last executing test programs: 8.892852195s ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x80002, 0x40) r1 = open(0x0, 0x108842, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x4c, &(0x7f00000003c0)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000400)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f00000007c0)={@id={0x2, 0x0, @d}}) sched_setscheduler(r2, 0x1, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000880), 0x0) connect$unix(r4, &(0x7f0000000980)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000a00), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000a40), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_CQ_RING(0xfffffffffffff001, 0xc00000, 0x3000002, 0x30, 0xffffffffffffffff, 0x8000000) ioctl$TCXONC(r6, 0x540a, 0x1) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000001000)={0x1, 0x2, 0xff, 0x3, 0x9, "83e0796066683a53a0eaca3e01832da48bdf9c"}) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) unshare(0x2020600) unshare(0x2020600) write(r0, &(0x7f0000000180)='3', 0x1) mount_setattr(r0, &(0x7f0000000000)='./sys\x00', 0x1000, &(0x7f0000000040)={0x100070, 0x74, 0x80000, {r0}}, 0x20) 8.728878841s ago: executing program 2 (id=10): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x4604, &(0x7f0000000600)=ANY=[], 0x3, 0x335, &(0x7f0000000d80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r1, &(0x7f0000000540)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'erspan0\x00'}) socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/gre0/threaded\x00', 0x2, 0x0) write(r2, &(0x7f0000000740)='1', 0x1) 7.236068964s ago: executing program 2 (id=14): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000008c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000980)={0x10, 0x3e8, 0x2, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200000c0}, 0x24048054) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000009c0)={0x1, &(0x7f0000000a00)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000ac0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000b00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000c00), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000c40), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000c80)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) syz_open_dev$loop(0x0, 0x6b, 0x901) keyctl$set_reqkey_keyring(0xe, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000d00)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000d40)={'gre0\x00', &(0x7f0000000d80)={'gre0\x00', r7, 0x0, 0x0, 0x2, 0x0, {{0x18, 0x4, 0x0, 0x3e, 0x60, 0x68, 0x0, 0xfe, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, {[@cipso={0x86, 0x11, 0x0, [{0x5, 0xb, "0799179f395b1ffe79"}]}, @timestamp_prespec={0x44, 0x2c, 0xd9, 0x3, 0x7, [{@remote, 0x2d}, {@remote, 0x7}, {@multicast2, 0x7fff}, {@empty, 0x2}, {@local, 0x9}]}, @end, @timestamp_addr={0x44, 0xc, 0x3b, 0x1, 0x2, [{@local, 0x3}]}]}}}}}) close_range(r1, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000e40)=0x1, 0x4) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 6.48377357s ago: executing program 1 (id=16): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000200)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@test_dummy_encryption_v1}, {@mb_optimize_scan}]}, 0x3, 0x44c, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x387) 4.31961593s ago: executing program 4 (id=19): sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000f40)=0x2) r0 = getpid() syz_emit_ethernet(0x6e3, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000f80)=0x5) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x1800c10, &(0x7f0000000a00)=ANY=[@ANYRES64=r1, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRESDEC=r1], 0x1, 0x304, &(0x7f0000000bc0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000001080)={@desc={0x1, 0x0, @auto="d98ce2b06cc15e46"}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r5) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4008880}, 0x2000c000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r7, 0xc17a) 4.31890793s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0) getresuid(&(0x7f0000000740), 0x0, 0x0) 3.936877399s ago: executing program 3 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x80002, 0x40) r1 = open(0x0, 0x108842, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x4c, &(0x7f00000003c0)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000400)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f00000007c0)={@id={0x2, 0x0, @d}}) sched_setscheduler(r2, 0x1, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000880)="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", 0xfd) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000a00), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000a40), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_CQ_RING(0xfffffffffffff001, 0xc00000, 0x3000002, 0x30, 0xffffffffffffffff, 0x8000000) ioctl$TCXONC(r6, 0x540a, 0x1) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000001000)={0x1, 0x2, 0xff, 0x3, 0x9, "83e0796066683a53a0eaca3e01832da48bdf9c"}) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) unshare(0x2020600) unshare(0x2020600) write(r0, &(0x7f0000000180)='3', 0x1) mount_setattr(r0, &(0x7f0000000000)='./sys\x00', 0x1000, &(0x7f0000000040)={0x100070, 0x74, 0x80000, {r0}}, 0x20) 3.83612619s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x80002, 0x40) r1 = open(0x0, 0x108842, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x4c, &(0x7f00000003c0)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000400)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f00000007c0)={@id={0x2, 0x0, @d}}) sched_setscheduler(r2, 0x1, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000880)="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", 0xfd) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000a00), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000a40), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x23e34, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485a]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_CQ_RING(0xfffffffffffff001, 0xc00000, 0x3000002, 0x30, 0xffffffffffffffff, 0x8000000) ioctl$TCXONC(r6, 0x540a, 0x1) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000001000)={0x1, 0x2, 0xff, 0x3, 0x9, "83e0796066683a53a0eaca3e01832da48bdf9c"}) unshare(0x2020600) unshare(0x2020600) write(r0, &(0x7f0000000180)='3', 0x1) mount_setattr(r0, &(0x7f0000000000)='./sys\x00', 0x1000, &(0x7f0000000040)={0x100070, 0x74, 0x80000, {r0}}, 0x20) write$P9_RLERROR(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="4b31a32bb094dfb91073d329ae4105b0a9e584eb70804c745bb63426761f399479e9992aba2b33e77b54c37a0e184f0e016bc0cabce426fc34f08035e517817b47297f6895c7b4cd8355f78ff47556abf139775273fa26edd366ac6cbd36d9d4f7283b6f739e6988c5479b83ba6d2dd13b55c6a3018e80a43a282fad569c6c7512b865"], 0xb) 3.72970496s ago: executing program 4 (id=25): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10008, &(0x7f0000000340)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x182) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 3.154987619s ago: executing program 4 (id=26): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) getresuid(&(0x7f0000000740), 0x0, &(0x7f00000007c0)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x4e24, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x20, 0x89, r4}, {0x10001, 0x7, 0x7, 0x5, 0x800, 0x52, 0x0, 0x4}, {0x5, 0x7, 0x2}, 0xd3, 0x6e6bb7, 0x2, 0x1, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4d4, 0x6c}, 0xa, @in6=@local, 0x3503, 0x0, 0x3, 0x3, 0x2, 0xa4fd, 0x4}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c0002801400070020", @ANYRES32], 0x70}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1800}, 0x4000014) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f0000000300)="98e6dccef013dbce26a76d268863", 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3.120428273s ago: executing program 1 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1000040, &(0x7f0000000400), 0x1, 0x5a3, &(0x7f0000000440)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x42, 0x81) truncate(&(0x7f0000000a40)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) truncate(&(0x7f0000000a80)='./file1\x00', 0x10001) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/udplite6\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r4, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f0000000b00)={[0xfffffffffffffffe]}, 0x8) r5 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000c00)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000cc0)="$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") sync() creat(0x0, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000001240), &(0x7f0000001280)='./file1\x00', 0x180c8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x1, 0x24d, &(0x7f0000001400)="$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") write$selinux_load(r5, &(0x7f0000001680)=ANY=[], 0x12100) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x80000008, 0x0, 0x3, 0xa0, 0x8, 0xffff, 0x1}, {0x80000000, 0x0, 0x2, 0xfffffffd, 0x6, 0x0, 0x6}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 3.001089815s ago: executing program 3 (id=29): r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x5, 0xcc26, 0xffb, 0x5, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x80000001, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0x1000, 0x8000004, 0x6, 0x9, 0x12000004, 0x7, 0x5, 0x5, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0xff49, 0xb, 0x8, 0x4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x23e, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x358, 0x7, 0x10, 0x57df5d62, 0xdb, 0x1fa0860a, 0x7, 0x2a, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0xfffffffd, 0x2af, 0x10f7, 0x7, 0x2, 0x6, 0x6, 0x4, 0x7, 0x101, 0x0, 0x800004, 0x0, 0x401, 0x752, 0x3, 0x3, 0x2, 0x10001, 0x2, 0x0, 0x7ebf, 0x6, 0x3, 0x80000000, 0xfe000000, 0x5a3, 0x1, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x4005, 0x2, 0x40003, 0x2, 0xd9a, 0xd, 0x2a2, 0xdffffffb, 0x6, 0x2, 0x3ff, 0x8, 0x7, 0x74, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008d9f, 0x1fc, 0x3, 0x4]}}) socket$netlink(0x10, 0x3, 0x4f747bf2175863ef) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000440), 0x800001d, 0x300) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e24}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x7, 0x0, 0x1, 0x0, 0x0, 0x9}, &(0x7f0000000040)=0x20) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f0000000140), 0x4ff, 0x0) 2.788332736s ago: executing program 2 (id=30): sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000f40)=0x2) r0 = getpid() syz_emit_ethernet(0x6e3, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000f80)=0x5) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x1800c10, &(0x7f0000000a00)=ANY=[@ANYRES64=r1, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRESDEC=r1], 0x1, 0x304, &(0x7f0000000bc0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000001080)={@desc={0x1, 0x0, @auto="d98ce2b06cc15e46"}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r5) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000402bd7000fedbdf0d0300000014000900fe8000000000000000000000000000aa14000700fe8000000000ff0000000000000000bb1400090000000000000000004000000000000000080008000000000008000800ffffffff060001004e21000014000700fc0000000000000000000000000500005a0e522e943242db1bdde073214668600d47f3cd7acc50685b72abe51a04331fa03beb9a476eb06061718b182420a5d6e0cadc387a8b1498bac411ad94c3b09a560148aacc3bdd25bddd951cbc3e2cccfc7fd8cbe5297758a577056348447a97b4e9f0c78657108636305ed215110d1f98ea08ac8e95c8058429636d9885bac37249a92c132527003bf5eca94f7c9c44d774de98f56f7e9d72e021761dfc17356c3fbae2c7eed3d529ccd59a8296c61f84f5"], 0x7c}, 0x1, 0x0, 0x0, 0x4008880}, 0x2000c000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r8, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000800)={0x0}) prlimit64(0x0, 0x7, &(0x7f0000000880), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f00000008c0)={r9, 0x0, r8, 0x0, 0x80000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x48004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffe0, 0x1b}, {}, {0xb, 0xfff1}}, [@TCA_RATE={0x0, 0x5, {0x82, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004d050}, 0xc0) 2.407342655s ago: executing program 3 (id=31): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000008c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000980)={0x10, 0x3e8, 0x2, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200000c0}, 0x24048054) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000009c0)={0x1, &(0x7f0000000a00)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000ac0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000b00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000c00), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000c80)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) keyctl$set_reqkey_keyring(0xe, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000d00)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000d40)={'gre0\x00', &(0x7f0000000d80)={'gre0\x00', r7, 0x0, 0x0, 0x2, 0x0, {{0x18, 0x4, 0x0, 0x3e, 0x60, 0x68, 0x0, 0xfe, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, {[@cipso={0x86, 0x11, 0x0, [{0x5, 0xb, "0799179f395b1ffe79"}]}, @timestamp_prespec={0x44, 0x2c, 0xd9, 0x3, 0x7, [{@remote, 0x2d}, {@remote, 0x7}, {@multicast2, 0x7fff}, {@empty, 0x2}, {@local, 0x9}]}, @end, @timestamp_addr={0x44, 0xc, 0x3b, 0x1, 0x2, [{@local, 0x3}]}]}}}}}) close_range(r1, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000e40)=0x1, 0x4) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) socket(0x10, 0x803, 0x6) 2.122119804s ago: executing program 4 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1000040, &(0x7f0000000400), 0x1, 0x5a3, &(0x7f0000000440)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x42, 0x81) sendfile(r3, r3, 0x0, 0xe3aa6ea) truncate(&(0x7f0000000a80)='./file1\x00', 0x10001) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/udplite6\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r4, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f0000000b00)={[0xfffffffffffffffe]}, 0x8) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000c00)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000cc0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") sync() creat(0x0, 0x41) syz_mount_image$msdos(&(0x7f0000001240), &(0x7f0000001280)='./file1\x00', 0x180c8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x1, 0x24d, &(0x7f0000001400)="$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") write$selinux_load(r5, &(0x7f0000001680)=ANY=[], 0x12100) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 1.985220348s ago: executing program 3 (id=33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1000040, &(0x7f0000000400), 0x1, 0x5a3, &(0x7f0000000440)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x42, 0x81) truncate(&(0x7f0000000a40)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) truncate(&(0x7f0000000a80)='./file1\x00', 0x10001) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/udplite6\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r4, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f0000000b00)={[0xfffffffffffffffe]}, 0x8) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000c00)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000cc0)="$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") sync() creat(0x0, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000001240), &(0x7f0000001280)='./file1\x00', 0x180c8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x1, 0x24d, &(0x7f0000001400)="$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") write$selinux_load(r5, 0x0, 0x12100) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x80000008, 0x0, 0x3, 0xa0, 0x8, 0xffff, 0x1}, {0x80000000, 0x0, 0x2, 0xfffffffd, 0x6, 0x0, 0x6}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 1.97002955s ago: executing program 0 (id=34): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) read(r1, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = dup2(r2, r2) read$FUSE(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0xc) 1.857265661s ago: executing program 2 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) munlockall() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000300)='anon_inodefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r1, &(0x7f0000000880)=""/265, 0x109) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c46800d040001000200010000000200060001000000dd0000003800000045030000010000000003000000040000000500000006000000800000000600000002000000a25b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040cd04fb500"/590], 0x258) close(0xffffffffffffffff) mkdir(&(0x7f0000000180)='./bus\x00', 0x2c) mount$incfs(&(0x7f0000000440)='.\x00', &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x1, 0x0) mount$incfs(&(0x7f0000000800)='.\x00', &(0x7f00000009c0)='./bus\x00', &(0x7f0000000a00), 0xc002, 0x0) chdir(&(0x7f0000000a40)='./bus\x00') mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) 1.849044272s ago: executing program 0 (id=36): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) userfaultfd(0x800) mkdirat(0xffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x2c, 0x2, 0x7, 0x20000004}}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x5e5c, 0x4) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000400), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000440), 0x40000000000004c, 0x45833af92e4a39fc, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x1ff003, 0x4, 0x10001, 0x1, 0xffffffffffffffff, 0x108, '\x00', 0x0, 0xffffffffffffffff, 0x180, 0xfffffffd}, 0x50) 1.608201256s ago: executing program 0 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x22020400) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0xe000001a}) read$FUSE(r2, &(0x7f00000006c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000002700)='./tracefs\x00', &(0x7f0000002740)='tracefs\x00', 0x0, 0x0) io_getevents(0x0, 0x3ff, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000002780)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f00000027c0)='./tracefs/instances/foo\x00', 0x200) epoll_pwait(r1, &(0x7f0000002800)=[{}], 0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.498165618s ago: executing program 0 (id=38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/rcu_normal', 0x8000, 0x100) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000540)={0x2, &(0x7f0000000580)=[{0x40, 0x0, 0x0, 0xffe00001}, {0x16}]}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setns(0xc9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) sendmsg$netlink(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000013002108000000000000000004"], 0x2c}], 0x1}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r7, 0x4b4b, 0xffffffffffffffff) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="02031b003000140006006333c5bb00482fff00000000000000000000ffffac141419ff0200000000000000000000000000010420810000000002010008000c0086dd0008000486df88be000000041807e80701000000000001ff080022eb000000042c953707020000000000000000081f1d0800655800000000"], 0x7a) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xa, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff00000000150105000000000018110000", @ANYRES32=r4, @ANYBLOB="1000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.463432251s ago: executing program 4 (id=39): prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000f40)=0x2) r0 = getpid() syz_emit_ethernet(0x6e3, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000f80)=0x5) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x1800c10, &(0x7f0000000a00)=ANY=[@ANYRES64=r1, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRESDEC=r1], 0x1, 0x304, &(0x7f0000000bc0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000001080)={@desc={0x1, 0x0, @auto="d98ce2b06cc15e46"}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r5) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4008880}, 0x2000c000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r7, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000800)={0x0}) prlimit64(0x0, 0x7, &(0x7f0000000880), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f00000008c0)={r8, 0x0, r7, 0x0, 0x80000}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x48004) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffe0, 0x1b}, {}, {0xb, 0xfff1}}, [@TCA_RATE={0x0, 0x5, {0x82, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004d050}, 0xc0) 1.444511983s ago: executing program 1 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x80002, 0x40) r1 = open(0x0, 0x108842, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x4c, &(0x7f00000003c0)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000400)="$eJzs3U1rY+UXAPDTzPRl+v+36UIEFfFhdm5CW7/AFJkBsaDUiYyzEO/YdAy905QkVDKIzkJw6zdwP7h0J4hfoAvdu3PXjctZDBPJW5t0Yiv2JQ7+fhDuSZ5zkufmksvZhHNw59sH21uN0lbWjMKNFIWIKDyJWOpGPVP9Y6Ebz8SwR/Fm8c5vr3/w0d1319bXb26kdGvt9lurKaXFN376/Ivvr//c/N+HPyz+OBv7Sx8f/LH6+/7L+68cPLv9WbWRqo20U2umLN2r1ZrZvbySNquN7VJK7+eVrFFJ1Z1GpT6yvpXXdndbKdvZXJjfrVcajZTttNJ2pZWatdSst1J2P6vupFKplBbmg9OUH29sZGu9eO6EvBuXtSEuQL2+lnV+w7PPrZQfT2RDAMBEnan/Hyyc2v/fLQz1/3Pxl/3/dOj/z8X030sb7v//8ZvwL9fp/2f6v99R+n8AAAAAAAAAAAAAAHgRPGm3i+12uzg4tgd/Eu4/n/D2uGDPXf9jj0nvj4s19Me9uYj8m73yXrl37K2vbUU18qjEchTjaee2MNCLb72zfnM5dS3FwoOvuvXXf4koXxmtX4liLI2vX+nVp8P66BynY364fjU+iZfG16+OrZ+J5e+G6ktRjF8/jVrksdm9vR3Vf7mS0tvvrR+rn+3mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfUEoDr0Vv7v1eOeJa7PXn95eOEpZG5+P36g/n6y9HMZ6On8+/PHY+/9V49epkzx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhqth9tZnlfqlxUMZv5neT4VM73gpKqpXvqjY0vXYjR59rT3OWNQODUnCkevXOuf5JjkZ+12uxvc//rctzp3uZfyLMF0RJyQ0+5/gWf/rP9HxPArV0ZzZiPiLB/RPuksOsFiJyic63d45VIu0yTuRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBZh0O/O0+mJr0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqXRerid5XmlfoHBpM8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRfJnAAAA///+Owi8") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f00000007c0)={@id={0x2, 0x0, @d}}) sched_setscheduler(r2, 0x1, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000880)="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", 0xfd) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000a00), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000a40), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_CQ_RING(0xfffffffffffff001, 0xc00000, 0x3000002, 0x30, 0xffffffffffffffff, 0x8000000) ioctl$TCXONC(r6, 0x540a, 0x1) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000001000)={0x1, 0x2, 0xff, 0x3, 0x9, "83e0796066683a53a0eaca3e01832da48bdf9c"}) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) unshare(0x2020600) unshare(0x2020600) write(r0, &(0x7f0000000180)='3', 0x1) mount_setattr(r0, &(0x7f0000000000)='./sys\x00', 0x1000, &(0x7f0000000040)={0x100070, 0x74, 0x80000, {r0}}, 0x20) 1.353628152s ago: executing program 3 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x80002, 0x40) r1 = open(0x0, 0x108842, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x4c, &(0x7f00000003c0)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000400)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f00000007c0)={@id={0x2, 0x0, @d}}) sched_setscheduler(r2, 0x1, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000880)="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", 0xfd) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000a00), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000a40), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x23e34, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485a]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_CQ_RING(0xfffffffffffff001, 0xc00000, 0x3000002, 0x30, 0xffffffffffffffff, 0x8000000) ioctl$TCXONC(r6, 0x540a, 0x1) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000001000)={0x1, 0x2, 0xff, 0x3, 0x9, "83e0796066683a53a0eaca3e01832da48bdf9c"}) unshare(0x2020600) unshare(0x2020600) write(r0, &(0x7f0000000180)='3', 0x1) mount_setattr(r0, &(0x7f0000000000)='./sys\x00', 0x1000, &(0x7f0000000040)={0x100070, 0x74, 0x80000, {r0}}, 0x20) write$P9_RLERROR(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="4b31a32bb094dfb91073d329ae4105b0a9e584eb70804c745bb63426761f399479e9992aba2b33e77b54c37a0e184f0e016bc0cabce426fc34f08035e517817b47297f6895c7b4cd8355f78ff47556abf139775273fa26edd366ac6cbd36d9d4f7283b6f739e6988c5479b83ba6d2dd13b55c6a3018e80a43a282fad569c6c7512b865"], 0xb) 1.088388109s ago: executing program 0 (id=42): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0) getresuid(&(0x7f0000000740), 0x0, 0x0) 532.912426ms ago: executing program 2 (id=43): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) getresuid(&(0x7f0000000740), 0x0, &(0x7f00000007c0)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x4e24, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x20, 0x89, r4}, {0x10001, 0x7, 0x7, 0x5, 0x800, 0x52, 0x0, 0x4}, {0x5, 0x7, 0x2}, 0xd3, 0x6e6bb7, 0x2, 0x1, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4d4, 0x6c}, 0xa, @in6=@local, 0x3503, 0x0, 0x3, 0x3, 0x2, 0xa4fd, 0x4}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c0002801400070020", @ANYRES32], 0x70}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1800}, 0x4000014) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f0000000300)="98e6dccef013dbce26a76d268863", 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 276.104772ms ago: executing program 0 (id=44): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000008c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000980)={0x10, 0x3e8, 0x2, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200000c0}, 0x24048054) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000009c0)={0x1, &(0x7f0000000a00)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000ac0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000b00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000c00), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000c80)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) keyctl$set_reqkey_keyring(0xe, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000d00)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000d40)={'gre0\x00', &(0x7f0000000d80)={'gre0\x00', r7, 0x0, 0x0, 0x2, 0x0, {{0x18, 0x4, 0x0, 0x3e, 0x60, 0x68, 0x0, 0xfe, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, {[@cipso={0x86, 0x11, 0x0, [{0x5, 0xb, "0799179f395b1ffe79"}]}, @timestamp_prespec={0x44, 0x2c, 0xd9, 0x3, 0x7, [{@remote, 0x2d}, {@remote, 0x7}, {@multicast2, 0x7fff}, {@empty, 0x2}, {@local, 0x9}]}, @end, @timestamp_addr={0x44, 0xc, 0x3b, 0x1, 0x2, [{@local, 0x3}]}]}}}}}) close_range(r1, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000e40)=0x1, 0x4) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) socket(0x10, 0x803, 0x6) 34.321457ms ago: executing program 4 (id=45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/profiling\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x400, &(0x7f00000001c0), 0x1, 0x4a6, &(0x7f0000000200)="$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") prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000880), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) recvmmsg(r2, &(0x7f0000000900), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') preadv(r4, &(0x7f0000000a00)=[{&(0x7f0000000a40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 27.316228ms ago: executing program 3 (id=46): r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x5, 0xcc26, 0xffb, 0x5, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x80000001, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0x1000, 0x8000004, 0x6, 0x9, 0x12000004, 0x7, 0x5, 0x5, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0xff49, 0xb, 0x8, 0x4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x23e, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x358, 0x7, 0x10, 0x57df5d62, 0xdb, 0x1fa0860a, 0x7, 0x2a, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0xfffffffd, 0x2af, 0x10f7, 0x7, 0x2, 0x6, 0x6, 0x4, 0x7, 0x101, 0x0, 0x800004, 0x0, 0x401, 0x752, 0x3, 0x3, 0x2, 0x10001, 0x2, 0x0, 0x7ebf, 0x6, 0x3, 0x80000000, 0xfe000000, 0x5a3, 0x1, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x4005, 0x2, 0x40003, 0x2, 0xd9a, 0xd, 0x2a2, 0xdffffffb, 0x6, 0x2, 0x3ff, 0x8, 0x7, 0x74, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008d9f, 0x1fc, 0x3, 0x4]}}) socket$netlink(0x10, 0x3, 0x4f747bf2175863ef) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000440), 0x800001d, 0x300) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e24}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x7, 0x0, 0x1, 0x0, 0x0, 0x9}, &(0x7f0000000040)=0x20) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f0000000140), 0x4ff, 0x0) 0s ago: executing program 1 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) read(r1, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = dup2(r2, r2) read$FUSE(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 21.946395][ T28] audit: type=1400 audit(1793046309.192:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.949824][ T278] cgroup: Unknown subsys name 'net' [ 21.969183][ T28] audit: type=1400 audit(1793046309.192:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.996519][ T28] audit: type=1400 audit(1793046309.222:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.997008][ T278] cgroup: Unknown subsys name 'devices' [ 22.137408][ T278] cgroup: Unknown subsys name 'hugetlb' [ 22.143059][ T278] cgroup: Unknown subsys name 'rlimit' [ 22.278230][ T28] audit: type=1400 audit(1793046309.522:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.301577][ T28] audit: type=1400 audit(1793046309.522:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.326476][ T28] audit: type=1400 audit(1793046309.522:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.350657][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.359514][ T28] audit: type=1400 audit(1793046309.602:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.385797][ T28] audit: type=1400 audit(1793046309.602:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.415292][ T28] audit: type=1400 audit(1793046309.662:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.416460][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.440948][ T28] audit: type=1400 audit(1793046309.662:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.835560][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.842636][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.850209][ T286] device bridge_slave_0 entered promiscuous mode [ 23.857792][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.864843][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.872484][ T286] device bridge_slave_1 entered promiscuous mode [ 23.893363][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.900449][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.907908][ T289] device bridge_slave_0 entered promiscuous mode [ 23.916658][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.923707][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.931192][ T289] device bridge_slave_1 entered promiscuous mode [ 23.944213][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.951596][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.959091][ T288] device bridge_slave_0 entered promiscuous mode [ 23.969051][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.976238][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.983600][ T288] device bridge_slave_1 entered promiscuous mode [ 24.047906][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.054985][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.062475][ T290] device bridge_slave_0 entered promiscuous mode [ 24.086955][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.094022][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.101684][ T290] device bridge_slave_1 entered promiscuous mode [ 24.122335][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.129460][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.136915][ T287] device bridge_slave_0 entered promiscuous mode [ 24.143867][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.151007][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.158433][ T287] device bridge_slave_1 entered promiscuous mode [ 24.306651][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.313718][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.321027][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.328082][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.342040][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.349115][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.356405][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.363453][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.384246][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.391328][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.398626][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.405768][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.436700][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.443777][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.451084][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.458146][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.471564][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.478649][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.485965][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.493007][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.538512][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.547287][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.554419][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.562400][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.569771][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.577060][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.584257][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.592032][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.599282][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.606596][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.613813][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.623190][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.630732][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.652955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.660865][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.669116][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.676159][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.683613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.692071][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.699169][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.706614][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.714065][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.722545][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.729623][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.737157][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.745382][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.752427][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.777750][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.798702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.807533][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.814687][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.822244][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.830754][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.837863][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.845334][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.853494][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.860559][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.868054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.876270][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.883309][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.890758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.898812][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.906864][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.915229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.923202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.931385][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.939483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.947787][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.955906][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.964213][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.972266][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.980700][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.989165][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.996236][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.020071][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.028678][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.037228][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.044286][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.051807][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.061081][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.069308][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.077474][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.086500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.103790][ T289] device veth0_vlan entered promiscuous mode [ 25.119890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.128430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.137407][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.145995][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.154058][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.162200][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.170606][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.179121][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.186788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.201399][ T290] device veth0_vlan entered promiscuous mode [ 25.210196][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.218352][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.225881][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.233299][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.241868][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.260857][ T288] device veth0_vlan entered promiscuous mode [ 25.267595][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.276627][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.284549][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.292892][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.301358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.309976][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.317580][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.327589][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.336193][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.347725][ T289] device veth1_macvtap entered promiscuous mode [ 25.357342][ T287] device veth0_vlan entered promiscuous mode [ 25.365577][ T290] device veth1_macvtap entered promiscuous mode [ 25.372851][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.381592][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.389452][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.397971][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.405472][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.420292][ T287] device veth1_macvtap entered promiscuous mode [ 25.428946][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.437488][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.447143][ T288] device veth1_macvtap entered promiscuous mode [ 25.468449][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.476828][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.485196][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.493424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.501968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.510372][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.518842][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.527265][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.535863][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.544077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.552518][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.560821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.569448][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.577990][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.587191][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.595551][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.617069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.624649][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.632573][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.632951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.648370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.664714][ T286] device veth0_vlan entered promiscuous mode [ 25.699958][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.724158][ T286] device veth1_macvtap entered promiscuous mode [ 25.737643][ T316] loop4: detected capacity change from 0 to 128 [ 25.750302][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.759165][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.770005][ T319] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.773747][ T316] syz.4.5: attempt to access beyond end of device [ 25.773747][ T316] loop4: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 26.188759][ T323] loop3: detected capacity change from 0 to 512 [ 26.402032][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.417459][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.474494][ T323] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.487313][ T323] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.002765][ T316] syz.4.5: attempt to access beyond end of device [ 27.002765][ T316] loop4: rw=2049, sector=145, nr_sectors = 65 limit=128 [ 27.445035][ C0] sched: RT throttling activated [ 27.461270][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 27.461284][ T28] audit: type=1400 audit(1793046314.692:119): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.874021][ T28] audit: type=1400 audit(1793046315.112:120): avc: denied { mount } for pid=356 comm="syz.1.9" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 27.946201][ T360] loop2: detected capacity change from 0 to 128 [ 27.959316][ T361] loop0: detected capacity change from 0 to 128 [ 27.972645][ T357] loop1: detected capacity change from 0 to 512 [ 27.979439][ T357] ======================================================= [ 27.979439][ T357] WARNING: The mand mount option has been deprecated and [ 27.979439][ T357] and is ignored by this kernel. Remove the mand [ 27.979439][ T357] option from the mount to silence this warning. [ 27.979439][ T357] ======================================================= [ 28.074863][ T361] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 28.084661][ T360] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 28.111181][ T289] EXT4-fs (loop3): unmounting filesystem. [ 28.132577][ T28] audit: type=1400 audit(1793046315.372:121): avc: denied { map_read map_write } for pid=358 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.153648][ T28] audit: type=1400 audit(1793046315.382:122): avc: denied { mounton } for pid=358 comm="syz.2.10" path="/2/file1/sys" dev="loop2" ino=1048646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 29.456441][ T28] audit: type=1400 audit(1793046316.702:123): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 29.625340][ T288] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 29.633376][ T288] FAT-fs (loop2): Filesystem has been set read-only [ 30.052183][ T287] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 30.109795][ T288] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 30.142283][ T381] loop1: detected capacity change from 0 to 512 [ 30.150374][ T287] FAT-fs (loop0): Filesystem has been set read-only [ 30.174040][ T383] loop4: detected capacity change from 0 to 512 [ 30.243353][ T287] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 30.281739][ T386] loop3: detected capacity change from 0 to 512 [ 30.300277][ T381] EXT4-fs (loop1): Test dummy encryption mode enabled [ 30.322172][ T381] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.629853][ T381] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.441944][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 31.454738][ T381] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.16: bad orphan inode 131083 [ 32.085448][ T381] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 32.138823][ T400] loop4: detected capacity change from 0 to 128 [ 32.164955][ T28] audit: type=1400 audit(1793046319.402:124): avc: denied { write } for pid=380 comm="syz.1.16" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.206329][ T381] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 32.236126][ T400] syz.4.19: attempt to access beyond end of device [ 32.236126][ T400] loop4: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 32.282199][ T28] audit: type=1400 audit(1793046319.432:125): avc: denied { add_name } for pid=380 comm="syz.1.16" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.346226][ T286] EXT4-fs (loop1): unmounting filesystem. [ 32.425642][ T28] audit: type=1400 audit(1793046319.432:126): avc: denied { create } for pid=380 comm="syz.1.16" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.491459][ T406] syz.4.19: attempt to access beyond end of device [ 32.491459][ T406] loop4: rw=2049, sector=145, nr_sectors = 65 limit=128 [ 32.603912][ T28] audit: type=1400 audit(1793046319.842:127): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.645194][ T416] loop0: detected capacity change from 0 to 128 [ 32.672803][ T416] syz.0.22: attempt to access beyond end of device [ 32.672803][ T416] loop0: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 32.764658][ T418] loop3: detected capacity change from 0 to 512 [ 32.809862][ T419] syz.0.22: attempt to access beyond end of device [ 32.809862][ T419] loop0: rw=2049, sector=145, nr_sectors = 65 limit=128 [ 32.865370][ T422] loop2: detected capacity change from 0 to 512 [ 32.974247][ T425] loop4: detected capacity change from 0 to 512 [ 32.986973][ T425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 33.453960][ T425] System zones: 1-12 [ 33.467170][ T425] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.25: missing EA_INODE flag [ 33.490029][ T425] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.25: error while reading EA inode 12 err=-117 [ 33.509171][ T425] EXT4-fs (loop4): 1 orphan inode deleted [ 33.515326][ T425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.539160][ T290] EXT4-fs (loop4): unmounting filesystem. [ 33.593991][ T433] loop0: detected capacity change from 0 to 512 [ 33.612031][ T436] loop1: detected capacity change from 0 to 1024 [ 33.687961][ T28] audit: type=1400 audit(1793046320.922:128): avc: denied { prog_load } for pid=430 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.812393][ T28] audit: type=1400 audit(1793046320.932:129): avc: denied { perfmon } for pid=430 comm="syz.4.26" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.877538][ T436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.943011][ T28] audit: type=1400 audit(1793046320.932:130): avc: denied { prog_run } for pid=430 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.962993][ T447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 33.963255][ T433] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 33.972058][ T436] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.991109][ T433] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.993347][ T28] audit: type=1400 audit(1793046321.232:131): avc: denied { name_bind } for pid=443 comm="syz.3.29" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 34.025615][ T451] loop2: detected capacity change from 0 to 128 [ 34.037615][ T451] syz.2.30: attempt to access beyond end of device [ 34.037615][ T451] loop2: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 34.109912][ T28] audit: type=1400 audit(1793046321.352:132): avc: denied { create } for pid=434 comm="syz.1.27" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.130251][ T28] audit: type=1400 audit(1793046321.352:133): avc: denied { read write } for pid=434 comm="syz.1.27" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.199033][ T28] audit: type=1400 audit(1793046321.352:134): avc: denied { open } for pid=434 comm="syz.1.27" path="/4/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.219654][ T452] syz.2.30: attempt to access beyond end of device [ 34.219654][ T452] loop2: rw=2049, sector=145, nr_sectors = 65 limit=128 [ 34.346673][ T28] audit: type=1400 audit(1793046321.592:135): avc: denied { write } for pid=434 comm="syz.1.27" name="udplite6" dev="proc" ino=4026532346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 34.376589][ T28] audit: type=1400 audit(1793046321.592:136): avc: denied { create } for pid=434 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.600060][ T445] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm kworker/u4:6: lblock 0 mapped to illegal pblock 0 (length 6) [ 34.630338][ T445] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 34.651938][ T445] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.651938][ T445] [ 34.672807][ T463] loop4: detected capacity change from 0 to 1024 [ 34.708568][ T445] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 34.713585][ T287] EXT4-fs (loop0): unmounting filesystem. [ 34.734220][ T445] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 34.754690][ T445] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.754690][ T445] [ 34.771577][ T466] loop3: detected capacity change from 0 to 1024 [ 34.779395][ T463] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.788508][ T439] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:5: bg 0: block 112: padding at end of block bitmap is not set [ 34.795823][ T463] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.820681][ T439] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 576 with max blocks 60 with error 28 [ 34.834138][ T439] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.834138][ T439] [ 34.844745][ T439] EXT4-fs (loop1): Total free blocks count 0 [ 34.851042][ T439] EXT4-fs (loop1): Free/Dirty block details [ 34.860908][ T466] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 34.872748][ T439] EXT4-fs (loop1): free_blocks=0 [ 34.877970][ T466] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.900257][ T309] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.928728][ T329] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 6) [ 34.952611][ T309] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 34.952818][ T329] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 34.975149][ T309] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.975149][ T309] [ 34.988115][ T478] EXT4-fs error (device loop3): ext4_ext_remove_space:2945: inode #15: comm syz.3.33: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 35.009002][ T478] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem [ 35.026745][ T329] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.026745][ T329] [ 35.036900][ T329] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 35.051428][ T329] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 35.074265][ T329] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.074265][ T329] [ 35.085387][ T329] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 112: padding at end of block bitmap is not set [ 35.100606][ T329] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1792 with max blocks 64 with error 28 [ 35.114336][ T329] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.114336][ T329] [ 35.125198][ T329] EXT4-fs (loop3): Total free blocks count 0 [ 35.131991][ T329] EXT4-fs (loop3): Free/Dirty block details [ 35.138179][ T329] EXT4-fs (loop3): free_blocks=0 [ 35.164703][ T486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 35.229995][ T290] EXT4-fs (loop4): unmounting filesystem. [ 35.318483][ T489] syz.4.39: attempt to access beyond end of device [ 35.318483][ T489] loop4: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 35.934141][ T500] syz.4.39: attempt to access beyond end of device [ 35.934141][ T500] loop4: rw=2049, sector=145, nr_sectors = 65 limit=128 [ 35.957165][ T288] ------------[ cut here ]------------ [ 35.962715][ T288] WARNING: CPU: 1 PID: 288 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 35.970690][ T288] Modules linked in: [ 35.974614][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 35.982143][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.992237][ T288] RIP: 0010:drop_nlink+0xc5/0x110 [ 35.997347][ T288] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 aa f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 db 0b ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 36.017023][ T288] RSP: 0018:ffffc9000db4fae0 EFLAGS: 00010293 [ 36.023133][ T288] RAX: ffffffff81c66745 RBX: ffff888135170080 RCX: ffff88811ed35100 [ 36.031149][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.039188][ T288] RBP: ffffc9000db4fb08 R08: 0000000000000003 R09: 0000000000000004 [ 36.047202][ T288] R10: dffffc0000000000 R11: fffff52001b69f4c R12: dffffc0000000000 [ 36.055210][ T288] R13: 1ffff11026a2e019 R14: ffff8881351700c8 R15: 0000000000000000 [ 36.063286][ T288] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.072253][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.078884][ T288] CR2: 000055555b754948 CR3: 000000010f5fd000 CR4: 00000000003506a0 [ 36.086891][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.095076][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.103085][ T288] Call Trace: [ 36.106408][ T288] [ 36.109359][ T288] shmem_rmdir+0x5b/0x90 [ 36.113641][ T288] vfs_rmdir+0x381/0x4f0 [ 36.117928][ T288] incfs_kill_sb+0xfe/0x210 [ 36.122452][ T288] deactivate_locked_super+0xb5/0x120 [ 36.127867][ T288] deactivate_super+0xaf/0xe0 [ 36.132564][ T288] cleanup_mnt+0x45e/0x4e0 [ 36.137022][ T288] __cleanup_mnt+0x19/0x20 [ 36.141471][ T288] task_work_run+0x1e1/0x250 [ 36.146130][ T288] ? __cfi_task_work_run+0x10/0x10 [ 36.151286][ T288] ? free_nsproxy+0x21f/0x270 [ 36.156044][ T288] do_exit+0xb0d/0x29f0 [ 36.160250][ T288] ? __cfi_do_exit+0x10/0x10 [ 36.164874][ T288] ? __kasan_check_write+0x14/0x20 [ 36.170088][ T288] ? _raw_spin_lock_irq+0x95/0xf0 [ 36.175166][ T288] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.180728][ T288] ? ksys_write+0x1eb/0x260 [ 36.185266][ T288] ? zap_other_threads+0x321/0x3a0 [ 36.190440][ T288] do_group_exit+0x21b/0x2e0 [ 36.195100][ T288] __x64_sys_exit_group+0x3f/0x40 [ 36.200156][ T288] x64_sys_call+0x7b4/0x9a0 [ 36.204676][ T288] do_syscall_64+0x4c/0xa0 [ 36.209129][ T288] ? clear_bhb_loop+0x30/0x80 [ 36.213830][ T288] ? clear_bhb_loop+0x30/0x80 [ 36.218547][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.224472][ T288] RIP: 0033:0x7f482739f559 [ 36.228938][ T288] Code: Unable to access opcode bytes at 0x7f482739f52f. [ 36.236079][ T288] RSP: 002b:00007ffce3627da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 36.244511][ T288] RAX: ffffffffffffffda RBX: 00007f4827435fc3 RCX: 00007f482739f559 [ 36.252526][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 36.260639][ T288] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f4827435f63 [ 36.268679][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce3629060 [ 36.276700][ T288] R13: 00007f4827435f63 R14: 000055555b7314e8 R15: 00007ffce362a130 [ 36.284692][ T288] [ 36.287741][ T288] ---[ end trace 0000000000000000 ]--- [ 36.314710][ T288] ------------[ cut here ]------------ [ 36.320232][ T288] WARNING: CPU: 0 PID: 288 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 36.328253][ T288] Modules linked in: [ 36.332167][ T288] CPU: 0 PID: 288 Comm: syz-executor Tainted: G W syzkaller #0 [ 36.341134][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.351213][ T288] RIP: 0010:drop_nlink+0xc5/0x110 [ 36.356301][ T288] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 aa f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 db 0b ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 36.376057][ T288] RSP: 0018:ffffc9000db4fae0 EFLAGS: 00010293 [ 36.382149][ T288] RAX: ffffffff81c66745 RBX: ffff888135170810 RCX: ffff88811ed35100 [ 36.390160][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.398180][ T288] RBP: ffffc9000db4fb08 R08: 0000000000000003 R09: 0000000000000004 [ 36.406215][ T288] R10: dffffc0000000000 R11: fffff52001b69f4c R12: dffffc0000000000 [ 36.414222][ T288] R13: 1ffff11026a2e10b R14: ffff888135170858 R15: 0000000000000000 [ 36.422249][ T288] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.431234][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.437871][ T288] CR2: 000000110c31874a CR3: 0000000130141000 CR4: 00000000003506b0 [ 36.445892][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.453891][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.461899][ T288] Call Trace: [ 36.465266][ T288] [ 36.468217][ T288] shmem_rmdir+0x5b/0x90 [ 36.472474][ T288] vfs_rmdir+0x381/0x4f0 [ 36.476828][ T288] incfs_kill_sb+0x18f/0x210 [ 36.481446][ T288] deactivate_locked_super+0xb5/0x120 [ 36.486882][ T288] deactivate_super+0xaf/0xe0 [ 36.491586][ T288] cleanup_mnt+0x45e/0x4e0 [ 36.496044][ T288] __cleanup_mnt+0x19/0x20 [ 36.500477][ T288] task_work_run+0x1e1/0x250 [ 36.505098][ T288] ? __cfi_task_work_run+0x10/0x10 [ 36.510243][ T288] ? free_nsproxy+0x21f/0x270 [ 36.514949][ T288] do_exit+0xb0d/0x29f0 [ 36.519193][ T288] ? __cfi_do_exit+0x10/0x10 [ 36.523810][ T288] ? __kasan_check_write+0x14/0x20 [ 36.528971][ T288] ? _raw_spin_lock_irq+0x95/0xf0 [ 36.534022][ T288] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.539595][ T288] ? ksys_write+0x1eb/0x260 [ 36.544113][ T288] ? zap_other_threads+0x321/0x3a0 [ 36.549286][ T288] do_group_exit+0x21b/0x2e0 [ 36.553974][ T288] __x64_sys_exit_group+0x3f/0x40 [ 36.559611][ T288] x64_sys_call+0x7b4/0x9a0 [ 36.564152][ T288] do_syscall_64+0x4c/0xa0 [ 36.568627][ T288] ? clear_bhb_loop+0x30/0x80 [ 36.573338][ T288] ? clear_bhb_loop+0x30/0x80 [ 36.578058][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.584009][ T288] RIP: 0033:0x7f482739f559 [ 36.588495][ T288] Code: Unable to access opcode bytes at 0x7f482739f52f. [ 36.595554][ T288] RSP: 002b:00007ffce3627da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 36.603987][ T288] RAX: ffffffffffffffda RBX: 00007f4827435fc3 RCX: 00007f482739f559 [ 36.612029][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 36.620043][ T288] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f4827435f63 [ 36.628110][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce3629060 [ 36.636120][ T288] R13: 00007f4827435f63 R14: 000055555b7314e8 R15: 00007ffce362a130 [ 36.644102][ T288] [ 36.647182][ T288] ---[ end trace 0000000000000000 ]--- [ 36.718251][ T288] ================================================================== [ 36.726376][ T288] BUG: KASAN: use-after-free in fast_dput+0x1e0/0x290 [ 36.733192][ T288] Read of size 4 at addr ffff888133654220 by task syz-executor/288 [ 36.741113][ T288] [ 36.743462][ T288] CPU: 0 PID: 288 Comm: syz-executor Tainted: G W syzkaller #0 [ 36.752411][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.762482][ T288] Call Trace: [ 36.765773][ T288] [ 36.768721][ T288] __dump_stack+0x21/0x24 [ 36.773246][ T288] dump_stack_lvl+0x110/0x170 [ 36.777941][ T288] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.782979][ T288] ? fast_dput+0x1e0/0x290 [ 36.787427][ T288] print_address_description+0x71/0x200 [ 36.793036][ T288] print_report+0x4a/0x60 [ 36.797387][ T288] kasan_report+0x122/0x150 [ 36.801914][ T288] ? fast_dput+0x1e0/0x290 [ 36.806355][ T288] __asan_report_load4_noabort+0x14/0x20 [ 36.812006][ T288] fast_dput+0x1e0/0x290 [ 36.816269][ T288] dput+0x21/0x80 [ 36.819923][ T288] incfs_free_mount_info+0x60/0x200 [ 36.825144][ T288] incfs_kill_sb+0x1af/0x210 [ 36.829752][ T288] deactivate_locked_super+0xb5/0x120 [ 36.835157][ T288] deactivate_super+0xaf/0xe0 [ 36.839884][ T288] cleanup_mnt+0x45e/0x4e0 [ 36.844341][ T288] __cleanup_mnt+0x19/0x20 [ 36.850257][ T288] task_work_run+0x1e1/0x250 [ 36.854871][ T288] ? __cfi_task_work_run+0x10/0x10 [ 36.860089][ T288] ? free_nsproxy+0x21f/0x270 [ 36.864809][ T288] do_exit+0xb0d/0x29f0 [ 36.868996][ T288] ? __cfi_do_exit+0x10/0x10 [ 36.873609][ T288] ? __kasan_check_write+0x14/0x20 [ 36.878757][ T288] ? _raw_spin_lock_irq+0x95/0xf0 [ 36.883808][ T288] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.889388][ T288] ? ksys_write+0x1eb/0x260 [ 36.893987][ T288] ? zap_other_threads+0x321/0x3a0 [ 36.899119][ T288] do_group_exit+0x21b/0x2e0 [ 36.903731][ T288] __x64_sys_exit_group+0x3f/0x40 [ 36.908771][ T288] x64_sys_call+0x7b4/0x9a0 [ 36.913289][ T288] do_syscall_64+0x4c/0xa0 [ 36.917718][ T288] ? clear_bhb_loop+0x30/0x80 [ 36.922416][ T288] ? clear_bhb_loop+0x30/0x80 [ 36.927112][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.933017][ T288] RIP: 0033:0x7f482739f559 [ 36.937447][ T288] Code: Unable to access opcode bytes at 0x7f482739f52f. [ 36.944474][ T288] RSP: 002b:00007ffce3627da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 36.952987][ T288] RAX: ffffffffffffffda RBX: 00007f4827435fc3 RCX: 00007f482739f559 [ 36.960993][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 36.968977][ T288] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f4827435f63 [ 36.976963][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce3629060 [ 36.984941][ T288] R13: 00007f4827435f63 R14: 000055555b7314e8 R15: 00007ffce362a130 [ 36.992930][ T288] [ 36.995959][ T288] [ 36.998290][ T288] Allocated by task 481: [ 37.002537][ T288] kasan_set_track+0x4b/0x70 [ 37.007162][ T288] kasan_save_alloc_info+0x1f/0x30 [ 37.012284][ T288] __kasan_slab_alloc+0x72/0x80 [ 37.017154][ T288] slab_post_alloc_hook+0x4f/0x2d0 [ 37.022301][ T288] kmem_cache_alloc_lru+0x104/0x280 [ 37.027517][ T288] __d_alloc+0x34/0x6d0 [ 37.031695][ T288] d_alloc_parallel+0xe2/0x1280 [ 37.036570][ T288] __lookup_slow+0x14f/0x410 [ 37.041168][ T288] lookup_one_len+0x19d/0x2e0 [ 37.045855][ T288] incfs_lookup_dentry+0x60/0xb0 [ 37.050808][ T288] open_or_create_special_dir+0x4c/0x1f0 [ 37.056542][ T288] incfs_mount_fs+0x42f/0x890 [ 37.061231][ T288] legacy_get_tree+0xfe/0x1a0 [ 37.065944][ T288] vfs_get_tree+0x9a/0x270 [ 37.070369][ T288] do_new_mount+0x251/0xb40 [ 37.074878][ T288] path_mount+0x640/0xfd0 [ 37.079228][ T288] __se_sys_mount+0x320/0x390 [ 37.083914][ T288] __x64_sys_mount+0xbf/0xd0 [ 37.088508][ T288] x64_sys_call+0x65d/0x9a0 [ 37.093046][ T288] do_syscall_64+0x4c/0xa0 [ 37.097470][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.103383][ T288] [ 37.105713][ T288] Freed by task 511: [ 37.109608][ T288] kasan_set_track+0x4b/0x70 [ 37.114210][ T288] kasan_save_free_info+0x2b/0x40 [ 37.119244][ T288] ____kasan_slab_free+0x132/0x180 [ 37.124453][ T288] __kasan_slab_free+0x11/0x20 [ 37.129229][ T288] slab_free_freelist_hook+0xc2/0x190 [ 37.134623][ T288] kmem_cache_free+0x12d/0x300 [ 37.139403][ T288] __d_free+0x23/0x30 [ 37.143391][ T288] rcu_do_batch+0x52b/0xc30 [ 37.147899][ T288] rcu_core+0x486/0xf00 [ 37.152065][ T288] rcu_core_si+0x9/0x10 [ 37.156236][ T288] handle_softirqs+0x1dd/0x5f0 [ 37.161011][ T288] __irq_exit_rcu+0x52/0xf0 [ 37.165609][ T288] irq_exit_rcu+0x9/0x10 [ 37.169860][ T288] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 37.175509][ T288] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 37.181514][ T288] [ 37.183938][ T288] Last potentially related work creation: [ 37.189661][ T288] kasan_save_stack+0x3a/0x60 [ 37.194353][ T288] __kasan_record_aux_stack+0xb6/0xc0 [ 37.199741][ T288] kasan_record_aux_stack_noalloc+0xb/0x10 [ 37.205565][ T288] call_rcu+0xcf/0xf50 [ 37.209643][ T288] dentry_free+0xbd/0x150 [ 37.213990][ T288] __dentry_kill+0x535/0x680 [ 37.218600][ T288] dentry_kill+0xc0/0x2a0 [ 37.223029][ T288] dput+0x42/0x80 [ 37.226688][ T288] incfs_free_mount_info+0x60/0x200 [ 37.231904][ T288] incfs_kill_sb+0x1af/0x210 [ 37.236602][ T288] deactivate_locked_super+0xb5/0x120 [ 37.242005][ T288] deactivate_super+0xaf/0xe0 [ 37.246723][ T288] cleanup_mnt+0x45e/0x4e0 [ 37.251156][ T288] __cleanup_mnt+0x19/0x20 [ 37.255605][ T288] task_work_run+0x1e1/0x250 [ 37.260209][ T288] do_exit+0xb0d/0x29f0 [ 37.264379][ T288] do_group_exit+0x21b/0x2e0 [ 37.268984][ T288] __x64_sys_exit_group+0x3f/0x40 [ 37.274031][ T288] x64_sys_call+0x7b4/0x9a0 [ 37.278561][ T288] do_syscall_64+0x4c/0xa0 [ 37.282993][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.288903][ T288] [ 37.291234][ T288] The buggy address belongs to the object at ffff888133654220 [ 37.291234][ T288] which belongs to the cache dentry of size 208 [ 37.304867][ T288] The buggy address is located 0 bytes inside of [ 37.304867][ T288] 208-byte region [ffff888133654220, ffff8881336542f0) [ 37.317971][ T288] [ 37.320303][ T288] The buggy address belongs to the physical page: [ 37.326722][ T288] page:ffffea0004cd9500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x133654 [ 37.336988][ T288] flags: 0x4000000000000200(slab|zone=1) [ 37.342656][ T288] raw: 4000000000000200 0000000000000000 dead000000000122 ffff8881001ed980 [ 37.351251][ T288] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000 [ 37.359843][ T288] page dumped because: kasan: bad access detected [ 37.366279][ T288] page_owner tracks the page as allocated [ 37.372012][ T288] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112cd0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 479, tgid 474 (syz.2.35), ts 34944659092, free_ts 0 [ 37.390618][ T288] post_alloc_hook+0x1f5/0x210 [ 37.395432][ T288] prep_new_page+0x1c/0x110 [ 37.400163][ T288] get_page_from_freelist+0x2ca9/0x2d20 [ 37.405744][ T288] __alloc_pages+0x1fa/0x610 [ 37.410367][ T288] alloc_slab_page+0x6e/0xf0 [ 37.414994][ T288] new_slab+0x98/0x3e0 [ 37.419091][ T288] ___slab_alloc+0x70f/0xb70 [ 37.423712][ T288] __slab_alloc+0x5e/0xa0 [ 37.428067][ T288] kmem_cache_alloc_lru+0x144/0x280 [ 37.433294][ T288] __d_alloc+0x34/0x6d0 [ 37.437477][ T288] d_alloc_parallel+0xe2/0x1280 [ 37.442346][ T288] __lookup_slow+0x14f/0x410 [ 37.447046][ T288] lookup_slow+0x57/0x70 [ 37.451306][ T288] link_path_walk+0x984/0xeb0 [ 37.456005][ T288] path_openat+0x27f/0x2f30 [ 37.460557][ T288] do_filp_open+0x1ee/0x420 [ 37.465106][ T288] page_owner free stack trace missing [ 37.470486][ T288] [ 37.472831][ T288] Memory state around the buggy address: [ 37.478473][ T288] ffff888133654100: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 37.486557][ T288] ffff888133654180: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 37.494634][ T288] >ffff888133654200: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb [ 37.502732][ T288] ^ [ 37.507860][ T288] ffff888133654280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 37.515941][ T288] ffff888133654300: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 [ 37.524013][ T288] ================================================================== [ 37.537846][ T288] Disabling lock debugging due to kernel taint [ 37.544199][ T288] ------------[ cut here ]------------ [ 37.549736][ T288] WARNING: CPU: 1 PID: 288 at fs/dcache.c:794 fast_dput+0x207/0x290 [ 37.557798][ T288] Modules linked in: [ 37.561750][ T288] CPU: 1 PID: 288 Comm: syz-executor Tainted: G B W syzkaller #0 [ 37.570753][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.580887][ T288] RIP: 0010:fast_dput+0x207/0x290 [ 37.586002][ T288] Code: 99 f1 ff e9 4e fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fe ff ff 48 89 df e8 93 99 f1 ff e9 94 fe ff ff e8 49 fe ab ff <0f> 0b e9 13 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ec fe ff [ 37.588204][ T505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.605729][ T288] RSP: 0018:ffffc9000db4faf0 EFLAGS: 00010293 [ 37.614881][ T505] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.620727][ T288] RAX: ffffffff81c574d7 RBX: ffff888133654220 RCX: ffff88811ed35100 [ 37.639018][ T288] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001 [ 37.647172][ T288] RBP: ffffc9000db4fb18 R08: 0000000000000003 R09: 0000000000000004 [ 37.655309][ T288] R10: dffffc0000000000 R11: fffff52001b69f50 R12: 00000000ffffff80 [ 37.663328][ T288] R13: dffffc0000000000 R14: ffff888133654278 R15: 1ffff110266ca84f [ 37.671366][ T288] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.680361][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.687007][ T288] CR2: 00007fc185827dac CR3: 000000012140d000 CR4: 00000000003526a0 [ 37.695081][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.702420][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 37.702461][ T28] audit: type=1400 audit(1793046324.882:153): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 37.703076][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.703092][ T288] Call Trace: [ 37.703098][ T288] [ 37.703107][ T288] dput+0x21/0x80 [ 37.710674][ T28] audit: type=1400 audit(1793046324.892:154): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.731020][ T288] incfs_free_mount_info+0x60/0x200 [ 37.739415][ T28] audit: type=1400 audit(1793046324.892:155): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.742580][ T288] incfs_kill_sb+0x1af/0x210 [ 37.745564][ T28] audit: type=1400 audit(1793046324.892:156): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.749216][ T288] deactivate_locked_super+0xb5/0x120 [ 37.827916][ T288] deactivate_super+0xaf/0xe0 [ 37.832647][ T288] cleanup_mnt+0x45e/0x4e0 [ 37.838278][ T288] __cleanup_mnt+0x19/0x20 [ 37.842749][ T288] task_work_run+0x1e1/0x250 [ 37.847412][ T288] ? __cfi_task_work_run+0x10/0x10 [ 37.852573][ T288] ? free_nsproxy+0x21f/0x270 [ 37.857327][ T288] do_exit+0xb0d/0x29f0 [ 37.861566][ T288] ? __cfi_do_exit+0x10/0x10 [ 37.866249][ T288] ? __kasan_check_write+0x14/0x20 [ 37.871406][ T288] ? _raw_spin_lock_irq+0x95/0xf0 [ 37.876530][ T288] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 37.882117][ T288] ? ksys_write+0x1eb/0x260 [ 37.886741][ T288] ? zap_other_threads+0x321/0x3a0 [ 37.891900][ T288] do_group_exit+0x21b/0x2e0 [ 37.896564][ T288] __x64_sys_exit_group+0x3f/0x40 [ 37.901640][ T288] x64_sys_call+0x7b4/0x9a0 [ 37.906203][ T288] do_syscall_64+0x4c/0xa0 [ 37.910657][ T288] ? clear_bhb_loop+0x30/0x80 [ 37.915427][ T288] ? clear_bhb_loop+0x30/0x80 [ 37.920169][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.926132][ T288] RIP: 0033:0x7f482739f559 [ 37.930592][ T288] Code: Unable to access opcode bytes at 0x7f482739f52f. [ 37.939836][ T288] RSP: 002b:00007ffce3627da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 37.948315][ T288] RAX: ffffffffffffffda RBX: 00007f4827435fc3 RCX: 00007f482739f559 [ 37.956357][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 37.964367][ T288] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f4827435f63 [ 37.972424][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce3629060 [ 37.980475][ T288] R13: 00007f4827435f63 R14: 000055555b7314e8 R15: 00007ffce362a130 [ 37.988519][ T288] [ 37.991570][ T288] ---[ end trace 0000000000000000 ]--- [ 38.009675][ T28] audit: type=1400 audit(1793046324.892:157): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.016500][ T513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 38.040547][ T28] audit: type=1400 audit(1793046324.892:158): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.064328][ T28] audit: type=1400 audit(1793046324.892:159): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.090384][ T288] ------------[ cut here ]------------ [ 38.096057][ T288] WARNING: CPU: 0 PID: 288 at fs/dcache.c:669 retain_dentry+0x158/0x2c0 [ 38.104458][ T288] Modules linked in: [ 38.108431][ T288] CPU: 0 PID: 288 Comm: syz-executor Tainted: G B W syzkaller #0 [ 38.117598][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.127725][ T288] RIP: 0010:retain_dentry+0x158/0x2c0 [ 38.133180][ T288] Code: 31 ff e8 ab 00 ac ff 44 89 e8 83 e0 40 0f 84 b9 00 00 00 e8 7a fc ab ff b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 68 fc ab ff <0f> 0b e9 f9 fe ff ff e8 5c fc ab ff 31 c0 eb e0 e8 53 fc ab ff 31 [ 38.152899][ T288] RSP: 0018:ffffc9000db4faf0 EFLAGS: 00010293 [ 38.159039][ T288] RAX: ffffffff81c576b8 RBX: ffff888133654110 RCX: ffff88811ed35100 [ 38.167066][ T288] RDX: 0000000000000000 RSI: 0000000010000000 RDI: 0000000000000000 [ 38.175107][ T288] RBP: ffffc9000db4fb18 R08: 0000000000000003 R09: 0000000000000004 [ 38.183210][ T288] R10: dffffc0000000000 R11: fffff52001b69f34 R12: 1ffff110266ca822 [ 38.191693][ T288] R13: ffff888117e353c8 R14: 0000000010000000 R15: dffffc0000000000 [ 38.199735][ T288] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.208754][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.215393][ T288] CR2: 00007f9d481f62f8 CR3: 00000001333c5000 CR4: 00000000003526b0 [ 38.223415][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.231449][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.239488][ T288] Call Trace: [ 38.242795][ T288] [ 38.245779][ T288] dput+0x36/0x80 [ 38.249464][ T288] incfs_free_mount_info+0x80/0x200 [ 38.254735][ T288] incfs_kill_sb+0x1af/0x210 [ 38.259397][ T288] deactivate_locked_super+0xb5/0x120 [ 38.264817][ T288] deactivate_super+0xaf/0xe0 [ 38.269565][ T288] cleanup_mnt+0x45e/0x4e0 [ 38.274020][ T288] __cleanup_mnt+0x19/0x20 [ 38.278502][ T288] task_work_run+0x1e1/0x250 [ 38.283137][ T288] ? __cfi_task_work_run+0x10/0x10 [ 38.288348][ T288] ? free_nsproxy+0x21f/0x270 [ 38.293082][ T288] do_exit+0xb0d/0x29f0 [ 38.297324][ T288] ? __cfi_do_exit+0x10/0x10 [ 38.301966][ T288] ? __kasan_check_write+0x14/0x20 [ 38.307141][ T288] ? _raw_spin_lock_irq+0x95/0xf0 [ 38.312204][ T288] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 38.317814][ T288] ? ksys_write+0x1eb/0x260 [ 38.322359][ T288] ? zap_other_threads+0x321/0x3a0 [ 38.327557][ T288] do_group_exit+0x21b/0x2e0 [ 38.332195][ T288] __x64_sys_exit_group+0x3f/0x40 [ 38.337313][ T288] x64_sys_call+0x7b4/0x9a0 [ 38.341855][ T288] do_syscall_64+0x4c/0xa0 [ 38.346343][ T288] ? clear_bhb_loop+0x30/0x80 [ 38.351065][ T288] ? clear_bhb_loop+0x30/0x80 [ 38.355826][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.361769][ T288] RIP: 0033:0x7f482739f559 [ 38.366248][ T288] Code: Unable to access opcode bytes at 0x7f482739f52f. [ 38.373295][ T288] RSP: 002b:00007ffce3627da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 38.381775][ T288] RAX: ffffffffffffffda RBX: 00007f4827435fc3 RCX: 00007f482739f559 [ 38.389806][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 38.397838][ T288] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f4827435f63 [ 38.405854][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce3629060 [ 38.413943][ T288] R13: 00007f4827435f63 R14: 000055555b7314e8 R15: 00007ffce362a130 [ 38.421989][ T288] [ 38.425133][ T288] ---[ end trace 0000000000000000 ]--- [ 38.430612][ T288] list_del corruption. prev->next should be ffff8881336541a0, but was ffff8881336546f0. (prev=ffff8881336060a0) [ 38.442582][ T288] ------------[ cut here ]------------ [ 38.448092][ T288] kernel BUG at lib/list_debug.c:61! [ 38.453776][ T288] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 38.459874][ T288] CPU: 0 PID: 288 Comm: syz-executor Tainted: G B W syzkaller #0 [ 38.468836][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.478914][ T288] RIP: 0010:__list_del_entry_valid+0x10f/0x130 [ 38.485108][ T288] Code: e8 ee c0 88 02 0f 0b 48 c7 c7 a0 77 ca 85 48 89 de e8 dd c0 88 02 0f 0b 48 c7 c7 00 78 ca 85 48 89 de 4c 89 f9 e8 c9 c0 88 02 <0f> 0b 48 c7 c7 80 78 ca 85 48 89 de 4c 89 f1 e8 b5 c0 88 02 0f 0b [ 38.504744][ T288] RSP: 0018:ffffc9000db4fa68 EFLAGS: 00010246 [ 38.510860][ T288] RAX: 000000000000006d RBX: ffff8881336541a0 RCX: d79fe228ff980f00 [ 38.518867][ T288] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 38.526976][ T288] RBP: ffffc9000db4fa88 R08: ffffc9000db4f647 R09: 1ffff92001b69ec8 [ 38.534998][ T288] R10: dffffc0000000000 R11: fffff52001b69ec9 R12: dffffc0000000000 [ 38.542998][ T288] R13: dffffc0000000000 R14: ffff8881336546f0 R15: ffff8881336060a0 [ 38.551014][ T288] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.559998][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.566612][ T288] CR2: 00007f9d481f62f8 CR3: 000000000700f000 CR4: 00000000003526b0 [ 38.574614][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.582617][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.590615][ T288] Call Trace: [ 38.593932][ T288] [ 38.596923][ T288] __dentry_kill+0x259/0x680 [ 38.601558][ T288] dentry_kill+0xc0/0x2a0 [ 38.605942][ T288] dput+0x42/0x80 [ 38.609611][ T288] incfs_free_mount_info+0x80/0x200 [ 38.614853][ T288] incfs_kill_sb+0x1af/0x210 [ 38.619487][ T288] deactivate_locked_super+0xb5/0x120 [ 38.624897][ T288] deactivate_super+0xaf/0xe0 [ 38.629610][ T288] cleanup_mnt+0x45e/0x4e0 [ 38.634085][ T288] __cleanup_mnt+0x19/0x20 [ 38.638535][ T288] task_work_run+0x1e1/0x250 [ 38.643162][ T288] ? __cfi_task_work_run+0x10/0x10 [ 38.648317][ T288] ? free_nsproxy+0x21f/0x270 [ 38.653042][ T288] do_exit+0xb0d/0x29f0 [ 38.657237][ T288] ? __cfi_do_exit+0x10/0x10 [ 38.661871][ T288] ? __kasan_check_write+0x14/0x20 [ 38.667029][ T288] ? _raw_spin_lock_irq+0x95/0xf0 [ 38.672088][ T288] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 38.677659][ T288] ? ksys_write+0x1eb/0x260 [ 38.682200][ T288] ? zap_other_threads+0x321/0x3a0 [ 38.687353][ T288] do_group_exit+0x21b/0x2e0 [ 38.692009][ T288] __x64_sys_exit_group+0x3f/0x40 [ 38.697073][ T288] x64_sys_call+0x7b4/0x9a0 [ 38.701605][ T288] do_syscall_64+0x4c/0xa0 [ 38.706079][ T288] ? clear_bhb_loop+0x30/0x80 [ 38.710790][ T288] ? clear_bhb_loop+0x30/0x80 [ 38.715504][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.721436][ T288] RIP: 0033:0x7f482739f559 [ 38.725888][ T288] Code: Unable to access opcode bytes at 0x7f482739f52f. [ 38.732937][ T288] RSP: 002b:00007ffce3627da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 38.741469][ T288] RAX: ffffffffffffffda RBX: 00007f4827435fc3 RCX: 00007f482739f559 [ 38.749470][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 38.757472][ T288] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f4827435f63 [ 38.765465][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce3629060 [ 38.773464][ T288] R13: 00007f4827435f63 R14: 000055555b7314e8 R15: 00007ffce362a130 [ 38.781650][ T288] [ 38.784690][ T288] Modules linked in: [ 38.789424][ T288] ---[ end trace 0000000000000000 ]--- [ 38.794912][ T288] RIP: 0010:__list_del_entry_valid+0x10f/0x130 [ 38.801181][ T288] Code: e8 ee c0 88 02 0f 0b 48 c7 c7 a0 77 ca 85 48 89 de e8 dd c0 88 02 0f 0b 48 c7 c7 00 78 ca 85 48 89 de 4c 89 f9 e8 c9 c0 88 02 <0f> 0b 48 c7 c7 80 78 ca 85 48 89 de 4c 89 f1 e8 b5 c0 88 02 0f 0b [ 38.820933][ T288] RSP: 0018:ffffc9000db4fa68 EFLAGS: 00010246 [ 38.827061][ T288] RAX: 000000000000006d RBX: ffff8881336541a0 RCX: d79fe228ff980f00 [ 38.835077][ T288] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 38.843075][ T288] RBP: ffffc9000db4fa88 R08: ffffc9000db4f647 R09: 1ffff92001b69ec8 [ 38.851105][ T288] R10: dffffc0000000000 R11: fffff52001b69ec9 R12: dffffc0000000000 [ 38.859142][ T288] R13: dffffc0000000000 R14: ffff8881336546f0 R15: ffff8881336060a0 [ 38.867197][ T288] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.876188][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.882835][ T288] CR2: 00007f9d481f62f8 CR3: 000000000700f000 CR4: 00000000003526b0 [ 38.890885][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.898913][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.906950][ T288] Kernel panic - not syncing: Fatal exception [ 38.913616][ T288] Kernel Offset: disabled [ 38.917954][ T288] Rebooting in 86400 seconds..