last executing test programs: 15.486035675s ago: executing program 0 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x200, 0x0, 0x24}, &(0x7f00000001c0), 0x0) syslog(0x3, 0x0, 0x0) 10.49867984s ago: executing program 0 (id=340): ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) poll(0x0, 0x0, 0x200) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10005, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket(0x8000000010, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) 9.086824572s ago: executing program 2 (id=346): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xc1) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x0, 0xd, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 6.852611986s ago: executing program 2 (id=353): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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") r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8002, 0xc) pwritev(r0, 0x0, 0x0, 0x10000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.731628008s ago: executing program 3 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) setitimer(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000002340), 0x2000, &(0x7f0000001280)=ANY=[@ANYBLOB="7472616e0309759369782c63616368653d6e6f6e652c6361bfe147487265616461642c000000003d677f0503b2197bc96350797cffaa94b9ef19328c4155a75a880dffbad1d18ff61be2325e8383dfe4357bd1052415f2f3cbcc7697d1db0204113d9b7624206e12ede5001d0980120f79af685041131e32136488ecfbe526c06a54b97c0a4493791e2c909974b586f4df249d6671001708b422f448d90d6ce48e5d220517bb12fa847de65f38ac674cd6a33dff0eeea55875d57d3188a7d21122d07cab8d672bfb0268d51ae413b68b89e3ff6b3deb9810654297b8fe2c86699704ec304614126bc2e738a5d2715919bbaa091200000000000000"]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000080)=0x4) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, "00769aff95595915303d74ffdeffff000400"}) read(r4, &(0x7f0000000280)=""/4096, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000005, 0x10012, r5, 0x0) r6 = syz_open_pts(r4, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.730679608s ago: executing program 0 (id=356): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.553489485s ago: executing program 4 (id=357): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0xf) lstat(0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getitimer(0x0, 0x0) timer_settime(r1, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) 5.123700062s ago: executing program 3 (id=359): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)}, 0xfffffff8}], 0x2, 0x832b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="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", 0x57b, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r8, r10, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x800, 0x200000, 0x88, 0x0, 0xffffffff, 0x8003}}}}]}, 0x89}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd75}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r12}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}}, 0x20000010) 5.021794983s ago: executing program 0 (id=360): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 4.980325114s ago: executing program 3 (id=361): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @multicast}) 4.979529284s ago: executing program 1 (id=371): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)}, 0xfffffff8}], 0x2, 0x832b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="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", 0x57b, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r8, r10, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x800, 0x200000, 0x88, 0x0, 0xffffffff, 0x8003}}}}]}, 0x89}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd75}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r12}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}}, 0x20000010) 4.652354189s ago: executing program 1 (id=362): socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet_nvme_of_msg(0xffffffffffffffff, &(0x7f0000000040)={@icresp={{0x1, 0x5, 0x80, 0xfb, 0x8}, 0x0, 0x0, 0x1, 0x5}, @void}, 0x80, 0x0, 0x0, 0x0) personality(0x400000b) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0xf8, 0x0, 0x1, 0xd, 0x6, @local}, 0x14) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1}, 0x4) 4.407616473s ago: executing program 4 (id=363): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a1cc04, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_lower}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_winnt}, {@fat=@discard}]}, 0x81, 0x2ac, &(0x7f0000000840)="$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") socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='kfree\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) 4.382149303s ago: executing program 1 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 3.852962442s ago: executing program 3 (id=365): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c00)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa0800000000000000bbbb0800451300240064000007219078ac1414bbac1414aa4e244e2404319078020200cb08fc3ee6"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) 3.825627372s ago: executing program 0 (id=366): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'wg2\x00', {0x1}, 0x86b}) r5 = socket(0x10, 0x80003, 0x0) write(r5, 0x0, 0x0) 2.826301357s ago: executing program 0 (id=367): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@grpquota}, {@nolazytime}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x56d, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 2.824793377s ago: executing program 1 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet(0x2, 0x3, 0x6) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000540)={0x2, 0x4e20, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r4, 0x0) 2.807238817s ago: executing program 2 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) setitimer(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000002340), 0x2000, &(0x7f0000001280)=ANY=[@ANYBLOB="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"]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000080)=0x4) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, "00769aff95595915303d74ffdeffff000400"}) read(r4, &(0x7f0000000280)=""/4096, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000005, 0x10012, r5, 0x0) r6 = syz_open_pts(r4, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.482060402s ago: executing program 3 (id=370): syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x2000c16, &(0x7f0000000340)={[{@usrquota}, {@noblock_validity}, {@grpjquota}, {@nouid32}]}, 0xfb, 0x260, &(0x7f0000000780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10400) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 1.944920071s ago: executing program 1 (id=372): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.944556411s ago: executing program 4 (id=373): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)}, 0xfffffff8}], 0x2, 0x832b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="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", 0x57b, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r8, r10, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x800, 0x200000, 0x88, 0x0, 0xffffffff, 0x8003}}}}]}, 0x89}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd75}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r12}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}}, 0x20000010) 1.819824192s ago: executing program 4 (id=374): bpf$PROG_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0xa) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44000, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x20000c40) 1.241937281s ago: executing program 2 (id=375): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0xf) lstat(0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getitimer(0x0, 0x0) timer_settime(r1, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) 176.233388ms ago: executing program 2 (id=376): socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet_nvme_of_msg(0xffffffffffffffff, &(0x7f0000000040)={@icresp={{0x1, 0x5, 0x80, 0xfb, 0x8}, 0x0, 0x0, 0x1, 0x5}, @void}, 0x80, 0x0, 0x0, 0x0) personality(0x400000b) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0xf8, 0x0, 0x1, 0xd, 0x6, @local}, 0x14) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1}, 0x4) 175.804788ms ago: executing program 2 (id=377): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @multicast}) 175.417268ms ago: executing program 1 (id=378): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r1, 0xefca115) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x4, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf9d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x1, 0x3, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0x401, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x7, 0x5, 0x3, 0x1ff, 0x200e5, 0x2f, 0xd, 0x3, 0xa, 0x4, 0x1, 0x9, 0x11, 0x6154, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fc, 0x84, 0x9, 0x4, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x1, 0x100, 0x405, 0x8, 0x3, 0xb5, 0x10001, 0x4, 0x4, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x80000001, 0x2, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0x1, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1000001, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0xd, 0x8, 0xba, 0x204, 0x89, 0x2, 0x6, 0x100, 0xa60, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb7, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x180, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x9, 0x8, 0x2b, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x1, 0x723, 0x0, 0xe, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x3, 0x7f, 0x2, 0x80000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0xfffffffd, 0x5, 0x6042, 0xb87, 0x6, 0x8d8d, 0x55, 0x101, 0x8, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x77359400}}, 0x0) 165.637198ms ago: executing program 4 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000040)=[{0x5, 0x6, 0x1, 0x9}, {0x9, 0x6, 0xfb, 0x4000d08}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) stat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3, 0x1, 0x7f, 0x1, 0x401}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4800}, 0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 105.760149ms ago: executing program 3 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0xb, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$eJzs3T9rZFUUAPDzkjdvZlWYKaxE8IEWVutmW5sJsgExlUsKtdDg7oJkgrALAf/g7Fa2NhYWfgJB8IPY+A0EW8HOVRauvH/MSzKJO8GJaH6/Jod7z3n3vJdL8lLkzgcvHh7cKePeo89/jtEoi41pTONxFpPYiM7DOGb6VQAA/2WPU4rfUuPMpOdOD2URMVpvawDAmpz9+7/sxfki/OHSWgMA1uT2O+++tb27e+vtshzFzuGXR3vVX/bV12Z++158FLO4GzdiHE8i6heFQdRvC1W4k1Ka52VlEq8czo/2qsrD939sr7/9a0RdvxXjmNRDKaW8C9LOm7u3tspGr35e9fFMu/60qr8Z43i+Xb99W+nqby6pj70iXn251//1GMdPH8bHMYs79dqL+i+2yvKN9PXvn71XdVXVZ/OjvWGdt5A2L/UbAwAAAAAAAAAAAAAAAAAAAADA/9r19uycYZSTP5szANvzdzafVPODKDuT4+fzNPVZd6H++UAppXmKb7vzdW6UZZnaxEV9Hi/k/YMFAQAAAAAAAAAAAAAAAAAA4Op68MmnB/uz2d37Fw6uxWKkOw0gj4g/bkdc9MrT3shLUQf5Wa0O2zX3Z7ONNjyek/dHYrPLySLObaO6iYs/loNVkq+d6rkNvvt+1dVHf58zWL7WPxl0u+tgP1v+DIfRjYzaTfJNEb2NVMRTrlWcNZVile1XLJ0ar3zvxbN1MD8nJ7LzGnv9l+bJtSPZybso6qfajLw2aHLbqUGb0ys/sTeeaj/HqCk//bMic1oHAAAAAAAAAAAAAAAAAACs1eK/f5dMPjq3dCMN19YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyqxef/rxDM2+KTU/GwGe8lF3H/wb95fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwNfwUAAP//ThJUUw==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 0s ago: executing program 4 (id=381): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c00)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa0800000000000000bbbb0800451300240064000007219078ac1414bbac1414aa4e244e2404319078020200cb08fc3ee6"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 26.888732][ T28] audit: type=1400 audit(1748917048.892:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.890314][ T274] cgroup: Unknown subsys name 'net' [ 26.913578][ T28] audit: type=1400 audit(1748917048.892:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.943889][ T28] audit: type=1400 audit(1748917048.932:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.944127][ T274] cgroup: Unknown subsys name 'devices' [ 27.091099][ T274] cgroup: Unknown subsys name 'hugetlb' [ 27.097684][ T274] cgroup: Unknown subsys name 'rlimit' [ 27.203268][ T28] audit: type=1400 audit(1748917049.202:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.227960][ T28] audit: type=1400 audit(1748917049.202:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.247731][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.255188][ T28] audit: type=1400 audit(1748917049.202:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.289020][ T28] audit: type=1400 audit(1748917049.272:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.315977][ T28] audit: type=1400 audit(1748917049.272:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.324253][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.343337][ T28] audit: type=1400 audit(1748917049.322:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.380015][ T28] audit: type=1400 audit(1748917049.322:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.381152][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.389063][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.397006][ T282] device bridge_slave_0 entered promiscuous mode [ 28.404956][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.413019][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.422108][ T282] device bridge_slave_1 entered promiscuous mode [ 28.484936][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.492435][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.500627][ T283] device bridge_slave_0 entered promiscuous mode [ 28.519807][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.527055][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.535053][ T283] device bridge_slave_1 entered promiscuous mode [ 28.612444][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.619804][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.627415][ T286] device bridge_slave_0 entered promiscuous mode [ 28.635314][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.642537][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.650134][ T286] device bridge_slave_1 entered promiscuous mode [ 28.675826][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.682923][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.690777][ T285] device bridge_slave_0 entered promiscuous mode [ 28.714545][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.723115][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.730959][ T285] device bridge_slave_1 entered promiscuous mode [ 28.737777][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.745267][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.754262][ T284] device bridge_slave_0 entered promiscuous mode [ 28.772296][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.779728][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.788882][ T284] device bridge_slave_1 entered promiscuous mode [ 28.946029][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.953506][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.961751][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.971803][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.015878][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.023342][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.031839][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.039171][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.082879][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.090234][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.097911][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.105345][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.120260][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.127508][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.134977][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.142476][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.152904][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.160296][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.168193][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.175999][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.196958][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.204891][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.212690][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.220277][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.227931][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.236406][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.244138][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.252611][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.260582][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.269260][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.277993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.286714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.299730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.322057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.330919][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.338131][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.369550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.379164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.387631][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.394801][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.402332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.410824][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.418965][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.427840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.437490][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.447084][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.457348][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.466304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.475752][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.484239][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.510377][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.519471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.527861][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.534945][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.543649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.551639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.559336][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.572442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.580575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.605421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.614352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.622769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.631148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.639777][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.647917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.656683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.665122][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.672303][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.679796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.688331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.696975][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.704148][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.711694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.720303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.728736][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.735972][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.743408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.752167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.760736][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.767770][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.802072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.810997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.819261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.827368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.836461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.844701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.852999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.861161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.869746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.878245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.886728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.895036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.903884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.912466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.923391][ T282] device veth0_vlan entered promiscuous mode [ 29.937541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.945594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.962768][ T285] device veth0_vlan entered promiscuous mode [ 29.972891][ T282] device veth1_macvtap entered promiscuous mode [ 29.980646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.989758][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.997353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.005694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.015176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.023761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.032348][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.040642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.066395][ T283] device veth0_vlan entered promiscuous mode [ 30.074135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.083883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.092795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.100937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.108967][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.118745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.126719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.135083][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.142847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.150747][ T286] device veth0_vlan entered promiscuous mode [ 30.167051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.175691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.184601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.193259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.203111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.219847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.227569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.235620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.246252][ T286] device veth1_macvtap entered promiscuous mode [ 30.259371][ T284] device veth0_vlan entered promiscuous mode [ 30.274346][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.286011][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.286066][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 30.310057][ T285] device veth1_macvtap entered promiscuous mode [ 30.320250][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.329589][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.339694][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.350191][ T284] device veth1_macvtap entered promiscuous mode [ 30.365770][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.374366][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.383201][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.400449][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.411124][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.418816][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.435807][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.445062][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.458345][ T308] device bridge_slave_1 left promiscuous mode [ 30.466448][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.474923][ T308] device bridge_slave_0 left promiscuous mode [ 30.481610][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.530355][ T283] device veth1_macvtap entered promiscuous mode [ 30.542136][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.553107][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.562949][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.572084][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.596195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.611884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.619201][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.629666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.630400][ T305] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 30.638106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.738115][ T324] loop2: detected capacity change from 0 to 256 [ 30.764720][ T324] exfat: Unknown parameter 'ÿÿÿÿ' [ 30.825285][ T324] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.991905][ T349] input: syz1 as /devices/virtual/input/input4 [ 31.360847][ T40] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.554583][ T368] loop0: detected capacity change from 0 to 256 [ 31.561341][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 31.581885][ T40] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 31.590411][ T40] usb 4-1: config 1 has no interface number 0 [ 31.596731][ T40] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 31.607303][ T40] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 31.617899][ T40] usb 4-1: config 1 interface 105 has no altsetting 0 [ 31.635023][ T40] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 31.650874][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.661777][ T40] usb 4-1: Product: syz [ 31.666331][ T40] usb 4-1: Manufacturer: syz [ 31.678316][ T40] usb 4-1: SerialNumber: syz [ 31.688164][ T356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 31.697701][ T356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 31.730881][ T376] serio: Serial port ptm0 [ 31.808542][ T315] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.907466][ T381] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 31.920261][ T381] device syzkaller0 entered promiscuous mode [ 31.955918][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 31.955934][ T28] audit: type=1400 audit(1748917053.952:150): avc: denied { mounton } for pid=382 comm="syz.2.28" path="/2/file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.009898][ T386] process 'syz.2.28' launched './file0' with NULL argv: empty string added [ 32.028811][ T315] usb 5-1: Using ep0 maxpacket: 8 [ 32.035468][ T315] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 32.043622][ T315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.053976][ T315] usb 5-1: config 0 has no interface number 0 [ 32.083939][ T389] loop2: detected capacity change from 0 to 256 [ 32.089631][ T315] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 32.104017][ T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.112984][ T315] usb 5-1: Product: syz [ 32.116032][ T390] loop0: detected capacity change from 0 to 128 [ 32.117462][ T315] usb 5-1: Manufacturer: syz [ 32.124570][ T356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 32.128909][ T315] usb 5-1: SerialNumber: syz [ 32.136914][ T356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 32.148768][ T390] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.161449][ T315] usb 5-1: config 0 descriptor?? [ 32.163536][ T390] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.167421][ T327] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 32.226025][ T390] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000400) [ 32.252952][ T390] FAT-fs (loop0): Filesystem has been set read-only [ 32.271324][ T390] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000400) [ 32.450030][ T19] usb 5-1: USB disconnect, device number 2 [ 32.538434][ T315] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 32.570825][ T40] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 32.582267][ T40] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 32.596364][ T40] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a6:7b:58:59:cd:1f [ 32.620227][ T28] audit: type=1400 audit(1748917054.622:151): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.642123][ T28] audit: type=1400 audit(1748917054.622:152): avc: denied { read } for pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=710 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.664843][ T28] audit: type=1400 audit(1748917054.622:153): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=710 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.687899][ T28] audit: type=1400 audit(1748917054.622:154): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=710 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.727215][ T28] audit: type=1400 audit(1748917054.722:155): avc: denied { create } for pid=400 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.753588][ T315] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.761801][ T28] audit: type=1400 audit(1748917054.722:156): avc: denied { write } for pid=400 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=713 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.778252][ T315] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 32.790826][ T28] audit: type=1400 audit(1748917054.722:157): avc: denied { append } for pid=400 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=713 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.820102][ T315] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.829985][ T28] audit: type=1400 audit(1748917054.762:158): avc: denied { unlink } for pid=411 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=713 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.859866][ T141] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71 [ 32.860146][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.884826][ T315] usb 3-1: Product: syz [ 32.889291][ T315] usb 3-1: Manufacturer: syz [ 32.894116][ T315] usb 3-1: SerialNumber: syz [ 32.894109][ T415] loop1: detected capacity change from 0 to 512 [ 32.895643][ T141] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -71 [ 32.900224][ T287] usb 4-1: USB disconnect, device number 2 [ 32.908469][ T141] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 32.913582][ T415] ======================================================= [ 32.913582][ T415] WARNING: The mand mount option has been deprecated and [ 32.913582][ T415] and is ignored by this kernel. Remove the mand [ 32.913582][ T415] option from the mount to silence this warning. [ 32.913582][ T415] ======================================================= [ 32.928999][ T141] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 32.968459][ T393] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 32.987947][ T287] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 33.033978][ T141] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 33.043237][ T415] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 33.043277][ T141] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 33.061618][ T28] audit: type=1400 audit(1748917055.072:159): avc: denied { append } for pid=423 comm="syz.0.37" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.061721][ T141] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 33.093215][ T141] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 33.093207][ T415] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.111985][ T141] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 33.127717][ T141] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 33.136477][ T141] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 33.145806][ T287] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 33.156955][ T287] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 33.159853][ T415] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #2: comm syz.1.34: corrupted inode contents [ 33.165389][ T287] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 33.186294][ T287] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 33.193986][ T415] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #2: comm syz.1.34: mark_inode_dirty error [ 33.206773][ T415] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #2: comm syz.1.34: corrupted inode contents [ 33.234744][ T415] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.34: mark_inode_dirty error [ 33.259036][ T287] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 33.279069][ T415] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 33.282105][ T287] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 33.289847][ T415] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #2: comm syz.1.34: corrupted inode contents [ 33.299073][ T287] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 33.321566][ T415] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #2: comm syz.1.34: mark_inode_dirty error [ 33.353851][ T415] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #2: comm syz.1.34: corrupted inode contents [ 33.375935][ T435] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #2: comm syz.1.34: corrupted inode contents [ 33.417038][ T435] EXT4-fs error (device loop1): ext4_setent:3695: inode #2: comm syz.1.34: mark_inode_dirty error [ 33.505557][ T282] EXT4-fs (loop1): unmounting filesystem. [ 33.568979][ T451] netlink: 96 bytes leftover after parsing attributes in process `syz.1.42'. [ 33.636549][ T459] incfs_lookup_dentry err:-5 [ 33.641318][ T459] incfs: Can't find or create .index dir in ./file0 [ 33.648217][ T459] incfs: mount failed -5 [ 34.049893][ T315] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 34.056479][ T315] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 34.250938][ T315] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 34.405854][ T484] device syzkaller0 entered promiscuous mode [ 34.482977][ T488] netlink: 96 bytes leftover after parsing attributes in process `syz.3.56'. [ 34.640653][ T504] device pim6reg1 entered promiscuous mode [ 34.657103][ T315] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 34.698556][ T315] usb 3-1: USB disconnect, device number 2 [ 34.708997][ T315] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 34.740582][ T513] loop0: detected capacity change from 0 to 256 [ 34.810390][ T521] loop1: detected capacity change from 0 to 256 [ 35.029098][ T537] loop0: detected capacity change from 0 to 1024 [ 35.037487][ T537] EXT4-fs: Ignoring removed nobh option [ 35.067796][ T537] EXT4-fs: Ignoring removed bh option [ 35.075605][ T537] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.109868][ T537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.187483][ T537] device syzkaller0 entered promiscuous mode [ 35.251043][ T553] device wg2 entered promiscuous mode [ 35.271409][ T284] EXT4-fs (loop0): unmounting filesystem. [ 35.410248][ T554] loop1: detected capacity change from 0 to 40427 [ 35.417820][ T554] F2FS-fs (loop1): fault_injection options not supported [ 35.426591][ T554] F2FS-fs (loop1): invalid crc value [ 35.439456][ T554] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.507943][ T554] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 35.600980][ T554] syz.1.73: attempt to access beyond end of device [ 35.600980][ T554] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 35.638170][ T576] kvm: pic: non byte write [ 35.656117][ T554] syz.1.73: attempt to access beyond end of device [ 35.656117][ T554] loop1: rw=2049, sector=77824, nr_sectors = 128 limit=40427 [ 35.657835][ T576] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 35.688709][ T578] loop0: detected capacity change from 0 to 2048 [ 35.700981][ T554] syz.1.73: attempt to access beyond end of device [ 35.700981][ T554] loop1: rw=2049, sector=45216, nr_sectors = 8 limit=40427 [ 35.744734][ T282] syz-executor: attempt to access beyond end of device [ 35.744734][ T282] loop1: rw=2049, sector=45224, nr_sectors = 16 limit=40427 [ 35.767107][ T578] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.789242][ T578] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.846466][ T284] EXT4-fs (loop0): unmounting filesystem. [ 35.936979][ T590] SELinux: failed to load policy [ 36.539294][ T639] loop3: detected capacity change from 0 to 1024 [ 36.588744][ T644] loop1: detected capacity change from 0 to 2048 [ 36.657247][ T644] loop1: p1 < > p3 [ 36.667837][ T644] loop1: p3 size 134217728 extends beyond EOD, truncated [ 36.734135][ T639] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 36.771473][ T327] udevd[327]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 36.782829][ T639] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.100: Allocating blocks 497-513 which overlap fs metadata [ 36.809778][ T313] udevd[313]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 36.849368][ T639] EXT4-fs (loop3): pa ffff8881171605e8: logic 16, phys. 145, len 23 [ 36.857818][ T639] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 36.858539][ T689] device syzkaller0 entered promiscuous mode [ 36.960366][ T283] EXT4-fs (loop3): unmounting filesystem. [ 37.188400][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.312134][ T835] mmap: syz.3.110 (835) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.334645][ T28] kauditd_printk_skb: 313 callbacks suppressed [ 37.334661][ T28] audit: type=1400 audit(1748917059.332:473): avc: denied { map } for pid=624 comm="syz.4.99" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.366266][ T28] audit: type=1400 audit(1748917059.342:474): avc: denied { wake_alarm } for pid=836 comm="syz.0.111" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.393145][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.400262][ T28] audit: type=1400 audit(1748917059.362:475): avc: denied { write } for pid=624 comm="syz.4.99" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.413659][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.433383][ T28] audit: type=1400 audit(1748917059.392:476): avc: denied { read } for pid=834 comm="syz.3.110" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.450009][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 37.459489][ T28] audit: type=1400 audit(1748917059.392:477): avc: denied { open } for pid=834 comm="syz.3.110" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.491704][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.491729][ T24] usb 3-1: SerialNumber: syz [ 37.521855][ T28] audit: type=1400 audit(1748917059.392:478): avc: denied { read write } for pid=834 comm="syz.3.110" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.551666][ T28] audit: type=1400 audit(1748917059.392:479): avc: denied { open } for pid=834 comm="syz.3.110" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.576111][ T28] audit: type=1400 audit(1748917059.512:480): avc: denied { unmount } for pid=843 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.755271][ T24] usb 3-1: 0:2 : does not exist [ 37.781422][ T24] usb 3-1: USB disconnect, device number 3 [ 37.805043][ T28] audit: type=1400 audit(1748917059.802:481): avc: denied { create } for pid=855 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.999058][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.050460][ T860] loop1: detected capacity change from 0 to 128 [ 38.057810][ T860] EXT4-fs (loop1): Test dummy encryption mode enabled [ 38.066282][ T860] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.075718][ T860] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.091500][ T28] audit: type=1400 audit(1748917060.092:482): avc: denied { create } for pid=859 comm="syz.1.119" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 38.393695][ T869] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 38.833478][ T887] loop3: detected capacity change from 0 to 512 [ 38.852052][ T887] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.126: casefold flag without casefold feature [ 38.867778][ T887] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.126: couldn't read orphan inode 15 (err -117) [ 38.882434][ T887] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.930332][ T282] EXT4-fs (loop1): unmounting filesystem. [ 39.009568][ T283] EXT4-fs (loop3): unmounting filesystem. [ 39.213636][ T900] overlayfs: failed to set xattr on upper [ 39.219871][ T900] overlayfs: failed to resolve './file0': -2 [ 39.898424][ T905] syz.0.131 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.504563][ T918] kvm: pic: non byte write [ 40.511900][ T918] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 40.550870][ T927] incfs_lookup_dentry err:-5 [ 40.555847][ T927] incfs: Can't find or create .index dir in ./file0 [ 40.565544][ T927] incfs: mount failed -5 [ 42.169166][ T960] loop4: detected capacity change from 0 to 2048 [ 42.191116][ T960] loop4: p1 < > p3 [ 42.198795][ T960] loop4: p3 size 134217728 extends beyond EOD, truncated [ 42.260976][ T960] kvm: emulating exchange as write [ 42.872369][ T974] loop0: detected capacity change from 0 to 40427 [ 42.895437][ T974] F2FS-fs (loop0): fault_injection options not supported [ 42.922560][ T974] F2FS-fs (loop0): invalid crc value [ 42.945349][ T974] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.048445][ T974] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 43.143603][ T974] syz.0.152: attempt to access beyond end of device [ 43.143603][ T974] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 43.164809][ T974] syz.0.152: attempt to access beyond end of device [ 43.164809][ T974] loop0: rw=2049, sector=77824, nr_sectors = 128 limit=40427 [ 43.181301][ T974] syz.0.152: attempt to access beyond end of device [ 43.181301][ T974] loop0: rw=2049, sector=45216, nr_sectors = 8 limit=40427 [ 43.218121][ T284] syz-executor: attempt to access beyond end of device [ 43.218121][ T284] loop0: rw=2049, sector=45224, nr_sectors = 16 limit=40427 [ 43.348016][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 43.348033][ T28] audit: type=1400 audit(1748917065.342:506): avc: denied { ioctl } for pid=984 comm="syz.4.157" path="socket:[18524]" dev="sockfs" ino=18524 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.409090][ T987] device wireguard0 entered promiscuous mode [ 43.816131][ T1003] incfs_lookup_dentry err:-5 [ 43.821323][ T1003] incfs: Can't find or create .index dir in ./file0 [ 43.829530][ T1003] incfs: mount failed -5 [ 43.849278][ T28] audit: type=1400 audit(1748917065.852:507): avc: denied { read } for pid=1005 comm="syz.0.162" path="socket:[18293]" dev="sockfs" ino=18293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.135596][ T1011] loop2: detected capacity change from 0 to 256 [ 44.160202][ T1011] FAT-fs (loop2): Directory bread(block 64) failed [ 44.167136][ T1011] FAT-fs (loop2): Directory bread(block 65) failed [ 44.174430][ T1011] FAT-fs (loop2): Directory bread(block 66) failed [ 44.181897][ T1011] FAT-fs (loop2): Directory bread(block 67) failed [ 44.188752][ T1011] FAT-fs (loop2): Directory bread(block 68) failed [ 44.195386][ T1011] FAT-fs (loop2): Directory bread(block 69) failed [ 44.202313][ T1011] FAT-fs (loop2): Directory bread(block 70) failed [ 44.209295][ T1011] FAT-fs (loop2): Directory bread(block 71) failed [ 44.216186][ T1011] FAT-fs (loop2): Directory bread(block 72) failed [ 44.223314][ T1011] FAT-fs (loop2): Directory bread(block 73) failed [ 44.305561][ T28] audit: type=1326 audit(1748917066.302:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15318e969 code=0x7ffc0000 [ 44.331550][ T28] audit: type=1326 audit(1748917066.342:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd15318e969 code=0x7ffc0000 [ 44.363607][ T28] audit: type=1326 audit(1748917066.342:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15318e969 code=0x7ffc0000 [ 44.392174][ T28] audit: type=1326 audit(1748917066.342:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd15318e969 code=0x7ffc0000 [ 44.498407][ T28] audit: type=1326 audit(1748917066.342:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15318e969 code=0x7ffc0000 [ 44.528404][ T28] audit: type=1326 audit(1748917066.342:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd15318e969 code=0x7ffc0000 [ 44.568403][ T28] audit: type=1400 audit(1748917066.342:514): avc: denied { ioctl } for pid=1013 comm="syz.4.164" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.610581][ T28] audit: type=1326 audit(1748917066.342:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15318e969 code=0x7ffc0000 [ 44.645218][ T1022] incfs: Can't find or create .index dir in ./file0 [ 44.662884][ T1022] incfs: mount failed -14 [ 44.729077][ T1025] incfs: Can't find or create .index dir in ./file0 [ 44.738956][ T1025] incfs: mount failed -5 [ 44.774686][ T1019] loop2: detected capacity change from 0 to 40427 [ 44.798589][ T1019] F2FS-fs (loop2): fault_injection options not supported [ 44.807879][ T1019] F2FS-fs (loop2): invalid crc value [ 44.832645][ T1019] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.883770][ T1019] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 44.942656][ T1019] syz.2.166: attempt to access beyond end of device [ 44.942656][ T1019] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 44.962667][ T1019] syz.2.166: attempt to access beyond end of device [ 44.962667][ T1019] loop2: rw=2049, sector=77824, nr_sectors = 128 limit=40427 [ 44.988460][ T6] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 44.998563][ T1019] syz.2.166: attempt to access beyond end of device [ 44.998563][ T1019] loop2: rw=2049, sector=45216, nr_sectors = 8 limit=40427 [ 45.041900][ T285] syz-executor: attempt to access beyond end of device [ 45.041900][ T285] loop2: rw=2049, sector=45224, nr_sectors = 16 limit=40427 [ 45.181060][ T6] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 45.193496][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.222325][ T6] usb 2-1: Product: syz [ 45.249182][ T6] usb 2-1: Manufacturer: syz [ 45.254023][ T6] usb 2-1: SerialNumber: syz [ 45.279481][ T6] usb 2-1: config 0 descriptor?? [ 45.348990][ T1045] incfs_lookup_dentry err:-5 [ 45.359773][ T1045] incfs: Can't find or create .index dir in ./file0 [ 45.369566][ T1045] incfs: mount failed -5 [ 45.468150][ T1054] loop0: detected capacity change from 0 to 1024 [ 45.469510][ T1049] kvm: pic: non byte write [ 45.477650][ T1054] EXT4-fs: Ignoring removed orlov option [ 45.512248][ T1054] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.522286][ T1049] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 45.901133][ T1061] fuse: root generation should be zero [ 46.082724][ T1070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'. [ 46.170192][ T1073] device syzkaller0 entered promiscuous mode [ 46.381059][ T284] EXT4-fs (loop0): unmounting filesystem. [ 46.697627][ T1088] overlayfs: failed to set xattr on upper [ 46.703888][ T1088] overlayfs: failed to resolve './file0': -2 [ 47.131175][ T1091] loop3: detected capacity change from 0 to 256 [ 47.147117][ T1094] incfs_lookup_dentry err:-5 [ 47.152225][ T1094] incfs: Can't find or create .index dir in ./file0 [ 47.159847][ T1094] incfs: mount failed -5 [ 47.205132][ T1098] incfs: Can't find or create .index dir in ./file0 [ 47.221675][ T1098] incfs: mount failed -5 [ 47.729439][ T6] usb 2-1: USB disconnect, device number 2 [ 48.378622][ T1123] device pim6reg1 entered promiscuous mode [ 49.138404][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 49.241012][ T1136] loop2: detected capacity change from 0 to 40427 [ 49.250898][ T1136] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 49.265337][ T1136] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 49.283509][ T1136] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.327619][ T1136] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 49.329550][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.334861][ T1136] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 49.363435][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 49.382127][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 49.390588][ T24] usb 1-1: Product: syz [ 49.394921][ T24] usb 1-1: Manufacturer: syz [ 49.480819][ T24] usb 1-1: SerialNumber: syz [ 49.562183][ T1151] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 49.580144][ T1149] loop1: detected capacity change from 0 to 2048 [ 49.673414][ T1149] loop1: p1 < > p3 [ 49.680087][ T1149] loop1: p3 size 134217728 extends beyond EOD, truncated [ 49.696764][ T24] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 49.777954][ T307] udevd[307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 49.922164][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 49.922181][ T28] audit: type=1400 audit(1748917071.922:538): avc: denied { read write } for pid=1126 comm="syz.0.199" name="lp0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 49.998598][ T1155] loop1: detected capacity change from 0 to 512 [ 50.028414][ T28] audit: type=1400 audit(1748917071.962:539): avc: denied { open } for pid=1126 comm="syz.0.199" path="/dev/usb/lp0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 50.147555][ T1155] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 50.191688][ T1163] loop2: detected capacity change from 0 to 128 [ 50.213521][ T1155] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.229329][ T1163] EXT4-fs (loop2): Test dummy encryption mode enabled [ 50.284364][ T1163] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.328686][ T1163] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.968711][ T24] usb 1-1: USB disconnect, device number 2 [ 51.027155][ T24] usblp0: removed [ 51.069410][ T285] EXT4-fs (loop2): unmounting filesystem. [ 51.265985][ T282] EXT4-fs (loop1): unmounting filesystem. [ 51.339337][ T1183] loop4: detected capacity change from 0 to 1024 [ 51.360389][ T1183] EXT4-fs: Ignoring removed orlov option [ 51.380125][ T1183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.305746][ T1205] loop0: detected capacity change from 0 to 2048 [ 53.598548][ T1205] loop0: p1 [ 53.648556][ T287] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 53.670489][ T1193] syz.4.212 (1193) used greatest stack depth: 22048 bytes left [ 53.800261][ T286] EXT4-fs (loop4): unmounting filesystem. [ 53.838851][ T287] usb 3-1: Using ep0 maxpacket: 8 [ 53.847160][ T287] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 53.856569][ T287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.864943][ T287] usb 3-1: Product: syz [ 53.869610][ T287] usb 3-1: Manufacturer: syz [ 53.874278][ T287] usb 3-1: SerialNumber: syz [ 53.883511][ T287] usb 3-1: config 0 descriptor?? [ 54.093463][ T287] usb 3-1: USB disconnect, device number 4 [ 56.759318][ T1238] incfs: Can't find or create .index dir in ./file0 [ 56.774849][ T1238] incfs: mount failed -14 [ 56.893210][ T1244] fuse: Unknown parameter '00000000000000000000' [ 57.330745][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.713974][ T28] audit: type=1400 audit(1748917079.712:540): avc: denied { read } for pid=1264 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.074109][ T28] audit: type=1400 audit(1748917080.072:541): avc: denied { connect } for pid=1268 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.923963][ T1275] syz.4.237 (1275) used greatest stack depth: 22008 bytes left [ 59.345021][ T1280] loop4: detected capacity change from 0 to 40427 [ 59.361612][ T1280] F2FS-fs (loop4): invalid crc value [ 59.385203][ T1280] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.441735][ T1280] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 61.208671][ T28] audit: type=1400 audit(1748917083.172:542): avc: denied { write } for pid=1298 comm="syz.0.245" name="ipv6_route" dev="proc" ino=4026532499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.617584][ T1317] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 61.631362][ T1317] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 61.692359][ T1315] loop1: detected capacity change from 0 to 128 [ 61.789483][ T307] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.833620][ T1303] loop4: detected capacity change from 0 to 40427 [ 61.847856][ T1303] F2FS-fs (loop4): invalid crc value [ 61.871273][ T1303] F2FS-fs (loop4): Found nat_bits in checkpoint [ 61.925604][ T1303] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 62.338522][ T286] syz-executor: attempt to access beyond end of device [ 62.338522][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 65.154181][ T1360] loop1: detected capacity change from 0 to 128 [ 66.342345][ T1366] loop4: detected capacity change from 0 to 512 [ 66.353088][ T327] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 66.484534][ T1366] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.493699][ T1366] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.695867][ T1376] kvm: pic: level sensitive irq not supported [ 66.696282][ T1376] kvm: pic: non byte read [ 66.707799][ T1376] kvm: pic: non byte read [ 66.712372][ T1376] kvm: pic: level sensitive irq not supported [ 67.221288][ T286] EXT4-fs (loop4): unmounting filesystem. [ 67.279824][ T1369] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.918498][ T1369] usb 2-1: Using ep0 maxpacket: 16 [ 67.942537][ T1369] usb 2-1: config 1 has an invalid descriptor of length 135, skipping remainder of the config [ 68.130643][ T1369] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.441995][ T1383] sched: RT throttling activated [ 70.132169][ T1369] usb 2-1: string descriptor 0 read error: -71 [ 70.164637][ T1369] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.388875][ T1369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.402881][ T1369] usb 2-1: can't set config #1, error -71 [ 71.013047][ T1369] usb 2-1: USB disconnect, device number 3 [ 73.204790][ T1433] syz.4.277 (1433) used greatest stack depth: 20680 bytes left [ 74.138816][ T1460] kvm: pic: level sensitive irq not supported [ 74.139261][ T1460] kvm: pic: non byte read [ 74.150458][ T1460] kvm: pic: non byte read [ 74.154914][ T1460] kvm: pic: level sensitive irq not supported [ 74.234806][ T1463] loop2: detected capacity change from 0 to 512 [ 74.247804][ T1463] EXT4-fs: Ignoring removed oldalloc option [ 74.278649][ T1463] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.746170][ T1463] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.755953][ T1463] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 74.766115][ T1463] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 74.775649][ T1463] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.285: Failed to acquire dquot type 1 [ 74.826109][ T1463] EXT4-fs (loop2): 1 truncate cleaned up [ 74.857220][ T1463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.560650][ T28] audit: type=1400 audit(1748917097.442:543): avc: denied { create } for pid=1469 comm="syz.3.288" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.655257][ T285] EXT4-fs (loop2): unmounting filesystem. [ 75.989395][ T1481] Zero length message leads to an empty skb [ 76.608419][ T28] audit: type=1400 audit(1748917098.012:544): avc: denied { write } for pid=1469 comm="syz.3.288" name="file0" dev="tmpfs" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 77.056286][ T28] audit: type=1400 audit(1748917098.012:545): avc: denied { open } for pid=1469 comm="syz.3.288" path="/56/file0" dev="tmpfs" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 77.144504][ T1487] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 77.502333][ T28] audit: type=1400 audit(1748917099.412:546): avc: denied { unlink } for pid=283 comm="syz-executor" name="file0" dev="tmpfs" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.607811][ T1528] loop1: detected capacity change from 0 to 128 [ 79.626341][ T1528] EXT4-fs (loop1): Test dummy encryption mode enabled [ 79.641671][ T1528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.650684][ T1528] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.710621][ T1522] loop4: detected capacity change from 0 to 40427 [ 79.725887][ T1522] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 79.743625][ T1522] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 79.760458][ T1532] syz.0.301[1532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.760568][ T1532] syz.0.301[1532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.773632][ T1522] F2FS-fs (loop4): invalid crc value [ 79.793899][ T1522] F2FS-fs (loop4): Found nat_bits in checkpoint [ 80.050764][ T1522] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 80.072048][ T1522] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 80.150331][ T1521] syz.4.300: attempt to access beyond end of device [ 80.150331][ T1521] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 80.166465][ T1522] syz.4.300: attempt to access beyond end of device [ 80.166465][ T1522] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.225265][ T838] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 80.248057][ T838] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 80.411321][ T838] kworker/u4:183: attempt to access beyond end of device [ 80.411321][ T838] loop4: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 80.490469][ T282] EXT4-fs (loop1): unmounting filesystem. [ 81.878464][ T1558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 82.592833][ T28] audit: type=1400 audit(1748917104.592:547): avc: denied { connect } for pid=1555 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.750219][ T1584] syz.3.313 (1584) used greatest stack depth: 20664 bytes left [ 84.782762][ T1595] loop2: detected capacity change from 0 to 128 [ 84.793105][ T1595] EXT4-fs (loop2): Test dummy encryption mode enabled [ 84.806412][ T1595] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.815242][ T1595] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.522521][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 86.577087][ T285] EXT4-fs (loop2): unmounting filesystem. [ 86.706851][ T1630] loop2: detected capacity change from 0 to 256 [ 88.013332][ T1634] device veth0_vlan left promiscuous mode [ 88.019166][ T1634] device veth0_vlan entered promiscuous mode [ 88.116713][ T1635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 89.084558][ T791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.131154][ T791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.168997][ T791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.422536][ T1649] block device autoloading is deprecated and will be removed. [ 91.272109][ T1671] loop4: detected capacity change from 0 to 512 [ 95.549389][ T1685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 96.252038][ T1671] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 96.278062][ T1685] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 96.287593][ T1685] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 97.585541][ T28] audit: type=1400 audit(1748917119.582:548): avc: denied { mount } for pid=1688 comm="syz.0.340" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 97.684834][ T1715] loop1: detected capacity change from 0 to 128 [ 97.747222][ T1715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.799790][ T1720] loop2: detected capacity change from 0 to 512 [ 97.818138][ T1715] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.854083][ T1720] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.346: inode #1: comm syz.2.346: iget: illegal inode # [ 97.867176][ T28] audit: type=1400 audit(1748917119.862:549): avc: denied { setattr } for pid=1712 comm="syz.1.345" path="/69/file1/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.787893][ T1720] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.346: error while reading EA inode 1 err=-117 [ 99.054634][ T1720] EXT4-fs (loop2): 1 orphan inode deleted [ 99.098503][ T1720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 99.547722][ T1741] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 99.899377][ T285] EXT4-fs (loop2): unmounting filesystem. [ 99.947327][ T1745] loop2: detected capacity change from 0 to 512 [ 100.020224][ T28] audit: type=1400 audit(1748917122.022:550): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 100.022845][ T1745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.078684][ T1745] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.413650][ T1759] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 101.669229][ T282] EXT4-fs (loop1): unmounting filesystem. [ 101.698268][ T1765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1765 comm=syz.1.358 [ 102.061448][ T1779] device veth0_vlan left promiscuous mode [ 102.067276][ T1779] device veth0_vlan entered promiscuous mode [ 102.168705][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.324713][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.356417][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.617615][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 103.448414][ T1795] 8021q: VLANs not supported on wg2 [ 103.858404][ T1796] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 103.902137][ T1787] syz.1.364 (1787) used greatest stack depth: 20584 bytes left [ 103.936357][ T1799] loop0: detected capacity change from 0 to 1024 [ 103.979462][ T285] EXT4-fs (loop2): unmounting filesystem. [ 104.313777][ T1799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.599604][ T1801] ------------[ cut here ]------------ [ 109.605250][ T1801] kernel BUG at fs/buffer.c:2714! [ 109.650323][ T1849] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 109.684667][ T1853] device veth0_vlan left promiscuous mode [ 109.690480][ T1853] device veth0_vlan entered promiscuous mode [ 109.758496][ T1801] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 109.764625][ T1801] CPU: 1 PID: 1801 Comm: kmmpd-loop0 Not tainted 6.1.138-syzkaller-00049-g5b87067cdd87 #0 [ 109.774625][ T1801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.784815][ T1801] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 109.790321][ T1801] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 18 3c e8 ff e9 b0 fe ff ff e8 ae e3 a3 ff 0f 0b e8 a7 e3 a3 ff <0f> 0b e8 a0 e3 a3 ff 0f 0b e8 99 e3 a3 ff 0f 0b e8 92 e3 a3 ff 0f [ 109.810302][ T1801] RSP: 0018:ffffc9000fc87ca0 EFLAGS: 00010293 [ 109.816485][ T1801] RAX: ffffffff81cc0d69 RBX: 0000000000000000 RCX: ffff88811b011440 [ 109.824658][ T1801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.832642][ T1801] RBP: ffffc9000fc87cf0 R08: dffffc0000000000 R09: ffffed1021fb0bcf [ 109.840724][ T1801] R10: ffffed1021fb0bcf R11: 1ffff11021fb0bce R12: 0000000000000000 [ 109.848803][ T1801] R13: 1ffff11021fb0bce R14: ffff88810fd85e70 R15: 0000000000003801 [ 109.856796][ T1801] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 109.865833][ T1801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.872434][ T1801] CR2: 000055556ab504a8 CR3: 0000000131765000 CR4: 00000000003506a0 [ 109.880551][ T1801] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.888545][ T1801] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.896702][ T1801] Call Trace: [ 109.899991][ T1801] [ 109.903119][ T1801] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 109.908976][ T1801] submit_bh+0x1f/0x30 [ 109.913152][ T1801] write_mmp_block_thawed+0x34a/0x4c0 [ 109.918536][ T1801] ? read_mmp_block+0x6d0/0x6d0 [ 109.923396][ T1801] ? __cfi_process_timeout+0x10/0x10 [ 109.928704][ T1801] write_mmp_block+0x138/0x2b0 [ 109.933486][ T1801] kmmpd+0x3ce/0x950 [ 109.937749][ T1801] kthread+0x281/0x320 [ 109.941918][ T1801] ? __cfi_kmmpd+0x10/0x10 [ 109.946349][ T1801] ? __cfi_kthread+0x10/0x10 [ 109.951050][ T1801] ret_from_fork+0x1f/0x30 [ 109.955573][ T1801] [ 109.958685][ T1801] Modules linked in: [ 110.018299][ T1860] loop1: detected capacity change from 0 to 256 [ 110.034752][ T1801] ---[ end trace 0000000000000000 ]--- [ 110.034771][ T1801] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 110.034800][ T1801] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 18 3c e8 ff e9 b0 fe ff ff e8 ae e3 a3 ff 0f 0b e8 a7 e3 a3 ff <0f> 0b e8 a0 e3 a3 ff 0f 0b e8 99 e3 a3 ff 0f 0b e8 92 e3 a3 ff 0f [ 110.034817][ T1801] RSP: 0018:ffffc9000fc87ca0 EFLAGS: 00010293 [ 110.034836][ T1801] RAX: ffffffff81cc0d69 RBX: 0000000000000000 RCX: ffff88811b011440 [ 110.034851][ T1801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.034863][ T1801] RBP: ffffc9000fc87cf0 R08: dffffc0000000000 R09: ffffed1021fb0bcf [ 110.034878][ T1801] R10: ffffed1021fb0bcf R11: 1ffff11021fb0bce R12: 0000000000000000 [ 110.034892][ T1801] R13: 1ffff11021fb0bce R14: ffff88810fd85e70 R15: 0000000000003801 [ 110.034907][ T1801] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 110.034924][ T1801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.034938][ T1801] CR2: 0000562baf73bf18 CR3: 0000000110682000 CR4: 00000000003506a0 [ 110.034956][ T1801] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 110.034968][ T1801] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 110.034982][ T1801] Kernel panic - not syncing: Fatal exception [ 110.035247][ T1801] Kernel Offset: disabled [ 110.162756][ T1801] Rebooting in 86400 seconds..