000000000000 [ 79.140821][ T906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.148636][ T906] R13: 0000000000000000 R14: 00007f8e46da5fa0 R15: 00007ffdab7d76d8 [ 79.156449][ T906] [ 79.188425][ T295] EXT4-fs (loop3): unmounting filesystem. [ 79.553452][ T922] loop3: detected capacity change from 0 to 512 [ 79.670147][ T294] EXT4-fs (loop1): unmounting filesystem. [ 79.682180][ T297] EXT4-fs (loop0): unmounting filesystem. [ 79.782846][ T922] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.791926][ T922] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.727071][ T930] loop2: detected capacity change from 0 to 512 [ 80.830095][ T930] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 80.839198][ T930] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.101210][ T939] syz.1.118[939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.101266][ T939] syz.1.118[939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.796563][ T295] EXT4-fs (loop3): unmounting filesystem. [ 82.796611][ T298] EXT4-fs (loop2): unmounting filesystem. [ 82.911022][ T945] loop0: detected capacity change from 0 to 512 [ 84.101787][ T945] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec119, mo2=0002] [ 84.109627][ T945] System zones: 1-12 [ 84.114448][ T945] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.120: corrupted in-inode xattr [ 84.126727][ T945] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.120: couldn't read orphan inode 15 (err -117) [ 84.142024][ T945] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.234830][ T955] loop3: detected capacity change from 0 to 512 [ 84.363496][ T297] EXT4-fs (loop0): unmounting filesystem. [ 84.515102][ T955] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.524259][ T955] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.529595][ T965] loop0: detected capacity change from 0 to 128 [ 85.897345][ T295] EXT4-fs (loop3): unmounting filesystem. [ 86.089952][ T973] syz.3.128[973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.090037][ T973] syz.3.128[973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.275901][ T980] loop1: detected capacity change from 0 to 512 [ 86.346379][ T980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.355684][ T980] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.131566][ T294] EXT4-fs (loop1): unmounting filesystem. [ 88.159639][ T28] audit: type=1400 audit(1742046227.697:245): avc: denied { getopt } for pid=1006 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.286307][ T1016] syz.4.131[1016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.286387][ T1016] syz.4.131[1016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.405296][ T1019] loop0: detected capacity change from 0 to 512 [ 88.584969][ T1019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec119, mo2=0002] [ 88.593096][ T1019] System zones: 1-12 [ 88.635890][ T1019] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.135: corrupted in-inode xattr [ 88.649641][ T1019] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.135: couldn't read orphan inode 15 (err -117) [ 88.662760][ T1019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 89.295836][ T1025] syz.1.136[1025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.297039][ T1025] syz.1.136[1025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.730213][ T297] EXT4-fs (loop0): unmounting filesystem. [ 89.751874][ T993] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.763748][ T28] audit: type=1400 audit(1742046229.307:246): avc: denied { read } for pid=1027 comm="syz.2.138" name="usbmon1" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.805112][ T28] audit: type=1400 audit(1742046229.307:247): avc: denied { open } for pid=1027 comm="syz.2.138" path="/dev/usbmon1" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.862771][ T28] audit: type=1400 audit(1742046229.307:248): avc: denied { ioctl } for pid=1027 comm="syz.2.138" path="/dev/usbmon1" dev="devtmpfs" ino=156 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.943036][ T993] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.009511][ T993] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 90.034834][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.144719][ T1042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.138'. [ 90.527516][ T993] usb 4-1: config 0 descriptor?? [ 90.533809][ T993] usb 4-1: bad CDC descriptors [ 90.641977][ T28] audit: type=1400 audit(1742046230.157:249): avc: denied { mounton } for pid=1045 comm="syz.1.142" path="/24/file0" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.734818][ T548] usb 4-1: USB disconnect, device number 2 [ 90.803268][ T1056] loop2: detected capacity change from 0 to 512 [ 91.027143][ T28] audit: type=1400 audit(1742046230.567:250): avc: denied { write } for pid=1057 comm="syz.4.145" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.058559][ T1056] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.067704][ T1056] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.769233][ T1066] syz.3.146[1066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.770579][ T1066] syz.3.146[1066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.830829][ T1072] loop0: detected capacity change from 0 to 256 [ 91.987544][ T1072] exfat: Unknown parameter 'ei$' [ 92.009615][ T298] EXT4-fs (loop2): unmounting filesystem. [ 92.334335][ T1082] loop1: detected capacity change from 0 to 512 [ 92.967503][ T784] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.977480][ T1082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec119, mo2=0002] [ 92.985291][ T1082] System zones: 1-12 [ 93.012535][ T1082] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.148: corrupted in-inode xattr [ 93.024619][ T1082] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.148: couldn't read orphan inode 15 (err -117) [ 93.036623][ T1082] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.680934][ T294] EXT4-fs (loop1): unmounting filesystem. [ 94.115943][ T1110] syz.0.156[1110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.116025][ T1110] syz.0.156[1110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.508732][ T1120] loop4: detected capacity change from 0 to 512 [ 94.712738][ T1120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.722006][ T1120] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.803462][ T296] EXT4-fs (loop4): unmounting filesystem. [ 96.411740][ T1135] loop4: detected capacity change from 0 to 512 [ 96.711501][ T1134] loop2: detected capacity change from 0 to 512 [ 99.123925][ T1135] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.133054][ T1135] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.455377][ T1134] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 99.464562][ T1134] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.898063][ T296] EXT4-fs (loop4): unmounting filesystem. [ 100.028350][ T298] EXT4-fs (loop2): unmounting filesystem. [ 100.284284][ T1163] loop2: detected capacity change from 0 to 512 [ 101.253199][ T1163] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 101.262317][ T1163] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.565272][ T1170] loop3: detected capacity change from 0 to 512 [ 101.585301][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.641385][ T1155] device bridge_slave_0 left promiscuous mode [ 101.653494][ T1170] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.671858][ T1170] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.688134][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.703412][ T1155] device bridge_slave_1 left promiscuous mode [ 101.738662][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.756769][ T295] EXT4-fs (loop3): unmounting filesystem. [ 101.767945][ T1151] loop4: detected capacity change from 0 to 40427 [ 101.802024][ T1151] F2FS-fs (loop4): Invalid log blocks per segment (83886089) [ 101.820227][ T1151] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 101.830692][ T1151] F2FS-fs (loop4): Unrecognized mount option "disable_ext_identi" or missing value [ 101.927412][ T298] EXT4-fs (loop2): unmounting filesystem. [ 101.990156][ T1185] FAULT_INJECTION: forcing a failure. [ 101.990156][ T1185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.007191][ T1184] loop2: detected capacity change from 0 to 512 [ 102.074890][ T1188] loop3: detected capacity change from 0 to 512 [ 102.088359][ T1185] CPU: 0 PID: 1185 Comm: syz.1.176 Not tainted 6.1.128-syzkaller-00012-g4da91a8e563c #0 [ 102.097913][ T1185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.107921][ T1185] Call Trace: [ 102.111029][ T1185] [ 102.113798][ T1185] dump_stack_lvl+0x151/0x1b7 [ 102.118308][ T1185] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 102.123609][ T1185] ? dump_stack+0x9/0x18 [ 102.127684][ T1185] dump_stack+0x15/0x18 [ 102.131675][ T1185] should_fail_ex+0x3d0/0x520 [ 102.136197][ T1185] should_fail+0xb/0x10 [ 102.140189][ T1185] should_fail_usercopy+0x1a/0x20 [ 102.145138][ T1185] _copy_from_user+0x1e/0xc0 [ 102.149556][ T1185] copy_msghdr_from_user+0xaa/0x670 [ 102.154596][ T1185] ? _parse_integer+0x2a/0x40 [ 102.159101][ T1185] ? sendmsg_copy_msghdr+0x70/0x70 [ 102.164054][ T1185] __sys_sendmmsg+0x375/0x6f0 [ 102.168560][ T1185] ? kasan_set_track+0x4b/0x70 [ 102.173163][ T1185] ? __ia32_sys_sendmsg+0x90/0x90 [ 102.178024][ T1185] ? __kasan_check_write+0x14/0x20 [ 102.183152][ T1185] ? __kasan_check_write+0x14/0x20 [ 102.188088][ T1185] ? proc_fail_nth_write+0x20b/0x290 [ 102.193210][ T1185] ? selinux_file_permission+0x2bb/0x560 [ 102.198678][ T1185] ? proc_fail_nth_read+0x210/0x210 [ 102.203799][ T1185] ? fsnotify_perm+0x6a/0x5b0 [ 102.208318][ T1185] ? vfs_write+0x952/0xed0 [ 102.212569][ T1185] ? __kasan_slab_free+0x11/0x20 [ 102.217344][ T1185] ? __kasan_check_write+0x14/0x20 [ 102.222290][ T1185] ? mutex_unlock+0xb2/0x260 [ 102.226721][ T1185] ? __ia32_sys_read+0x90/0x90 [ 102.231312][ T1185] ? debug_smp_processor_id+0x17/0x20 [ 102.236525][ T1185] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 102.242421][ T1185] __x64_sys_sendmmsg+0xa0/0xb0 [ 102.247112][ T1185] x64_sys_call+0x81d/0x9a0 [ 102.251452][ T1185] do_syscall_64+0x3b/0xb0 [ 102.255701][ T1185] ? clear_bhb_loop+0x55/0xb0 [ 102.260215][ T1185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.265946][ T1185] RIP: 0033:0x7f62ec98d169 [ 102.270201][ T1185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.289640][ T1185] RSP: 002b:00007f62ed749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.297881][ T1185] RAX: ffffffffffffffda RBX: 00007f62ecba5fa0 RCX: 00007f62ec98d169 [ 102.305695][ T1185] RDX: 0000000004000095 RSI: 0000400000005240 RDI: 0000000000000003 [ 102.313503][ T1185] RBP: 00007f62ed749090 R08: 0000000000000000 R09: 0000000000000000 [ 102.321325][ T1185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.329126][ T1185] R13: 0000000000000000 R14: 00007f62ecba5fa0 R15: 00007ffd6ababef8 [ 102.336948][ T1185] [ 102.420564][ T1184] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 102.429405][ T1184] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.487190][ T1188] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.496313][ T1188] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.916621][ T28] audit: type=1400 audit(1742046242.457:251): avc: denied { ioctl } for pid=1182 comm="syz.1.176" path="socket:[19981]" dev="sockfs" ino=19981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.001454][ T298] EXT4-fs (loop2): unmounting filesystem. [ 103.065591][ T295] EXT4-fs (loop3): unmounting filesystem. [ 103.105226][ T28] audit: type=1400 audit(1742046242.647:252): avc: denied { read append } for pid=1203 comm="syz.1.179" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.168735][ T28] audit: type=1400 audit(1742046242.677:253): avc: denied { open } for pid=1203 comm="syz.1.179" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.222455][ T1212] loop3: detected capacity change from 0 to 16 [ 103.228619][ T1212] ======================================================= [ 103.228619][ T1212] WARNING: The mand mount option has been deprecated and [ 103.228619][ T1212] and is ignored by this kernel. Remove the mand [ 103.228619][ T1212] option from the mount to silence this warning. [ 103.228619][ T1212] ======================================================= [ 103.612312][ T1151] loop4: detected capacity change from 0 to 32768 [ 103.621156][ T1212] erofs: (device loop3): mounted with root inode @ nid 36. [ 103.633100][ T28] audit: type=1400 audit(1742046243.177:254): avc: denied { read } for pid=1208 comm="syz.3.180" name="file3" dev="loop3" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.660389][ T28] audit: type=1400 audit(1742046243.197:255): avc: denied { open } for pid=1208 comm="syz.3.180" path="/35/file3/file3" dev="loop3" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.695078][ T1151] loop4: p1 p3 < > [ 103.742386][ T296] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 103.749375][ T792] I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.751782][ T784] I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.762532][ T792] I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.777927][ T784] I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.788069][ T784] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 103.795296][ T792] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 103.809847][ T792] I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.822065][ T792] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 103.837448][ T792] I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.847246][ T792] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 103.870072][ T792] I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.879879][ T792] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 103.888100][ T792] I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.897443][ T792] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 104.028932][ T1228] loop4: detected capacity change from 0 to 512 [ 104.194631][ T775] udevd[775]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 105.259707][ T1235] loop1: detected capacity change from 0 to 512 [ 105.322369][ T1240] syz.2.185[1240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.323097][ T1240] syz.2.185[1240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.386061][ T784] udevd[784]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 105.434938][ T1228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 105.444189][ T1228] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.762936][ T1235] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.772134][ T1235] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.547956][ T792] udevd[792]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 106.561032][ T784] udevd[784]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 106.670669][ T1248] loop0: detected capacity change from 0 to 512 [ 106.897558][ T294] EXT4-fs (loop1): unmounting filesystem. [ 106.919729][ T296] EXT4-fs (loop4): unmounting filesystem. [ 107.018795][ T1248] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 107.027930][ T1248] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.594001][ T1257] loop4: detected capacity change from 0 to 256 [ 107.734069][ T1261] loop3: detected capacity change from 0 to 512 [ 107.769520][ T297] EXT4-fs (loop0): unmounting filesystem. [ 107.892340][ T1261] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.901435][ T1261] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.091967][ T28] audit: type=1400 audit(1742046247.637:256): avc: denied { remount } for pid=1256 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 109.118254][ T1275] loop1: detected capacity change from 0 to 512 [ 109.525674][ T295] EXT4-fs (loop3): unmounting filesystem. [ 109.610887][ T1275] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.620146][ T1275] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.977617][ T1285] loop4: detected capacity change from 0 to 128 [ 110.282925][ T294] EXT4-fs (loop1): unmounting filesystem. [ 110.312264][ T28] audit: type=1400 audit(1742046249.857:257): avc: denied { bind } for pid=1283 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.701286][ T1300] loop1: detected capacity change from 0 to 512 [ 110.792782][ T28] audit: type=1400 audit(1742046249.857:258): avc: denied { name_bind } for pid=1283 comm="syz.4.194" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 110.853647][ T1300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.862743][ T1300] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.370997][ T28] audit: type=1400 audit(1742046249.857:259): avc: denied { node_bind } for pid=1283 comm="syz.4.194" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 112.328740][ T1321] syz.2.200[1321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.328816][ T1321] syz.2.200[1321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.356739][ T294] EXT4-fs (loop1): unmounting filesystem. [ 112.648771][ T1335] loop1: detected capacity change from 0 to 512 [ 113.518071][ T1335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec119, mo2=0002] [ 113.526110][ T1335] System zones: 1-12 [ 113.534371][ T1335] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.201: corrupted in-inode xattr [ 113.548047][ T1335] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.201: couldn't read orphan inode 15 (err -117) [ 113.560698][ T1335] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.936238][ T1341] syz.0.204[1341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.937609][ T1341] syz.0.204[1341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.993093][ T294] EXT4-fs (loop1): unmounting filesystem. [ 114.201662][ T1348] loop2: detected capacity change from 0 to 512 [ 114.383012][ T1348] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.392331][ T1348] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.398505][ T298] EXT4-fs (loop2): unmounting filesystem. [ 115.495561][ T1363] loop3: detected capacity change from 0 to 128 [ 117.393326][ T1369] loop2: detected capacity change from 0 to 512 [ 117.602207][ T28] audit: type=1400 audit(1742046255.507:260): avc: denied { write } for pid=1362 comm="syz.3.210" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.843478][ T1369] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.853517][ T1369] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.945695][ T28] audit: type=1400 audit(1742046257.397:261): avc: denied { mount } for pid=1359 comm="syz.2.208" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 117.967934][ T28] audit: type=1400 audit(1742046257.517:262): avc: denied { create } for pid=1359 comm="syz.2.208" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.658171][ T28] audit: type=1400 audit(1742046257.537:263): avc: denied { read append open } for pid=1359 comm="syz.2.208" path="/42/bus/blkio.bfq.io_merged_recursive" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.996894][ T1405] loop0: detected capacity change from 0 to 512 [ 119.033794][ T298] EXT4-fs (loop2): unmounting filesystem. [ 119.052435][ T28] audit: type=1400 audit(1742046258.557:264): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.074321][ T1405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.083460][ T1405] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.307229][ T297] EXT4-fs (loop0): unmounting filesystem. [ 121.314957][ T1422] syz.1.217[1422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.315037][ T1422] syz.1.217[1422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.327976][ T1423] syz.2.215[1423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.339277][ T1423] syz.2.215[1423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.705726][ T1438] loop0: detected capacity change from 0 to 512 [ 121.830894][ T1439] loop3: detected capacity change from 0 to 512 [ 123.447380][ T1438] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec119, mo2=0002] [ 123.455374][ T1438] System zones: 1-12 [ 124.122020][ T1438] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.216: corrupted in-inode xattr [ 124.148698][ T1438] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.216: couldn't read orphan inode 15 (err -117) [ 124.184770][ T1439] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 124.195154][ T1439] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.631499][ T1438] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 124.685319][ T297] EXT4-fs (loop0): unmounting filesystem. [ 124.836610][ T1452] loop1: detected capacity change from 0 to 1024 [ 124.883054][ T1452] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 124.907004][ T295] EXT4-fs (loop3): unmounting filesystem. [ 124.945891][ T28] audit: type=1400 audit(1742046264.487:265): avc: denied { create } for pid=1454 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 125.009304][ T28] audit: type=1400 audit(1742046264.547:266): avc: denied { write } for pid=1451 comm="syz.1.221" path="/38/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 125.112888][ T28] audit: type=1400 audit(1742046264.627:267): avc: denied { ioctl } for pid=1451 comm="syz.1.221" path="socket:[21554]" dev="sockfs" ino=21554 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.431937][ T1463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1463 comm=syz.2.222 [ 125.985281][ T28] audit: type=1400 audit(1742046264.977:268): avc: denied { write } for pid=1454 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 126.005735][ T28] audit: type=1400 audit(1742046264.987:269): avc: denied { read } for pid=1454 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 126.025934][ T28] audit: type=1400 audit(1742046265.427:270): avc: denied { wake_alarm } for pid=1454 comm="syz.2.222" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.278054][ T1450] loop0: detected capacity change from 0 to 40427 [ 126.420469][ T1450] F2FS-fs (loop0): Invalid log blocks per segment (83886089) [ 126.435086][ T294] EXT4-fs (loop1): unmounting filesystem. [ 126.441030][ T1450] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 126.449606][ T1450] F2FS-fs (loop0): Unrecognized mount option "disable_ext_identi" or missing value [ 126.472184][ T1472] FAULT_INJECTION: forcing a failure. [ 126.472184][ T1472] name failslab, interval 1, probability 0, space 0, times 0 [ 126.484741][ T1472] CPU: 0 PID: 1472 Comm: syz.1.226 Not tainted 6.1.128-syzkaller-00012-g4da91a8e563c #0 [ 126.494290][ T1472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.504187][ T1472] Call Trace: [ 126.507318][ T1472] [ 126.510086][ T1472] dump_stack_lvl+0x151/0x1b7 [ 126.514604][ T1472] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 126.519900][ T1472] dump_stack+0x15/0x18 [ 126.523891][ T1472] should_fail_ex+0x3d0/0x520 [ 126.528396][ T1472] __should_failslab+0xaf/0xf0 [ 126.532998][ T1472] should_failslab+0x9/0x20 [ 126.537333][ T1472] kmem_cache_alloc_node+0x42/0x330 [ 126.542372][ T1472] ? __alloc_skb+0xcc/0x2d0 [ 126.546714][ T1472] __alloc_skb+0xcc/0x2d0 [ 126.550877][ T1472] pfkey_sendmsg+0x17e/0xfc0 [ 126.555303][ T1472] ? avc_has_perm_noaudit+0x430/0x430 [ 126.560512][ T1472] ? pfkey_release+0x340/0x340 [ 126.565108][ T1472] ? selinux_socket_sendmsg+0x243/0x340 [ 126.570495][ T1472] ? selinux_socket_accept+0x5b0/0x5b0 [ 126.575797][ T1472] ? security_socket_sendmsg+0x82/0xb0 [ 126.581166][ T1472] ? pfkey_release+0x340/0x340 [ 126.585769][ T1472] ____sys_sendmsg+0x5d3/0x9a0 [ 126.590373][ T1472] ? __sys_sendmsg_sock+0x40/0x40 [ 126.595234][ T1472] __sys_sendmmsg+0x3b9/0x6f0 [ 126.599738][ T1472] ? kasan_set_track+0x4b/0x70 [ 126.604343][ T1472] ? __ia32_sys_sendmsg+0x90/0x90 [ 126.609203][ T1472] ? __kasan_check_write+0x14/0x20 [ 126.614159][ T1472] ? __kasan_check_write+0x14/0x20 [ 126.619093][ T1472] ? proc_fail_nth_write+0x20b/0x290 [ 126.624219][ T1472] ? selinux_file_permission+0x2bb/0x560 [ 126.629687][ T1472] ? proc_fail_nth_read+0x210/0x210 [ 126.634721][ T1472] ? fsnotify_perm+0x6a/0x5b0 [ 126.639238][ T1472] ? vfs_write+0x952/0xed0 [ 126.643490][ T1472] ? __kasan_slab_free+0x11/0x20 [ 126.648262][ T1472] ? __kasan_check_write+0x14/0x20 [ 126.653228][ T1472] ? mutex_unlock+0xb2/0x260 [ 126.657648][ T1472] ? __ia32_sys_read+0x90/0x90 [ 126.662247][ T1472] ? debug_smp_processor_id+0x17/0x20 [ 126.667447][ T1472] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 126.673345][ T1472] __x64_sys_sendmmsg+0xa0/0xb0 [ 126.678027][ T1472] x64_sys_call+0x81d/0x9a0 [ 126.682365][ T1472] do_syscall_64+0x3b/0xb0 [ 126.686619][ T1472] ? clear_bhb_loop+0x55/0xb0 [ 126.691130][ T1472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.697167][ T1472] RIP: 0033:0x7f62ec98d169 [ 126.701417][ T1472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.720873][ T1472] RSP: 002b:00007f62ed749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 126.729275][ T1472] RAX: ffffffffffffffda RBX: 00007f62ecba5fa0 RCX: 00007f62ec98d169 [ 126.737092][ T1472] RDX: 000000000400008a RSI: 0000400000000180 RDI: 0000000000000003 [ 126.744903][ T1472] RBP: 00007f62ed749090 R08: 0000000000000000 R09: 0000000000000000 [ 126.752710][ T1472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.760694][ T1472] R13: 0000000000000000 R14: 00007f62ecba5fa0 R15: 00007ffd6ababef8 [ 126.768516][ T1472] [ 126.979063][ T1484] loop1: detected capacity change from 0 to 512 [ 127.167489][ T1484] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 127.176735][ T1484] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.938357][ T1493] syz.0.231[1493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.938442][ T1493] syz.0.231[1493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.144817][ T294] EXT4-fs (loop1): unmounting filesystem. [ 129.349490][ T1516] loop4: detected capacity change from 0 to 512 [ 129.667105][ T1516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.676095][ T1516] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.672961][ T296] EXT4-fs (loop4): unmounting filesystem. [ 130.724443][ T1527] syz.3.238[1527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.724525][ T1527] syz.3.238[1527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.853276][ T1546] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 130.982881][ T1549] loop4: detected capacity change from 0 to 128 [ 132.171020][ T1573] loop3: detected capacity change from 0 to 128 [ 132.227552][ T1575] syz.4.245[1575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.227635][ T1575] syz.4.245[1575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.341207][ T1579] syz.1.247[1579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.410980][ T1579] syz.1.247[1579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.495269][ T1599] loop2: detected capacity change from 0 to 512 [ 133.903425][ T1599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 133.912450][ T1599] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.783130][ T1602] loop0: detected capacity change from 0 to 512 [ 134.831416][ T1602] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.850445][ T1602] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.047728][ T1624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1624 comm=syz.3.251 [ 135.993987][ T298] EXT4-fs (loop2): unmounting filesystem. [ 136.523636][ T1638] loop4: detected capacity change from 0 to 512 [ 136.601280][ T28] audit: type=1400 audit(1742046276.137:271): avc: denied { bind } for pid=1642 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.727230][ T28] audit: type=1400 audit(1742046276.167:272): avc: denied { connect } for pid=1642 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.764634][ T1638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.786729][ T1638] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.321758][ T648] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.512839][ T648] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.527960][ T648] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.347634][ T1680] loop2: detected capacity change from 0 to 512 [ 139.580072][ T1680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 139.589140][ T1680] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.167778][ T648] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.194660][ T298] EXT4-fs (loop2): unmounting filesystem. [ 140.210844][ T648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.240865][ T648] usb 4-1: SerialNumber: syz [ 140.400392][ T1687] loop2: detected capacity change from 0 to 512 [ 140.591933][ T1671] loop3: detected capacity change from 0 to 128 [ 140.676065][ T1687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.685087][ T1687] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.303127][ T297] EXT4-fs (loop0): unmounting filesystem. [ 141.466051][ T648] usb 4-1: 0:2 : does not exist [ 141.470821][ T648] usb 4-1: unit 253 not found! [ 141.561191][ T298] EXT4-fs (loop2): unmounting filesystem. [ 141.568387][ T1619] ------------[ cut here ]------------ [ 141.573751][ T1619] kernel BUG at fs/buffer.c:2714! [ 141.578981][ T1619] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 141.584883][ T1619] CPU: 0 PID: 1619 Comm: kmmpd-loop0 Not tainted 6.1.128-syzkaller-00012-g4da91a8e563c #0 [ 141.590305][ T648] usb 4-1: USB disconnect, device number 3 [ 141.594589][ T1619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.594604][ T1619] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 141.604897][ T296] EXT4-fs (loop4): unmounting filesystem. [ 141.610224][ T1619] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 14 bc e6 ff e9 b0 fe ff ff e8 8a 1d 9f ff 0f 0b e8 83 1d 9f ff <0f> 0b e8 7c 1d 9f ff 0f 0b e8 75 1d 9f ff 0f 0b e8 6e 1d 9f ff 0f [ 141.640438][ T1619] RSP: 0018:ffffc9000f3b7c20 EFLAGS: 00010293 [ 141.646335][ T1619] RAX: ffffffff81d6775d RBX: 0000000000000000 RCX: ffff888130c49440 [ 141.654146][ T1619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.661960][ T1619] RBP: ffffc9000f3b7c70 R08: ffffffff81d67330 R09: ffffed10274861e4 [ 141.669767][ T1619] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 141.677585][ T1619] R13: 1ffff110274861e3 R14: ffff88813a430f18 R15: 0000000000003801 [ 141.685505][ T1619] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 141.694347][ T1619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.700770][ T1619] CR2: 00007fb9ee3f9154 CR3: 000000012dc0f000 CR4: 00000000003526b0 [ 141.708589][ T1619] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.716392][ T1619] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.724290][ T1619] Call Trace: [ 141.727414][ T1619] [ 141.730193][ T1619] ? __die_body+0x62/0xb0 [ 141.734381][ T1619] ? die+0x88/0xb0 [ 141.737916][ T1619] ? do_trap+0x103/0x330 [ 141.741996][ T1619] ? submit_bh_wbc+0x4cd/0x4f0 [ 141.746599][ T1619] ? handle_invalid_op+0x95/0xc0 [ 141.751365][ T1619] ? submit_bh_wbc+0x4cd/0x4f0 [ 141.755968][ T1619] ? exc_invalid_op+0x32/0x50 [ 141.760480][ T1619] ? asm_exc_invalid_op+0x1b/0x20 [ 141.765343][ T1619] ? submit_bh_wbc+0xa0/0x4f0 [ 141.769853][ T1619] ? submit_bh_wbc+0x4cd/0x4f0 [ 141.774545][ T1619] ? submit_bh_wbc+0x4cd/0x4f0 [ 141.779141][ T1619] ? __kasan_check_read+0x11/0x20 [ 141.784006][ T1619] submit_bh+0x1d/0x30 [ 141.787909][ T1619] write_mmp_block_thawed+0x3a0/0x570 [ 141.793125][ T1619] ? read_mmp_block+0x7d0/0x7d0 [ 141.797803][ T1619] ? update_process_times+0x1b0/0x1b0 [ 141.803010][ T1619] write_mmp_block+0x12b/0x2a0 [ 141.807611][ T1619] kmmpd+0x263/0xa10 [ 141.811345][ T1619] ? write_mmp_block_thawed+0x570/0x570 [ 141.816725][ T1619] ? __kthread_parkme+0x12d/0x180 [ 141.821585][ T1619] kthread+0x26d/0x300 [ 141.825488][ T1619] ? write_mmp_block_thawed+0x570/0x570 [ 141.830875][ T1619] ? kthread_blkcg+0xd0/0xd0 [ 141.835312][ T1619] ret_from_fork+0x1f/0x30 [ 141.839552][ T1619] [ 141.842416][ T1619] Modules linked in: [ 141.878794][ T1619] ---[ end trace 0000000000000000 ]--- [ 141.884147][ T1619] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 141.889314][ T1619] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 14 bc e6 ff e9 b0 fe ff ff e8 8a 1d 9f ff 0f 0b e8 83 1d 9f ff <0f> 0b e8 7c 1d 9f ff 0f 0b e8 75 1d 9f ff 0f 0b e8 6e 1d 9f ff 0f [ 141.908858][ T1619] RSP: 0018:ffffc9000f3b7c20 EFLAGS: 00010293 [ 141.916108][ T1619] RAX: ffffffff81d6775d RBX: 0000000000000000 RCX: ffff888130c49440 [ 142.801902][ T1619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.809919][ T1619] RBP: ffffc9000f3b7c70 R08: ffffffff81d67330 R09: ffffed10274861e4 [ 142.829349][ T1619] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 142.947970][ T1619] R13: 1ffff110274861e3 R14: ffff88813a430f18 R15: 0000000000003801 [ 142.953625][ T784] udevd[784]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.961935][ T1619] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 142.988157][ T1619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.995747][ T1619] CR2: 00007f62ed706f98 CR3: 000000012f13f000 CR4: 00000000003526b0 [ 142.999452][ T1711] loop4: detected capacity change from 0 to 128 [ 143.008311][ T1619] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 143.018021][ T1619] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 143.029120][ T1619] Kernel panic - not syncing: Fatal exception [ 143.035397][ T1619] Kernel Offset: disabled [ 143.039530][ T1619] Rebooting in 86400 seconds..