last executing test programs: 2.783921457s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000040)=ANY=[@ANYBLOB='utf8=1,iocharset=1,uni_xlate=0,rodir,utf8=1,utf8=0,flush,uni_xlate=0,nonumtail=0,tz=UTC,codepage=1251,utf8=0,shortname=lower,iocharset=cp852,iocharset=koi8-ru,nonumtail=0,\x00'/188], 0x1, 0x37c, &(0x7f00000005c0)="$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") creat(&(0x7f0000000300)='./file1\x00', 0x0) rename(&(0x7f0000006200)='./file1\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.711926678s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000380)={[{@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@nobh}, {@lazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@noacl}]}, 0x1, 0x521, &(0x7f0000000fc0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x4, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.676787299s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000dc0)=ANY=[], 0x1, 0x1207, &(0x7f0000003000)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f0000001740)='./bus\x00', 0xa1) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x66842, 0x19) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x50000, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x300, 0x22, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x24, 0x0, &(0x7f0000000200)) 2.667248779s ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x22002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000200000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES16=r2], 0x52) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e1f, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[], [{@fsmagic={'fsmagic', 0x3d, 0x4}}]}, 0xd, 0x605, &(0x7f0000002440)="$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") ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000002c0)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000003100)=""/4102, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) 2.481578331s ago: executing program 0 (id=1): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141042, 0x100) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="ff", 0x1}], 0x1, 0xe7e, 0x0, 0x31690ab637ce7961) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, 0x0, 0x0, 0x3}}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000dd4ecc33d4ae0a235b7f329b0e96144e3ff293750a0d03fd968f9628"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$xdp(0x2c, 0x3, 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x9) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x9, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8257}]}}]}, 0x60}}, 0x44080) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.541438976s ago: executing program 2 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x9e6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (fail_nth: 3) 1.514690047s ago: executing program 3 (id=7): r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x144, r0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x719}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @mcast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xccbd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x529}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffe293}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0xc040}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000340)={{0x2, 0x4e22, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x22, {0x2, 0x4e23, @private=0xa010102}, 'vcan0\x00'}) r9 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000400)) (async) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000080)) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.467866057s ago: executing program 4 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$pfkey(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x15, 0x0, 0x4, 0xb0ddf69, 0x100, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) 1.31834365s ago: executing program 1 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x890b, &(0x7f0000000000)=@req={0x28, &(0x7f00000002c0)={'team_slave_1\x00', @ifru_settings={0x101, 0x40, @raw_hdlc=&(0x7f0000000040)={0x1, 0x16ff}}}}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000828000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000e2f000/0x4000)=nil) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000b2d000/0x1000)=nil, 0x1000}, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x39) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.159427132s ago: executing program 2 (id=10): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setuid(0xee01) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r2, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x208008de, &(0x7f0000000240)=ANY=[], 0x82, 0x14fe, &(0x7f0000003980)="$eJzs3AuYjtX6MPB1r7UexiS9TXIY1r3uhzcNLZMkOSTkkCRJkuSUkJgkSUgMIUlDEnKcJIchJIdpTBrn8yHnpMmWJklCcgrru6bd/uz/bv//ff9v933+1577d13rmnXP+9z3u9Z7v9c8z/NeM/N9r1H1WtSv3YyIxL8E/volWQgRI4QYJoS4TggRCCEqxVWKy328gILkf+1J2J/rkbSrvQJ2NXH/8zbuf97G/c/buP95G/c/b+P+523c/7yN+89YXrZ9TvHreeTdwZ//52V8/v83klN+8tcby9/Y+7+Rwv3P27j/eRv3P2/j/udt3P+8jfv/7+yvt+S1/osjuP95G/efsbzsan/+zOPqjqv9/mOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxljec81doIcTf5ld7XYwxxhhjjDHGGPvz+PxXewWMMcYYY4wxxhj7fw+EFEpoEYh8Ir+IEQVErLhGFBTXikLiOhER14s4cYMoLG4URURRUUwUF/GihCgpjEBhBYlQlBKlRVTcJMqIm0WCKCvKiVuEE+VForhVVBC3iYridlFJ3CEqiztFFVFVVBPVxV2ihrhb1BS1RG1xj6gj6op6or64VzQQ94mG4n7RSDwgGosHRRPxkGgqHhbNxCOiuXhUtBCPiZbicdFKtBZtRFvR7v8q/yXRT7ws+osBIlkMFIPEK2KwGCKGilfFMPGaGC5eFyPEGyJFjBSjxJtitHhLjBFvi7FinBgv3hETxEQxSUwWU8RUkSreFdPEe2K6eF/MEDPFLDFbpIk5Yq74QMwT88UC8aFYKD4Si8RisUQsFeniY5EhlolM8YlYLj4VWWKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iM7FD7BS7xG6xR+wV+8TnYr/4QhwQX4ps8dV/M//sP+T3BgECJEjQoCEf5IMYiIFYiIWCUBAKQSGIQATiIA4KQ2EoAkWgGBSDeIiHklASEBAICEpBKYhCFMpAGUiABCgH5cCBg0RIhApwG1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24F+6F+6AhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBJEiCbtANukN36AE9oCf0hF7QC3pDH+gDL8FL8DK8DAOgjhwIg2AQDIbBMBRehVfhNRgOr8Pr8AakwEgYBW/Cm/AWjIEzMBbGwXgYDzXkRJgEk4HkVEiFVJgG02A6TIcZMBNmwmxIgzkwF+bCPJgP8+FDWAgfwUewGBbDUkiHdMiAZZAJmbAczkIWrICVsApWwxpYDetgPayDjbAJNsIW2ALbYBt8Bp/BTtgJu2E37IW98Dl8Dl/AF5AC2ZANB+EgHIJDcBgOQw7kwBE4AkfhKByDY3AcjsMJOAmn4CSchtNwBs7COTgHF+ACXIQX4r9tvrfshhQhc2mpZT6ZT8bIGBkrY2VBWVAWkoVkREZknIyThWVhWUQWkcVkMRkv42VJWVKiREkylKVkqRghhCwjy8gEmSDLyXLSSScTZaKsICvIirKirCTvkJXlnbKKrCo7uuqyuqwhO7maspasLWvLOrKurCfry/qygWwgG8qGspFsJBvLxrKJfEg2lQNhKDwiczvTQo6ElnIUtJKtZRvZVr4FT8j2cgx0kB1lJ/mUHAdjoYts75LkM7KbnATd5XNyMjwve8qp0Eu+KHvLPrKvfEn2kx1cfzlAzoCBcpCcDYPlEDlUvirnQV2Z27F68g2ZIkfKUfJNuRTekmPk23KsHCfHy3fkBDlRTpKT5RQ5VabKd+U0+Z6cLt+XM+RMOUvOlmlyjpwrP5Dz5Hy5QH4oF8qP5CK5WC6RS2W6/FhmyGUyU34il8tPZZZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/EzukDvlLrlb7pF75T75udwvv5AH5JcyW34lD8q/yEPya3lYfiNz5LfyiPxO/u13uo7LH+UJeVKekj/J0/JneUaelefkeXlB/iIvykvysvRSKFBSKaVVoPKp/CpGFVCx6hpVUF2rCqnrVERdr+LUDaqwulEVUUVVMVVcxasSqqQyCpVVpEJVSpVWUXWTKqNuVgmqrCqnblFOlVeJ6lZVQd2mKqrbVSV1h6qs7lRVVFVVTVVXd6ka6m5VU9VStdU9qo6qq+qp+upe1UDdpxqq+1Uj9YBqrB5UTdRDqql6WDVTj6jm6lHVQj2mWqrHVSvVWrVRbVU79YRqr55UHVRH1Uk9pTqrp1UX1VUlqWdUN/Ws6q6eUz3U86qnekH1Ui+q3qqP6qsuqcvKq/5qgEpWA9Ug9YoarIaooepVNUy9poar19UI9YZKUSPVKPWmGq3eUmPU22qsGqfGq3fUBDVRTVKT1RQ1VaWqd9U09Z6art5XM9RMNUvNVmlqjhr6W6UF/5A/8Lez7t/nv/dP8kf8+uzb1Hb1mdqhdqpdarfao/aqfWqf2q/2qwPqgMpW2eqgOqgOqUPqsDqsclSOOqKOqKPqqDqmjqnj6rg6oU6q8+ondVr9rM6os+qsOq8uqAvq4m+vgdCgpVZa60Dn0/l1jC6gY/U1uqC+VhfS1+mIvl7H6Rt0YX2jLqKL6mK6uI7XJXRJbTRqq0mHupQuraP6Jl1G36wTdFldTt+inS6vE/Wt/3L+H62vnW6n2+v2uoPuoDvpTrqz7qy76C46SSfpbrqb7q676x66h+6pe+peupfurXvrvrqv7qf76f66v07WyXqQfkUP1kP00L9dEunheoQeoVN0ih6lR+nRerQeo8fosXqsHq/H6wl6gp6kJ+kpeopO1al6mp6mp+vpeoaeoWfpWTpNp+m5eq6ep+fpBXqBXqgX6kV6kV6il+h0na4zdIbO1Jl6uV6us/QKvUKv0qv0Gr1Gr9Pr9Aa9QW/Sm/QWvUVn6e16u96hd+hdepfeo/fofXqf3q/36wP6gM7W2fqgPqgP6UP6sD6sc3SOPqKP6KP6qD6mjw08ro/rE/qEPqVP6dP6tD6jz+hz+py+oC/oi/qivqwv5172BTKQgQ50kC/IF8QEMUFsEBsUDAoGhYJCQSSIBHFBXFA4uDEoEhQNigXFg/igRFAyMAEGNqAgDEoFpYNocFNQJrg5SAjkby9i+SAxuDWoENwWVAxuDyoFdwSVgzuDKkHVoFpQPbgrqBHcHdQMagW1g3uCOkHdoF5QP7g3aBDcFzQM7g8aBQ8EjYMHgybBQ0HT4OGgWfBI0Dx4NGgRPBa0DB4PWgWtgzZB26Ddn1rf+zNFn3T9zQCTbAaaQeYVM9gMMUPNq2aYec0MN6+bEeYNk2JGmlHmTTPavGXGmLfNWDPOjDfvmAlmoplkJpspZqpJNe+aaeY9M928b2aYmWaWmW3SzBwz13xg5pn5ZoH50Cw0H5lFZrFZYpaadPOxyTDLTKb5xCw3n5oss8KsNKvMarPm/PVCmPVmg9loNpnNZovZaraZ7eYzs8PsNLvMbrPH7DX7zOdmv/nCHDBfmmzzlTlo/mIOma/NYfONyTHfmiPmO3PUfG+OmR/McfOjOWFOmlPmJ3Pa/GzOmLPmnDlvLphfzEVzyVw2PvfiPvf0jho15sN8GIMxGIuxWBALYiEshBGMYBzGYWEsjEWwCBbDYhiP8VgSS2IuQsJSWAqjGMUyWAYTMPd9UQ4dOkzERKyAFbAiVsRKWAkrY2WsglWwGlbDu/AuvBvvxlpYC+/Be7Au1sX6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2w+bYHFtgC2yJLbEVtsI22AbbYTtsj+2xA3bATtgJO2Nn7IJdMAmTsBt2w+7YHXtgD+yJPbEX9sLe2Bv7Yl/sh/2wP/bHZEzGQTgIB+NgHIpDcRgOw+E4HEfgCEzBFByFo3A0jsYxOAbH4jgcj+/gBJyIk3AyTsGpmIqpOA2n4XScjjNwBs7CWZiGaTgX5+I8nIcLcAEuxIW4CBfhElyC6ZiOGZiBmZiJy3E5ZmEWrsSVuBpX41pci+txPW7EjbgZN+NW3IrbcTvuwB24C3fhHtyD+3Af7sf9eAAPYDZm40E8iIfwEB7Gw5iDOXgEj+BRPIrH8Bgex+N4Ak/gKTyFp/E0nsEzeA7P4QX8BS/iJbyMHmOsFLH2GlvQXmsL2etsjC1g/z4uZovbeFvClrTGFrFF/0OM1toEW9aWs7dYZ8vbRHvr7+IqtqqtZqvbu2wNe7et+bu4gb3PNrT320b2AVvf3vtbnP/XuLF90Daxj9mm9nHbzLa2zW1b28I+Zlvax20r29q2sW1tZ/u07WK72iT7jO1mn/1dnGGX2fV2g91oN9n99gt7zp63R+339oL9xfa3A+ww+5odbl+3I+wbNsWO/F083r5jJ9iJdpKdbKfYqb+LZ9nZNs3OsXPtB3aenf+7ON1+bBfaTLvILrZL7NJf49w1ZdpP7HL7qc2yK+xKu8qutmvsWrvuf691ld1it9ptdp/93O6wO+0uu9vusXt/jXP3ccB+abPtV/aI/c4esl/bw/aYzbHf/hrn7u+Y/cEetz/aE/akPWV/sqftz/aMPfvr/nP3/pO9ZC9bbwUBSVKkKaB8lJ9iqADF0jVUkK6lQnQdReh6iqMbqDDdSEWoKBWj4hRPJagkGUKyRBRSKSpNUbqJytDNlEBlqRzdQo7KUyLdShXoNqpIt1MluoMq051UhapSNapOd1ENuptqUi2qTfdQHapL9ag+3UsN6D5qSPdTI3qAGtOD1IQeoqb0MDWjR6g5PUot6DFqSY9TK2pNbagttaMnqD09SR2oI3Wip6gzPU1dqCsl0TPUjZ6l7vQc9aDnqSe9QL3oRepNfagvvUT96GXqTwMomQbSIHqFBtMQGkqv0jB6jYbT6zSC3qAUGkmj6E0aTW/RGHqbxtI4Gk/v0ASaSJNoMk2hqZRK79LZ9K7Fcs+EM2gmzaLZlEZzaC59QPNoPi2gD2khfUSLaDEtoaWUTh9TBi2jTPqEltOnlEUraCWtotW0htbSOlpPG2gjbaLNtIW20jbaTp/RDtpJu2g37aG9tI8+p/30BR2gLymbvqKD9Bc6RF/TYfqGcuhbOkLf0VH6no7RD3ScfqQTdJJO0U90mn6mM3SWztF5ukC/0EW6RJfJkwghlKEKdRiE+cL8YUxYIIwNrwkLhteGhcLrwkh4fRgX3hAWDm8Mi4RFw2Jh8TA+LBGWDE2IoQ0pDMNSYekwGt4UlglvDhPCsmG58JbQheXDxPDWsEJ4W1gxvD2sFN4RVg7vDKuEVcPHHqge3hXWCO8Oa4a1wtrhPWGdsG5YL6wf3hs2CO8LG4b3h43CB8KK4YNhk/ChsGn4cNgsfCRsHj4atggfC1uGj4etwtZhm7Bt2C58ImwfPhl2CDuGncKnws7h02GXsGuYFD4Tdguf/cPHk8OB4aDwlfCV0Pv71ZLo0mh69ONoRnRZNDP6SXR59NNoVnRFdGV0VXR1dE10bXRddH10Q3RjdFN0c3RLdGt0W9T7+vmFAyedctoFLp/L72JcARfrrnEF3bWukLvORdz1Ls7d4Aq7G10RV9QVc8VdvCvhSjrj0FlHLnSlXGkXdTe5Mu5ml+DKunLuFudceZfo2rp2rp1r7550HVxH18k95Z5yT7unXVfX1T3jurlnXXf3nOvhnnc93QvuBfei6+36uL7uJdfPvez6uwEu2SW7QW6QG+wGu6FuqBvmhrnhbrgb4Ua4FJfiRrlRbrQb7ca4MW6sG+vGu/FugpvgJrlJboqb4lJdqpvmprnpbrqb4Wa4WW6WS3Npbq6b6+a5eW6BW+AWJix0i9wit8Qtceku3WW4DJfpMt1yt9xluSy30q10q91qt9atdevderfRbXSb3Wa31W112912t8PtcLvcLrfH7XH73D633+13B9wBl+2y3UF30B1yh9xh943Lcd+6I+47d9R97465H9xx96M74U66U+4nd9r97M64s+6cO+8uuF/cRXfJXXbepUbejUyLvBeZHnk/MiMyMzIrMjuSFpkTmRv5IDIvMj+yIPJhZGHko8iiyOLIksjSSHrk40hGZFkkM/JJZHnk00hWZEVkZWRVZHVkTcT7EjtCX8qX9lF/ky/jb/YJvqwv52/xzpf3if5WX8Hf5iv6230lf4ev7O/0VXxVX80/7lv51r6Nb+vb+Sd8e/+k7+A7+k7+Kd/ZP+27+K4+yT/ju/lnfXf/nO/hn/c9/Qu+l3/R9/Z9fF//ku/nX/b9/QCf7Af6Qf4VP9gP8UP9q36Yf80P96/7Ef4Nn+JH+lH+TT/av+XH+Lf9WD/Oj/fv+Al+op/kJ/spfqpP9e/6af49P92/72f4mX6Wn+3T/Bw/13/g5/n5foH/0C/0H/lFfrFf4pf6dP+xz/DLfKb/xC/3n/osv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dv+Z3+F3+l1+t9/j9/p9/nO/33/hD/gvfbb/yh/0f/GH/Nf+sP/G5/hv/RH/nT/qv/fH/A/+uP/Rn/An/Sn/kz/tf/Zn/Fl/zp/3F/wv/qK/5C/z36wxxhhjjP0fUX/w+MB/8j3528g1SAhx7c7iOf9Yc3ORv86HyPjOESHEMwN6PfK3UadOcnLyb8dmKRGUXiyEiFzJzyeuxCtEJ/G0SBIdRYV/ur4hss8F+oP60TuEiL1S+Vex4h/r3/af1H/iqfEZlcNzcf9F/cVCJJS+klNAXImv1K/4n9Qv2v4P1l/g61QhOvxdTkFxJb5SP1E8KZ4VSf/hSMYYY4wxxhhj7K+GyGo9/uj+Off+PF5fyckvrsR/dH/OGGOMMcYYY4yxq+/5Pn27PpGU1LEHT/6FSc3/GcvgCU/+tMnV/snEGGOMMcYY+7Nduei/2ithjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbyrv8f/07sau+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9r+VwAAAP//OPk5Iw==") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) 1.111533393s ago: executing program 0 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0x8, &(0x7f0000000180)={0x0, 0x2000000000000000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r6 = socket(0x1e, 0x4, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x25dfdbff, {0x3}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 631.34038ms ago: executing program 3 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x22002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000200000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES16=r2], 0x52) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e1f, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000002c0)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000003100)=""/4102, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) 199.564807ms ago: executing program 2 (id=13): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000040)=ANY=[@ANYBLOB='utf8=1,iocharset=1,uni_xlate=0,rodir,utf8=1,utf8=0,flush,uni_xlate=0,nonumtail=0,tz=UTC,codepage=1251,utf8=0,shortname=lower,iocharset=cp852,iocharset=koi8-ru,nonumtail=0,\x00'/188], 0x1, 0x37c, &(0x7f00000005c0)="$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") creat(&(0x7f0000000300)='./file1\x00', 0x0) rename(&(0x7f0000006200)='./file1\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 107.203939ms ago: executing program 4 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) fsopen(0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x4000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x9, 0x0, 0xff, '\x00', 0xf7}, {0x0, 0x2a, 0x0, '\x00', 0x7e}, {0xfc, 0x12, 0x5, '\x00', 0xba}, {0x11, 0xb, 0x0, '\x00', 0xfe}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xa}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xef}, {0x0, 0x1, 0x5, '\x00', 0x3}, {0x2, 0x0, 0x8, '\x00', 0x3}, {0xc3, 0xfd, 0x0, '\x00', 0x2}, {0x0, 0x21, 0x88, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0xb, 0x9, 0x3}, {0x1, 0xbb}, {0x0, 0x4, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x6, 0x9}, {0x7f, 0xff, 0x3}]}}) 0s ago: executing program 0 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) setreuid(0xee01, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 25.286314][ T30] audit: type=1400 audit(1751286831.639:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.288172][ T273] cgroup: Unknown subsys name 'net' [ 25.309091][ T30] audit: type=1400 audit(1751286831.639:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.336413][ T30] audit: type=1400 audit(1751286831.669:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.336706][ T273] cgroup: Unknown subsys name 'devices' [ 25.506898][ T273] cgroup: Unknown subsys name 'hugetlb' [ 25.512528][ T273] cgroup: Unknown subsys name 'rlimit' [ 25.726454][ T30] audit: type=1400 audit(1751286832.079:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.749648][ T30] audit: type=1400 audit(1751286832.079:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.762394][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.774795][ T30] audit: type=1400 audit(1751286832.079:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.806134][ T30] audit: type=1400 audit(1751286832.129:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.816034][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.831530][ T30] audit: type=1400 audit(1751286832.129:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.865998][ T30] audit: type=1400 audit(1751286832.159:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.891571][ T30] audit: type=1400 audit(1751286832.159:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.855120][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.862186][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.869777][ T282] device bridge_slave_0 entered promiscuous mode [ 27.878328][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.885434][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.892934][ T282] device bridge_slave_1 entered promiscuous mode [ 27.966993][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.974101][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.981513][ T281] device bridge_slave_0 entered promiscuous mode [ 27.989944][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.997193][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.004663][ T281] device bridge_slave_1 entered promiscuous mode [ 28.017994][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.025124][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.032452][ T285] device bridge_slave_0 entered promiscuous mode [ 28.040133][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.047244][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.054730][ T285] device bridge_slave_1 entered promiscuous mode [ 28.150159][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.157263][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.164739][ T284] device bridge_slave_0 entered promiscuous mode [ 28.184234][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.191280][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.198755][ T284] device bridge_slave_1 entered promiscuous mode [ 28.208778][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.215976][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.223941][ T283] device bridge_slave_0 entered promiscuous mode [ 28.235675][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.242729][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.250304][ T283] device bridge_slave_1 entered promiscuous mode [ 28.412457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.419998][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.438720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.448055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.456297][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.463328][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.470890][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.489995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.498323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.506978][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.514065][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.549140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.582888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.590996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.599499][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.606564][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.614650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.631199][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.639581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.648132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.656419][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.663432][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.670940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.679117][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.686159][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.693543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.701778][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.708823][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.716261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.738169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.746249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.754450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.762736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.771828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.781596][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.788860][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.798080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.827728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.837428][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.844645][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.875834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.886594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.896113][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.903206][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.911394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.921118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.930285][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.937474][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.946904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.982366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.993566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.042562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.052155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.060791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.069873][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.090505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.098780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.107037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.115429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.123322][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.132024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.140442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.148800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.162000][ T285] device veth0_vlan entered promiscuous mode [ 29.172917][ T282] device veth0_vlan entered promiscuous mode [ 29.180347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.188794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.197431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.205751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.213736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.221719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.229922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.237556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.245010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.252428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.263703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.272140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.287120][ T285] device veth1_macvtap entered promiscuous mode [ 29.301451][ T281] device veth0_vlan entered promiscuous mode [ 29.313641][ T282] device veth1_macvtap entered promiscuous mode [ 29.323045][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.331698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.340109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.348037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.356485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.365034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.373436][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.381862][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.389866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.398136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.406459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.414792][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.422438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.430006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.441035][ T283] device veth0_vlan entered promiscuous mode [ 29.457498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.465856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.474315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.482511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.491077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.499546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.509259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.516833][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.528736][ T284] device veth0_vlan entered promiscuous mode [ 29.535904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.544428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.552676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.560836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.569068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.577878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.589545][ T281] device veth1_macvtap entered promiscuous mode [ 29.597163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.605775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.613395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.621202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.633672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.642220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.652634][ T283] device veth1_macvtap entered promiscuous mode [ 29.662301][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 29.679001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.688245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.696736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.705161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.732176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.742468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.751184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.760577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.769268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.777798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.790927][ T284] device veth1_macvtap entered promiscuous mode [ 29.837602][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.856510][ T307] loop4: detected capacity change from 0 to 512 [ 29.866819][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.876777][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.895364][ T311] loop3: detected capacity change from 0 to 256 [ 29.909816][ T307] EXT4-fs (loop4): Ignoring removed nobh option [ 29.916921][ T307] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 29.916921][ T307] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 29.916921][ T307] [ 29.922480][ T309] loop1: detected capacity change from 0 to 8192 [ 29.943317][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.961951][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.976182][ T307] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.032267][ T307] EXT4-fs error (device loop4): ext4_do_update_inode:5234: inode #16: comm syz.4.5: corrupted inode contents [ 30.046808][ T307] EXT4-fs (loop4): Remounting filesystem read-only [ 30.054591][ T307] EXT4-fs error (device loop4): ext4_dirty_inode:6070: inode #16: comm syz.4.5: mark_inode_dirty error [ 30.078107][ T311] FAT-fs (loop3): Directory bread(block 64) failed [ 30.089347][ T311] FAT-fs (loop3): Directory bread(block 65) failed [ 30.096148][ T311] FAT-fs (loop3): Directory bread(block 66) failed [ 30.102739][ T311] FAT-fs (loop3): Directory bread(block 67) failed [ 30.109423][ T311] FAT-fs (loop3): Directory bread(block 68) failed [ 30.116188][ T311] FAT-fs (loop3): Directory bread(block 69) failed [ 30.122816][ T311] FAT-fs (loop3): Directory bread(block 70) failed [ 30.129417][ T311] FAT-fs (loop3): Directory bread(block 71) failed [ 30.144388][ T311] FAT-fs (loop3): Directory bread(block 72) failed [ 30.151015][ T311] FAT-fs (loop3): Directory bread(block 73) failed [ 30.214420][ T307] EXT4-fs (loop4): Remounting filesystem read-only [ 30.224090][ T307] EXT4-fs error (device loop4): ext4_do_update_inode:5234: inode #16: comm syz.4.5: corrupted inode contents [ 30.244878][ T307] EXT4-fs (loop4): Remounting filesystem read-only [ 30.251420][ T307] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.5: mark_inode_dirty error [ 30.335116][ T307] EXT4-fs (loop4): Remounting filesystem read-only [ 30.372623][ T307] EXT4-fs error (device loop4): ext4_do_update_inode:5234: inode #16: comm syz.4.5: corrupted inode contents [ 30.513953][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 30.514005][ T30] audit: type=1400 audit(1751286836.789:108): avc: denied { create } for pid=321 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.540790][ T307] EXT4-fs (loop4): Remounting filesystem read-only [ 30.547446][ T307] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 30.566485][ T307] EXT4-fs (loop4): Remounting filesystem read-only [ 30.573072][ T307] EXT4-fs error (device loop4): ext4_do_update_inode:5234: inode #16: comm syz.4.5: corrupted inode contents [ 30.580246][ T316] loop2: detected capacity change from 0 to 1024 [ 30.596923][ T307] EXT4-fs (loop4): Remounting filesystem read-only [ 30.609924][ T307] EXT4-fs error (device loop4): ext4_truncate:4304: inode #16: comm syz.4.5: mark_inode_dirty error [ 30.634276][ T307] EXT4-fs (loop4): Remounting filesystem read-only [ 30.643039][ T307] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 30.655047][ T316] EXT4-fs (loop2): Unrecognized mount option "fsmagic=0x0000000000000004" or missing value [ 30.665971][ T307] EXT4-fs (loop4): Remounting filesystem read-only [ 30.675571][ T30] audit: type=1400 audit(1751286837.029:109): avc: denied { create } for pid=310 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.714101][ T307] EXT4-fs (loop4): 1 truncate cleaned up [ 30.719813][ T307] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,max_batch_time=0x0000000000000008,nobh,lazytime,auto_da_alloc=0x0000000000000008,noacl,. Quota mode: writeback. [ 30.737164][ T30] audit: type=1400 audit(1751286837.029:110): avc: denied { connect } for pid=310 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.760812][ T307] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.779846][ T30] audit: type=1400 audit(1751286837.119:111): avc: denied { mount } for pid=306 comm="syz.4.5" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.832794][ T30] audit: type=1400 audit(1751286837.179:112): avc: denied { mounton } for pid=308 comm="syz.1.2" path="/0/bus/bus" dev="loop1" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 30.856114][ T30] audit: type=1400 audit(1751286837.209:113): avc: denied { read } for pid=306 comm="syz.4.5" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.879665][ T307] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.898879][ T30] audit: type=1400 audit(1751286837.209:114): avc: denied { open } for pid=306 comm="syz.4.5" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.967192][ T329] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 30.990024][ T30] audit: type=1400 audit(1751286837.239:115): avc: denied { ioctl } for pid=306 comm="syz.4.5" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.029457][ T30] audit: type=1400 audit(1751286837.279:116): avc: denied { prog_run } for pid=321 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.051539][ T337] FAULT_INJECTION: forcing a failure. [ 31.051539][ T337] name failslab, interval 1, probability 0, space 0, times 1 [ 31.072920][ T337] CPU: 0 PID: 337 Comm: syz.2.6 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 31.082594][ T337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.092683][ T337] Call Trace: [ 31.095985][ T337] [ 31.098938][ T337] __dump_stack+0x21/0x30 [ 31.103397][ T337] dump_stack_lvl+0xee/0x150 [ 31.108013][ T337] ? show_regs_print_info+0x20/0x20 [ 31.113325][ T337] dump_stack+0x15/0x20 [ 31.117497][ T337] should_fail+0x3c1/0x510 [ 31.121937][ T337] __should_failslab+0xa4/0xe0 [ 31.126722][ T337] should_failslab+0x9/0x20 [ 31.131246][ T337] slab_pre_alloc_hook+0x3b/0xe0 [ 31.136208][ T337] kmem_cache_alloc_trace+0x48/0x270 [ 31.141522][ T337] ? __se_sys_mount+0x153/0x380 [ 31.146435][ T337] __se_sys_mount+0x153/0x380 [ 31.151229][ T337] ? __x64_sys_mount+0xd0/0xd0 [ 31.156014][ T337] ? __ia32_sys_read+0x90/0x90 [ 31.160804][ T337] __x64_sys_mount+0xbf/0xd0 [ 31.165429][ T337] x64_sys_call+0x6bf/0x9a0 [ 31.169953][ T337] do_syscall_64+0x4c/0xa0 [ 31.174483][ T337] ? clear_bhb_loop+0x50/0xa0 [ 31.179284][ T337] ? clear_bhb_loop+0x50/0xa0 [ 31.183121][ T30] audit: type=1400 audit(1751286837.279:117): avc: denied { prog_run } for pid=321 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.183971][ T337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.184008][ T337] RIP: 0033:0x7fe6c2004929 [ 31.184030][ T337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.232561][ T337] RSP: 002b:00007fe6c066d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 31.241088][ T337] RAX: ffffffffffffffda RBX: 00007fe6c222bfa0 RCX: 00007fe6c2004929 [ 31.249065][ T337] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 31.257300][ T337] RBP: 00007fe6c066d090 R08: 0000200000000600 R09: 0000000000000000 [ 31.265271][ T337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.273251][ T337] R13: 0000000000000000 R14: 00007fe6c222bfa0 R15: 00007ffd478db688 [ 31.281225][ T337] [ 32.164490][ T346] loop2: detected capacity change from 0 to 256 [ 32.195284][ T346] ======================================================= [ 32.195284][ T346] WARNING: The mand mount option has been deprecated and [ 32.195284][ T346] and is ignored by this kernel. Remove the mand [ 32.195284][ T346] option from the mount to silence this warning. [ 32.195284][ T346] ======================================================= [ 32.230789][ T346] exfat: Unknown parameter 'GPL' [ 32.257883][ T283] ------------[ cut here ]------------ [ 32.263959][ T283] WARNING: CPU: 0 PID: 283 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 32.272167][ T283] Modules linked in: [ 32.277270][ T283] CPU: 0 PID: 283 Comm: syz-executor Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 32.287528][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.297939][ T283] RIP: 0010:drop_nlink+0xc5/0x110 [ 32.303172][ T283] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 63 3b f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 db c2 b3 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 32.323952][ T283] RSP: 0018:ffffc90000a47ca8 EFLAGS: 00010293 [ 32.330614][ T283] RAX: ffffffff81b4e505 RBX: ffff88810f6ec068 RCX: ffff88811de28000 [ 32.354645][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.363258][ T283] RBP: ffffc90000a47cd0 R08: 0000000000000004 R09: 0000000000000003 [ 32.404008][ T283] R10: fffff52000148f84 R11: 1ffff92000148f84 R12: dffffc0000000000 [ 32.442813][ T283] R13: 1ffff11021edd816 R14: ffff88810f6ec0b0 R15: 0000000000000000 [ 32.478189][ T283] FS: 000055557167c500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.488236][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.509147][ T283] CR2: 00007ffd7e5b8000 CR3: 0000000127dc6000 CR4: 00000000003526b0 [ 32.523183][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.531646][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.539999][ T283] Call Trace: [ 32.543432][ T283] [ 32.549710][ T283] shmem_rmdir+0x5b/0x90 [ 32.554490][ T283] vfs_rmdir+0x313/0x460 [ 32.558805][ T283] incfs_kill_sb+0x105/0x220 [ 32.563446][ T283] deactivate_locked_super+0xa0/0x100 [ 32.569481][ T283] deactivate_super+0xaf/0xe0 [ 32.574414][ T283] cleanup_mnt+0x446/0x500 [ 32.578911][ T283] __cleanup_mnt+0x19/0x20 [ 32.583509][ T283] task_work_run+0x127/0x190 [ 32.588544][ T283] exit_to_user_mode_loop+0xd0/0xe0 [ 32.594055][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 32.599592][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 32.605377][ T283] do_syscall_64+0x58/0xa0 [ 32.610017][ T283] ? clear_bhb_loop+0x50/0xa0 [ 32.615347][ T283] ? clear_bhb_loop+0x50/0xa0 [ 32.620156][ T283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.626379][ T283] RIP: 0033:0x7fe6c2005c57 [ 32.630871][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 32.651336][ T283] RSP: 002b:00007ffd478da918 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.660028][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe6c2005c57 [ 32.668147][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd478da9d0 [ 32.676534][ T283] RBP: 00007ffd478da9d0 R08: 0000000000000000 R09: 0000000000000000 [ 32.684624][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd478dba60 [ 32.692669][ T283] R13: 00007fe6c2086925 R14: 0000000000007d75 R15: 00007ffd478dbaa0 [ 32.700849][ T283] [ 32.703909][ T283] ---[ end trace 76ca4949fdd16549 ]--- [ 32.709420][ T283] ================================================================== [ 32.717472][ T283] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 32.723719][ T283] Write of size 4 at addr 0000000000000170 by task syz-executor/283 [ 32.731691][ T283] [ 32.734008][ T283] CPU: 0 PID: 283 Comm: syz-executor Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 32.745368][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.755418][ T283] Call Trace: [ 32.758694][ T283] [ 32.761621][ T283] __dump_stack+0x21/0x30 [ 32.765948][ T283] dump_stack_lvl+0xee/0x150 [ 32.770542][ T283] ? show_regs_print_info+0x20/0x20 [ 32.775732][ T283] ? _raw_spin_lock+0x8e/0xe0 [ 32.780433][ T283] ? _raw_spin_trylock_bh+0x130/0x130 [ 32.785807][ T283] ? ihold+0x20/0x60 [ 32.789695][ T283] kasan_report+0xe7/0x140 [ 32.794134][ T283] ? ihold+0x20/0x60 [ 32.798027][ T283] kasan_check_range+0x280/0x290 [ 32.802971][ T283] __kasan_check_write+0x14/0x20 [ 32.807904][ T283] ihold+0x20/0x60 [ 32.811615][ T283] vfs_rmdir+0x1f0/0x460 [ 32.815846][ T283] incfs_kill_sb+0x105/0x220 [ 32.820426][ T283] deactivate_locked_super+0xa0/0x100 [ 32.825808][ T283] deactivate_super+0xaf/0xe0 [ 32.830472][ T283] cleanup_mnt+0x446/0x500 [ 32.834879][ T283] __cleanup_mnt+0x19/0x20 [ 32.839308][ T283] task_work_run+0x127/0x190 [ 32.843914][ T283] exit_to_user_mode_loop+0xd0/0xe0 [ 32.849134][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 32.854603][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 32.860059][ T283] do_syscall_64+0x58/0xa0 [ 32.864474][ T283] ? clear_bhb_loop+0x50/0xa0 [ 32.869155][ T283] ? clear_bhb_loop+0x50/0xa0 [ 32.873828][ T283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.879754][ T283] RIP: 0033:0x7fe6c2005c57 [ 32.884169][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 32.903778][ T283] RSP: 002b:00007ffd478da918 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.912225][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe6c2005c57 [ 32.920193][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd478da9d0 [ 32.928162][ T283] RBP: 00007ffd478da9d0 R08: 0000000000000000 R09: 0000000000000000 [ 32.936148][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd478dba60 [ 32.944120][ T283] R13: 00007fe6c2086925 R14: 0000000000007d75 R15: 00007ffd478dbaa0 [ 32.952091][ T283] [ 32.955104][ T283] ================================================================== [ 32.963151][ T283] Disabling lock debugging due to kernel taint [ 33.233932][ T283] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 33.241788][ T283] #PF: supervisor write access in kernel mode [ 33.247870][ T283] #PF: error_code(0x0002) - not-present page [ 33.253872][ T283] PGD 12a0e3067 P4D 12a0e3067 PUD 0 [ 33.259189][ T283] Oops: 0002 [#1] PREEMPT SMP KASAN [ 33.264411][ T283] CPU: 1 PID: 283 Comm: syz-executor Tainted: G B W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 33.275781][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.285923][ T283] RIP: 0010:ihold+0x26/0x60 [ 33.290445][ T283] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 f1 ba b3 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 50 33 f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 71 [ 33.310177][ T283] RSP: 0000:ffffc90000a47ce8 EFLAGS: 00010246 [ 33.316257][ T283] RAX: ffff88811de28000 RBX: 0000000000000000 RCX: ffff88811de28000 [ 33.324249][ T283] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 33.332242][ T283] RBP: ffffc90000a47cf8 R08: 0000000000000004 R09: 0000000000000003 [ 33.340237][ T283] R10: fffffbfff0e17a4c R11: 1ffffffff0e17a4c R12: 1ffff1102132d9e2 [ 33.348220][ T283] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 33.356195][ T283] FS: 000055557167c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.365123][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.371705][ T283] CR2: 0000000000000170 CR3: 0000000127dc6000 CR4: 00000000003526a0 [ 33.379682][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.387653][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.395741][ T283] Call Trace: [ 33.399029][ T283] [ 33.401959][ T283] vfs_rmdir+0x1f0/0x460 [ 33.406205][ T283] incfs_kill_sb+0x105/0x220 [ 33.410801][ T283] deactivate_locked_super+0xa0/0x100 [ 33.416173][ T283] deactivate_super+0xaf/0xe0 [ 33.420853][ T283] cleanup_mnt+0x446/0x500 [ 33.425270][ T283] __cleanup_mnt+0x19/0x20 [ 33.429690][ T283] task_work_run+0x127/0x190 [ 33.434290][ T283] exit_to_user_mode_loop+0xd0/0xe0 [ 33.439535][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 33.444991][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 33.450448][ T283] do_syscall_64+0x58/0xa0 [ 33.454862][ T283] ? clear_bhb_loop+0x50/0xa0 [ 33.459537][ T283] ? clear_bhb_loop+0x50/0xa0 [ 33.464221][ T283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.470109][ T283] RIP: 0033:0x7fe6c2005c57 [ 33.474522][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 33.494125][ T283] RSP: 002b:00007ffd478da918 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.502542][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe6c2005c57 [ 33.510510][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd478da9d0 [ 33.518506][ T283] RBP: 00007ffd478da9d0 R08: 0000000000000000 R09: 0000000000000000 [ 33.526489][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd478dba60 [ 33.534462][ T283] R13: 00007fe6c2086925 R14: 0000000000007d75 R15: 00007ffd478dbaa0 [ 33.542438][ T283] [ 33.545467][ T283] Modules linked in: [ 33.549370][ T283] CR2: 0000000000000170 [ 33.553528][ T283] ---[ end trace 76ca4949fdd1654a ]--- [ 33.558973][ T283] RIP: 0010:ihold+0x26/0x60 [ 33.563477][ T283] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 f1 ba b3 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 50 33 f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 71 [ 33.583082][ T283] RSP: 0000:ffffc90000a47ce8 EFLAGS: 00010246 [ 33.589141][ T283] RAX: ffff88811de28000 RBX: 0000000000000000 RCX: ffff88811de28000 [ 33.597108][ T283] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 33.605081][ T283] RBP: ffffc90000a47cf8 R08: 0000000000000004 R09: 0000000000000003 [ 33.613066][ T283] R10: fffffbfff0e17a4c R11: 1ffffffff0e17a4c R12: 1ffff1102132d9e2 [ 33.621032][ T283] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 33.629002][ T283] FS: 000055557167c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.638124][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.644716][ T283] CR2: 0000000000000170 CR3: 0000000127dc6000 CR4: 00000000003526a0 [ 33.652699][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.660675][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.668664][ T283] Kernel panic - not syncing: Fatal exception [ 33.675057][ T283] Kernel Offset: disabled [ 33.679378][ T283] Rebooting in 86400 seconds..