last executing test programs: 1m36.291606928s ago: executing program 1 (id=1320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) 1m36.184596417s ago: executing program 1 (id=1322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7b8acaa1"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002500)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYBLOB="dc4347bed50bd5beda725a915c356c95ee963c69b387cc7e799083443d389e20a165e2a3eee57cb9795ba5c75f1a23e0607c86d78c3f4b1eeca2014546c3515d981953c9800275b319233469e93a8c77"], &(0x7f0000000000)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000340)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x2000}) syz_fuse_handle_req(r4, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r8, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{0x77359400}}, 0x100) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r12 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000300)='bpf_lsm_task_alloc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r4], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x2a, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_idx_val={0x18, 0xd, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xc7b}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x11, &(0x7f0000000280)=""/17, 0x41000, 0x57, '\x00', r11, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x2, 0x5, 0x1}, 0x10, r12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_fuse_handle_req(r4, &(0x7f0000006300)="bdf25e6f0d10668122f289a6bf3cc1c9476de5625a0271b8d988a9f5d5e0081242133ed6d905168ffd12a79b9d0245efce333b69021258af0b7f8fcc7b0ce9b48ff73dc5ebaa2a607033a6220a60c4e1348d92f8d0e9c79504518133021220077e1e0b4e0c8d373c779e03dd36c1f9667c8ee6aa56c2b97e9cded8b1738fea65774c4c5dedf7be75405218742aa9f5348129b9893ca01e43a8f648e689adb9776f9008596ca8a749e94b7d7b906945390e6c68fefd7364e749c35484b0a7b4569e8d5bf6fdc06c3ed56c599d61a21ed03ec5b61f74d9a7400e9a0999404ac63d7849d3f1bc1e777d2c180220c4227c492bd3ee3f854e846baf93fa9759ed96fb69c9bc2fca51d1f24a68e735ba5deeb0afc2b017849a1786574a50b6818e3ee1029b2257fe2ede4b065637fcb05632587600d1090b004d4fc3dc8d3576762d06a964bcc7d31f94e09ecec7a999717dd639a3db03df310a0a4f26134d982e80f00d3f1f20693cf36115046f52734d0bafab657131682c6c415168b87cabb42a125fdd6cb8a545b717e1fc301c0798515f201f7ff7bfd35db7605f4ef97a91a6da5d5f88d1455edce0e86ea60901ea22aee508a567dfcf0f3f630d4e8be3a312a5d997bbb8fcc319f32c45fc62b09778bcf810b48a863c1a0ffeac68af383d3bfb60ad9f69f50bb11557bb2e966bd231c49fee49ec8c2174fd3cfd245c56a1c982a1f818a50713df546cf9d01b70e165d371ce0d2ba41c6758c46da7eb8078d2c7f2a2462a32e37129dded20ec3f6169a33d136765d9ae28addf3fbecb633aee9a7ded0ec160b5ce35c92b855ba8362205017afaf9e45758d5e256e35452f6d03ac89712e81445b32dfdd8cdd28a5af8c75df2a27922dbf5cceabff945327b5f4ec2e93c4b367ebc6a54f903567ff1a3f9469a466ecbfef5c39671c9ac29f14de1575de46ba2e933cdeb068259593e73da67f05858ba0cf3e0316aa1a91c21f1a1ccf157b2f4160b86dd67ea854ddd098f34c0421a7ab541b6d105f76ff19afdef08456da28244b25b61162093592e72bc251936db09134f590ca0a1b844244aa054a748b695346a5d49b979b4c69cdad7ef09f615196bfa2918c07e81c325370461cdc50aeb105b3cc51e0a098d9e49118da9c1bb04da247fc4e7876136059fe1ed10042383502b54c6e26082eddf83196d6b2c9410e4217dc8c4c2de483e328ccfbea9c54ab549a23ec98c9db241a67ffd79af97822bcc0a784e8f4e61c83cfb637f4aa1a80027fb2322bca99b65d4d64e93f3484c83ce7f46e12f7accacf74c5d0362198d60de93925e1a631ea6c786843261c49cadf482f3ff541b88d92f801a8610c195ad6e09e4a1bc15f727d09d063e23bfde60585def96e3963978f0686ca079e86032cd23b30222ff0843fa1d0e883d2d75dffc12bab0109b25ff08cf1caeeb7c39e5f438c7b2a9a2a366d32fa9fa0e2885a473ce6b97455d58d941b46faac1f2d8335f276f14232e193be1301416584c47062059e92ece4347c89aa9bf2c12b7c7b5ef7b3bf27ef23367ca3fd037fd9145f84e6852ea3eb624b7622411851134a7ef388e7799df33bfae12a35bdde94de1b10e0e0fe6b40d158409992244a4e27af355aaf7983aceb0ca6c790ecbe5234fd0ad063ae2ee1fe48aff51c35c5553fd1ab998abcb3dd7b0efb2f9c658fc4671e536c0ea75b36d59efe1901e971a750a4fdaf15bc0d1de7681a18c73bd00329d8a7a59c8dde6ee9156759386428a593d9bcbac57f2ec6387dc713703b30e44e655f663947caf4bf15624517bf3f4df16a8ade7193d0a69d998d970c07406a5892dc625a2695bc5c495079f2100ac033f912b5135551c923b61687574b1c43ca81ae9312d668415c8162aea7582b8db90f96181700ac22771b985c0c3f6081cca160efb1bdcabc2177d081ee618ed92c5af569721cc9f0453fe8e512d089a2aa0a219504ff51ba258f6b3737120e7d55e3ceed42c1aef42ac5e969642e3ffa8bc9e7319927ff971d450ac5a8a12ef68747b2574e89a64dcff67a36cbcf0f166371f98825c6eaa8516e27b81b8701d47fbbb87748a771265afff6fdf0acd2e9da1d759523feb0f33a6b27c050cbd5ea833c4859d7c84878253652dc4277a8ad6dd0b1b118e866cb90f7f29cf3a65cd9ba5c5e888c2afdfcef2b9dca883dcb7908c0a2ba0e76d5992430819f4f7d0369c53f737abc75e7f52ed95320dde44bf8b6397ef1ae719eb550a2bcad515ed99246f753d9d344f668c58c2343873b2af2dbb8d0c1c3280a5e8267a89a16eae734102bf4ed6aec57f4e29eaadb118f5407337387ec12f6629f8de94b2fefceffb735effca8865722334dd3a27c789c96c2fdc7f96d702fa5e360a460856c3559ac65dac1aae0c10712cd99e8f7c9188a43460c2e3775f27518893628cb5f2cd25985570ad101b3ba16a342885d65ea1befef80aca975a3f8428eab9999124aeafa991f68151eb7ab9bffe132c8ad1f2e0ad79e0cbc0806aa46c0c53b6f1217dcd88f197a3c6ddcb5e1ca9c278d02736ab3f81db85d3fd751c38bdd449fb3f9e52c2e067fb8761b94ccf13e4958cb1f703d327cd510089ae4d10a96328b950689efd262f43470dd47c73327c63cd882432807a65d9d21ae39b57e27c14af2b6792c6d6687526593ce97e8000eb49157553fc6fc9e4f040098b43e4308aceb1c5f87f046389b3174cf96459460927b0fff05764d398c7c5e987ec4b08259c4a41a4fd293e0106e2c522cff08f07cb4dcb7165dd6ba7358bb7d389aae1bd76957e1b69e4b65a0443fe2ca48722b3babd8df8c53b6fc1fc0537defa60e79bf6f746771d3be7def7b14a813087804fdb7523566c47041014d0e4eb8e0faa6db79dc05a54299e54b34be446a3d3b0c073e212e305a78a190034885174fe25443061447ea7fa094f104b10dacc382cb353c96e3cf4993aba3b7271ecf3828feaa2490fa03697ac6bcd841130a175d7275033da3e7c094141d2ce798e8cf25b4b9d3356c0d74563ee9b81f9b18d10bf25988ce3f81ed002095c94b2cf2c8799f4e2194b11a6f4a774ac4fbf5c78d8163e681271505c17f47e71cd03a20490241c1f144ae59b19cce564475575e0af7f41984ffa6f5f8b365a338687ad494a79317679c00d74242b4155fb0a06fc735793d66bd6f252a26278896b6df70a393a21b0a9b80056c505f7266f296bbc3587af24c06476539cd1bfe1f20f818c778fd712300feab31861b31c254211c42d9f27ff3f41f5bb170c15b3daad6dda056065b24107ab3976549a353bd6f2859d84fba3d21f4377b1c5a0aa4fd039c485d1bdd8017817cdea1b8ba5b52c30ea06ae1abb942abd1917626deb37297d3df42cc848cd01622f13ad081f9d2c96384f6b4c72d4df9541b2cb36ec119e326f625aba6436dfa5d986cc8a6a15e082e2111c26a6da1d1e387445a7fe5a9ccf05dc01d08fd1b16f768b5b3b8b464976d480f4f1a44346ca5f01f29eff48e2ad585cc32f6c00e2c045c7015cb46f70052e4935c246ebcdbc7c3d091c825f864eea2dfe25459b6456f7b52c168fd565d250514261d171d65c8e9ef6fde70ff716b7c45a24f9666462a0919ed7a1a614df711c7f5b24dda275c71fbf973ed4f8cbbba5ea15bd7e5aaad972711159b20751f5fdb91a223f39cde6a83751a06c1ad0536d387bf3ea4a3d7e5e90bc52f4d101c045d5ad32fb58e45fd2fa2f5c8aa0bb40957465b87bef7fe6b76c16c8d07ecd51edb49faa5bb0070aba2dad3ca7eea1955d939cadb75286904a02db81fceb6b6b9b16ad84d373d33e134007fcdc02d40472fbbf70b57a53b6e5df122c0f8b3d44dc045104690f2d78b8cd2d0905d5d66830cb9125fa041d0fc2f08e20f9fa70bd17815cbb50f8019048d05df1673e9c8cc83e17dc91fd74b024b2b56b41bbff26016c6638b6ecc16deb349ee392776962746d62751b5672755a845b443c85d7c53605f274f3d5c3edd6ecd15e28545d2aea4df5d5e4eb169af361159249daf53f1339c1819370ad4d3ceafa7dc6a9118a2f1e69c4db409093eca05ec1cad8d606db1c5d3b58609eda4f1e71ae62765d79501ce8de42e60cfdc08517559f9c65e8dfbd73a5f971aa96f2cd20f1763e59d3b15367e0b206e97d5f5462e81299743e1959376fcdfac93855ebac2b5235b0f03c58eeaffcea40be5a9fe6bd290deddbb28db6539a72936a1953cb4a558dc93271a54d1e05cc3f4025c0ecca369b0d25d47c3e66049045d0daf9dc9fbe2c69d217d2e6939bf6d1875cd23b73d2e921aea9eee4f1f9b036e8f5cbb0100710c1dc27d1fb37ea26634dc827bfe42d094ce9576611a6bce6b67467f983a327e9dd34896672f257b41b8bee33a041ce2e83a65fad93e1a2a06854a40fe3751997c5233d397e5ce5ea676379527ad0e298fa62cd91ef89e9876db8e0909b60ff16c4a0ba01307826bf18c242e77af8ac40c681b8ae2cbd58c4eb4e6a580bd3f57bf1ffa44a1d080426d3f8c733568ccc75a61980ec92b5b0f4cf03e3ece177954c21b90b7828c9113da0fc53f6f5c5ea8bea08e14a12b889fc705ee44d834f184532421a584bd7301c9bc822deb7e71050a8cf0cd7f96dd2fd93b9d7306bb9702af5b88b2090d2b67bd88a299704e8c556b9066e35e4c864cf1775a6ed94a9685e996c4c671cc807f7c09b45559ee079d56547179e1b1af630c4ba04717cb5e88c0caadaf57964f5197d9d98a7f5b5e622c3eb5844645c4c2408806bbb4be5778925df16518c06597b243019bdc690a4723548a658529717360d474cfb6fcf30060b320cac29b2e42ec4f390a6c7a15274099a64a8d71c4a84e86d206cd2c7ee8125b19752a18dd2eb0dc643aa6b4494760f62acf187080281ec7d0a526374f69051e6aa13d8321372bea8d9e9c7fed4d0a48257e5c7463bc0a0165acc4712aec8cdd014de0b98d0de9b0dc3cc2d40c3be3ea3edb04b18f72209da21f5900a4ef002aeb88a364ed0bb102c2e164ac4f0dff7f082c3757b7ee1cd0e3b1ad45dd77553a4462c8f84ae21f8246281a02160bcf90c00b7816f93524d4d6577c6432d97da328757c3dc06c06760c82946f9f44e909cefaad0734094d8a9076abfc79c79bdb9bcdfa13697bff6f1a219653ac96882d615fe4757b76a8235f2f5e5978cdb5c5bacf4217a56fc6416943552d6e1d6c3f2e8801322368855aed0c5302d1445cbbeb5ef970abd8b5316f0c7cb7f5bd023c619ecf6b1714705a48b67e7a5c2f15bf9c90f6ada82d36484776d20f464d22b88b5d99dc2ba812b9f38754ac71499705f83875eee065482e2fed4c5f3537449857f409c635dbb2c0565ce9f23bbb5bde3ee0bb94f3fca1b5a0d78825c80f50a839a4b3fe6439fbef4190f8ddf1012990268aa8c87b91fdd210530e0bee9c17e35ee59e519801f7fdc72e5d1b96793ff13654b8eb28c2f1a702b1c5ed694d567e70981c596d9997a3e9133e3b623ea071bbd807c86ee191f02400c53851e567f2ceea1a80506af359cdf36c3cd9963d5cf3d32c64f4f7706c78a90d55f6cf12373fac70e17aa1bb6688710eb3b62ee809de762e5093cb326ed56c57b164fd73023021a4be32ec50bbed23bac420880af3a17a5f3502c95781e6251f88b17f83a02511ca782118f1bb07fe73d50fb70043734df8c82f07e74bb4500179d3c1e33d4075aa4a873eec1a34fd09bb3747825e1d821ce6e4f6b8270b0d1123499ca176ad47613bcd02b4825ad70ec79ecd1dbb496737d5258024898dde00e62b0b594f0e830f0c8475a3638ed4c438e87b6919314f9f2b5f81b2c42a9a0269477a637edc4b06486d41e093c65bb26acc7968320713fcf9551e9c6a855dbf7d3961bda89df32fbfb67bc285a1c14692afb72fbc6587e255627fed4971e8058248a926fd586bfa25aa19dc46b3f51d402f74724abcbbea314d8127c7e92ce0adf8af38b7047b8d5269e145c2d58158d178f0d91ed03a451e3a324b7add7377675ab8a56c5395efdaabaafcb6b1348e984677353e6f77296fe7e75a5afe6d2bd1e26be62ecb84801c20a462c4481762d2be207dce9c49e656133c605b16a1b4ff683983e3ececed23fb6540f0dd89776d525f5c4e07a3f50968f35b0bf92cd65514b1759918e333637d383a1810e28a822fb20151878461ff61cca3c340cb23f9602d03c10d4b05d4f712521921148c3e249358925f87d00a351ef7917b4e817a7a1d2191e6bb026dfb8e2ba08e52f1e43346cbab51a45dd2d8bfdd252ec79a7e9203e97a576a7db467def3ac0b789a6d52015712e89bb0df0879d2868d85e2f2d2c90547dae52500db275842eca910e48f0c43fc33fbd179d39ac9aab6e0f397f8eaca95793d8c196e49b050fd9815994f700ad4d22c07756fce9a755768be74dad0589411935de2dbfd10d200da75b4a4f9e523e763034820afc8c7d02132bde03108293263f84d7ed165e587733d255e4c11fffd52f72725fd0238dcd5ff815fd22c26126aae530a7d01e60c14f4f8e701ab527b6483fe78125c5e4402ff51c721cee92e5dd6db40e28b21532a21facbaf396d163237c5cad61a05e9c0c39d1ce99152687a16104787d87b092e9037f147da8bbc0c6456bbe7a2006742534010f507dca79ce8b59097e0cbbe312f48fc0a3ea84e7a484b266ee766a85849b464d93f872acae4af0ff5c7ea06dfb26a66674fba6e8a9481b49a41bed7becbfa680681834b1a3d7961d69d592fdb403d1566770e0173cbf8fa14956e0539a5a4eeae62cb6a7d1ec9e9d9a36b30b511a615395b470fccab197139818a30224c4f053d35e8d9897141c8a94012f8254f325b8ddec5c0e638c09e2cef80cb4e16bd9aea09b86bb48548b012145ef88932040d7cc59cb0265ee451e243c08d672ddc06de38dc15daf50a8ec1c18b9bbd87e2158ea8fd7a7559fe94d4c6680e304e2d500ca016e68d9f8a25271421b9deca3c8067f59a8f3edf2ad1cd20f15e4c820d703b6ffb6e368e8418bd392994c931c50cb4c858a7db9658e2a468fe06b416265b5e236fbcdaa86cee8ef146fe78628ed35c6aaad5bc455ecc2197ae951940e5bb64454b488a3b12e4b67e84f5a35a1daec5d95a33184f6c30fc553f5d0955a797831aeeed051fc7619471e77f5c5c8e40af7d6b354d039c4fcccc8624360cfc8b4a4a266e581f87b2822e1096741e804ad6a70973a3343822bc4138fdb2cac87fe7a74d0f71473668b3c62f00c622f8d9a25f6970700000000000000f412d53976b5fa199c0f85fcec7a6e8ba629b053f1a26597bdea2c53bc17fb1bca3d6ba561ddc17cee05ad161c20a24b420304b805733d613f8c67c6014a873f3d5f4ec973ebaf0078114db4fc6b607f2f9aefd61f439d80dca94c297081f005b63b26012d39d88b32e36d73b6dd5cc1838aed1d594bb3991f4a073330884eb07c2157f6864bec324ebcc8ce6a49c90cd2541323d95fff147ace0e70a86c6e5d758e37b12b6a280f72bdde00411c803607c4241a1d62b595925503636590b2a4fb910b1577026a83629fc039207b6d355e6a06353daf4a8b0f2e9c412044105df627e8686cc69e223b11c961eb00561144defd02ee6f5b8c0db6a314afe11cb68a66b01974c6dc9e685b013b654d9c7a450f7429cf2a26f6e34ea79895051d71b06b1903274f30fe2fd107b7e7bd477d70bd6324824d39d0e07b0f90e5152c562daddcb258a0faf8a9941868e7463910d35da02696ccb6b16567576bd8397337f20c5a5db9ac04fb302c513845883babdd345d7eebbd107fe0d2cdbbc01d5e40c56660eee85bba1c7317ec59a572a4eb9d1fea5d76dfb3e01f416ae4a0795eadd5f32b17dad816e37d630f9a433a05bbf091de03fdb0f4a5c8d74c0846d0fdec786a2adafd535d82401923eb5279009a2a247f41db21afc647b88c82529b65bec96dc5bd799264d32fc15de8a909946a939701d5c60269d0a631d4d9263ef527a69e5875339d5d2bdd0a2cbd5ccd58127b524bbb114b7a306ea220fe082db0e0db14d828cd72900c77dbcad0bb760e85b2986fc76d98e76a327253327bfb4d23aa1d45629ef71e30e453e19acc470538b95c3b77d84f376a5b485f2f5156392e22a99716dc90e653c1eb6343e647c41a60a2604b001f44c2e65c7f0d5040a405e948d9be5cad3aff848de9e9db6268a043c91e666226bcf9a8dadeeda32db2e14bece95d4925e06bf26cf6665000f98e47c4ca4b5a7859f28cca8c7f1b3340bcf616920c3cd53c2789364b03e6a291817766888425b0ec7ccc484d5474a02a7cbb821b058cc853fe830f86f6cb1ca73812dd919f1c79a7dfa13d310654176609f8ca482c3fee11dc8d843116f5a775fdeccbb975d7e833f081e16d914e0f7154a48668c2be7ccedccf2edb407975630e4ae24a16d818fea03b141dea14cbd404ac9b01dc8d0cba227cfbd33f33d20c9101a71f33d1fa832ce68868907be9fd8f9f6a76b03eb4eda0c55d83c57cedd17e3e96d267410287caa26984f84903b8748579a6879a301e7393ed1467cb98be15c34d6d5c0c957e1a7b941ecefe07b9954e207c76065c1f668ec143c533dd3d863fec137f2a00d746d349d8cf9fc438eb9aa22284f75f73891ede03d20757df1df054957ec94d551cfa56f10b2044e257e7d75470dfe0cc6094b8a1f2c6198cc89ba6df91e57fa87340edf426702aca7d2b3ef46b78335c2442b0d775405ad2569ad7ce46dd3494dab4d98d78e7f393ed6816a5b6c9356b7409a5cdc00b4ea99b7823c744e46e4215945cb02edbdf332d7c109fc4a83ceb2d6198fcc6f3a835679cad70c7dff7dc605450d5fa7e29f9b32f5a1d53d12e2561361346c55dd3fc79e2ea2588fbb8e55c42e55c8cf22ccdac9216be9fdad10efea56c393f6f58896a0df541141f829b50e5e7208f6218bb683208af0c542ac5636e5c2eeb15044072f28a9755c63ec67baeedf0941c6d0c5f2fd702ef1011539932368dbe1664de988efbed22a43b215ae69eeb5312ac5cc966ca12f12c034ddaaae340cd6e89e42621053db7969cd9753a72a6451f78fbd8b4840329b6c6eb9bdf365444276ab81251f6894fe3d125e8eecf30f3a98116c96d2de30a1b195c1d10ffdc731b78740a53f09bcb66b6b237bc56f9426135ca651d9329540c386dc5251b537c4b8317460b0dafbc3d4f1b8d6a939e51de59b22d32e5daafb5f0d469e58567cba1f327e67ee8d0f53b041fa643a4a594d4cf28a0004aace404ca95b58a1e26d601563b188fdd2c97b8d8714913c3564d0a445d35060ed2ce20daa4174cb92653626fa9bd10513c8006d757acecd7eda9d41393dfdd683ad50ab4de8cd832b26c82edeb4af5013f43f297dbf502b62fd6c2ced9641235838853c2aeb447fa06b6ecd1c11f17d3261e87aa1ec86ec8b23fd4281f33469d7c4414b60268367d38d9235dfe3ac4c7032e298d0cbee4b705f4085f5653b4637a80ae575b44c6f1a2374b899e061d03abad5770355673020afdb8fecf5be2a8617aab331646f05d49bf5beefd650bfd240ed3b5abadb21941c4a615004284ff7927ef9a745e3d4208dfabb0b04d04002bb7e449ca884373fe4ebe35e18ffd249e992ba779284b1064b1e27e6aa0c4c88e915246e029113b4d01b53583b8282ea1d5d4a305d3e20f894af640abf9e376d6b1c6fd3bf86821b4a57c5c22d8172ea40daf2b398dc0329d4b7dd08c75c902f0368def10217234bea599509a7e61b4a11915009680613bf69f2f4b38e7595449a20aee13949c688a69cfa73af328c7df7a494d0e8d249cb3c843149b11bdddf34282db31b156261254472fbc2e12c7b7133f7d273ef472761b58e7f8e54ea2861ebccfb141e3b245b5e4a75204d12ff5d7b0a44ae039b3cf79869d24f1602060f81785a851b996a3693856c6b2e90f27dbd4be518ae3065e692e5f2842380e4f5cf91582632e6d36b260c27a1e7ae80b47d14067db8720e619c7323f358098ef054fddde357f4453c6e7ace38833ed1c9bc9bf0c054564b79885cc7c8fc5d7ebde25f0307067816067a4a96ddedfbd268ca19a67207ecfec5598a442a1c0e823e012ced27c3266c6721aa5718dc076e7f50023a49a40980bc0fcd568295c8d4c59f1874aa944b88901e38c803ef52c226a7daf055f4ec3bbecd878654a456448e552a0fafa64124688dbd7f3787af8b3fdf661680ae309939542337ab22f510ba9ab1a7229f5244938e9324b0b1ad22ad9e16b84f93cea693186a5c76ad7f74e7c82ce6cb9a9ecf3a4a1a6d06a8fdd6474ae1aeddfcef270c6c637918b7aed3d5068e17d3642e9fa66c985b2dca5b38ffdb3545a4954d0a5813bfec99721259562b80696dadd921e9f18978d21dee1129a386623cf93c804aeb4e511ee8658fcef51746dbe1f87285eae850f008f3effdb78994e6eb370600c1855f672de0b750ad56c22aa937c1eaa8a7a333fc55f814e878bf71e8d9717a8f0854635554f07393ce04cb6d58e9ac0f5808d9158fd6320fdf75b2db9cd0380418e8664b5ccdde967b8a76e8002683849fa507d78e971f7118b2eba2c025dc359684cbd7b6b2e41ed0783da3fa2ae2de5dcb2db67d06a21aa419bd465ecc378842219a55f647535c7f4002061c65338d9c098ef31b77297c9905b91555cb436b83cb88e48821fe750dfcb4305e146b7f68265a35331017dcd902071a8b904534dc26a017f2bd14bcc65963efc9a8689298e039ac717fd460703e7d08ead0ca43c3c88ee423ed92a20e0b7dd6636313d057b97fbfead33d0aea2ff50c57df057bdd6c7470fde9bf9f1fbfc7ddcea22c1ce9273705be952464b3d48aacb7a96e5ddcab0b4d7b564d12b66c07663e05dff55d40d7a2371ead0f948e6921b8d271f8c710f526844db88102e68c3ae1a35a729af6d6521dc587f83ced8263d6d5801dc8b9c11659cca84c6e4076021f2747769cbf50d3362602f6491a1c3734a62aa024e060e69b32a5ca8f5ebdf8deeeda60405610fd182cef2e4cd534ee31db32bb13f0bdd53799dc438c38ac0a49be58f0dacb53286fb7f1648b8eaaf4c997689eb703594f55fdbac9840b91696f1f2ee8599cd84d3a904b3b7515fd22866cc0c2ef1f8db911593801474bc90bc8151ad4b0da717cba6b388440dbf85cfd6fdf874960712e93bfe9cb22bd84139c0e3badc70b36dfb9edb4f4d4b45514e826c5dc0972a9596f14c0b4de118253de91aaf7c6bec8f95ea509c374f35543f678f12e467c394d21f613b446607051943ebd5a49b729e91681f54215f9d1c330e264efd1f214b7196e72eeca6796ca35b17e27c10cb6171e7eb520fbe0394f7399b65fcb0014a5c3b9c9c10b14877520d0a572b8fdf5e0bccd328540422a4ad906e2e358a6916dbae6b36aa8c3bd4514c56fc2602bc84c7c571af4f667eb7c3015f3ff85a6a309db43c6c1dcc922951fbc65c659d4b9c65608086ee33151e02596976109e3e2de848dfcca7b771c1997b9fa6ccc7e0299303ad5d11700611ed70b809ea039b00", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x200000000009, {0xfd, 0xa, 0x0, {0x1, 0x0, 0xbdd7, 0x400, 0x10000, 0x80000000, 0x9d1e, 0x4, 0x8, 0x2000, 0x0, 0x0, 0x0, 0xdf3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee00) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r13, &(0x7f00000001c0), 0x0}, 0x20) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r14, 0x6, 0x3, 0x0, 0xffffffffffffffff) 1m35.248583992s ago: executing program 1 (id=1328): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 1m35.175794978s ago: executing program 1 (id=1329): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) recvfrom$inet(r0, &(0x7f00000001c0)=""/77, 0x4d, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0x4) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0xa4000061) copy_file_range(r5, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 1m35.039765759s ago: executing program 1 (id=1333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="1e0000008100000004000000ff03000000000400", @ANYRES32, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000100000001000000020000000000000000000023f1000000"], 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, 0x0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_unlock', 0x242, 0x2a1) io_setup(0x197, &(0x7f0000000440)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x8402, 0x33) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0xfffffc98}]) (fail_nth: 3) 1m34.935209458s ago: executing program 1 (id=1336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) getpid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r3, 0x3f, 0x7, 0x2) 1m33.765362671s ago: executing program 32 (id=1336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) getpid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r3, 0x3f, 0x7, 0x2) 1m6.868575748s ago: executing program 5 (id=1475): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x3c16, 0x400001, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (fail_nth: 5) 1m5.323804452s ago: executing program 5 (id=1480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000023c0)=0x2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m3.342384221s ago: executing program 5 (id=1491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = signalfd(r2, &(0x7f0000000100)={[0x3]}, 0x8) r5 = getpid() syz_pidfd_open(r5, 0x0) sendmsg$AUDIT_SET(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x320, 0x70bd25, 0x25dfdbfb, {0x25, 0x1, 0x3, r5, 0x62, 0x8, 0xffffffff, 0x0, 0x0, 0x400, 0x8}, ["", "", ""]}, 0x3c}}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000024c0)=[{{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x1, 0x3, 0x0, {0xa, 0x4e20, 0xa91215ed, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)="c092f6c45b823473374c78571176ed8c748e572a7b7ff5b43ceb0a37916a6a", 0x1f}, {&(0x7f00000003c0)="6373f35ad1421189e617364d90d2c4bdda2ce3626ff029dd38e0eb1da6c5fbc852c824835e173436539ff0", 0x2b}], 0x2, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0x60}}, {{&(0x7f0000000600)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)="501cad2cf7360648c7e969995564c9c7faaaea3f625882769b8f9c6f9221928e0e1dd5d4cd95a75ccf9fb596c6f2051819cd0d7af1709db4d0b8b513a3f2994e1d5b105a10cda19e71764314bea1805f1134d0fc8e26d69f5d7e2ebefdf8", 0x5e}, {&(0x7f0000000700)="ccfb7df8831c50b9de14a83a0bc92bb5a994df129186ed5c65487ecf2d39d1f8634150a21fcc057fbb261badcb476e267c61b4b9e42554a4913f5ab0bfb9f1fa5ea28dbd6779e9e1829e366e107a07dfb1a27d921f1b9df324d5a25bae8e918d9f23626993af9e5e26e6994fb418da56d415070926edecbd02c616f0576b4fcab5a4f0192be4d68e2b15d5239131f306f3499f1e77247f81ba1fd8e90f0a51ea0f7617443adbf46e169f5ce780f22462099a59a2d1afe60530eb678f08542ade3fe143e71bdd69f83257cab65243fe2b7f670997ddb9f5362219f3ba6a417cf4d583a7ac21305c5001b056e86d848f4c3b19cd1dac9271", 0xf7}, {&(0x7f0000000580)="52f5d03d78c5c60285c757ab7cd0cfe4644fce0d231724bead894c552b04ba", 0x1f}, {&(0x7f0000000800)="b4c0c646a926bdb6010fc84f153135a63f91a243c2454b6b0dbcafb814dc95f4e522a4f6a6d328e18095f96f963e5e7b37ed85ff3672c5702122d93aed96d26937502c45f611b31850a64e6f7827b769aa2956fbc170702ddf0121ca", 0x5c}], 0x4}}, {{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, 0x2}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000940)="21c61bdda5a0722eb8a695cad8ce1dfe3e84b30ac15650e2f5ad79aa2b2094380145c3a817ff98cf9afa01cbd7aad05d42f4b8ff67cc7738ce556ec5a63c8a7d7e2f917354ef7604f1fdd3cd0652e0e5d07d9e55b969e058ad59eed930e1ae39fa2fcecb0a2adc4241aa8ea628ccd5acf967110423f45a5ae82774b6bf983823b00565dd4ace470b6d3f7786e15d1c41edf98c4231a924caba5159b461cdda935324182d53b5df800528d4273f8eaffe531d55180cab2d25fc289b37754533d8c7a2624eb81ff2", 0xc7}, {&(0x7f0000000a40)="3b577532e551fab36b488c71dbb74e95d0dd336205d5d9d623459e3e03b3b7f7f7e4a27c22b93c11128ffae480dcf0cb7388e7fb65867b292121f07d8b1121dd0e090354881669af8483578f81f5cdef15a645df", 0x54}, {&(0x7f0000000ac0)="bc16d3265f4a74b897092738bdae335c64af5757b55ebfb6344ab6e3b100a57249fedfed538a7affe446c530f6063f226e49bd572b7da21ac72164fffa59d32f709c167939eb9a788542fde382cbbdb0117309a6fe98f2e19e910f994d2fde475309e2b309fa8b454fb77d0be9767704f3ed81bbb3c67a6338f6cac9e0889ba8f79069fc26e046e3ad0bc3f6dec1af17fad0395eb005e1305b1142accfdaea1821", 0xa1}, {&(0x7f0000000b80)="7d2abb444e1e6c75ee0bfadb4c6abaf934f0c25d02a30a6499490a10a73db79db776964a11f2849ef9a9affb968c2454668d18e5ec9e377645bfe5fe887c1f4ba99c94b986c059ab8bf10b59a40aa1b7eaed214f805845f78954bf892f1fa5a631c96f8b9f594cf67225a4e054d4677a75cec39c7001b4518eb86fa4cc928e58787f0e8573d3d6f4edcb750cb01527c66d360cd8482faa54e8be28053d4cef5dca593549af92f9331df998", 0xab}, {&(0x7f0000000c40)="5e6dca1ce148f12f6e1d77bbcd0374ba8b083fcd33ece36968ba69aa72d2ff5371af2b42c8e0b4155eb99566f4a79667417031b7b8773606fd1ca9c65819474c4ad3dc7f8da0d1863ca5a417bbdee5c6da643af2478bbf02390f817cd45229255df605d712e3b905dd04ad12bb004029b488413f5e02d5898567", 0x7a}], 0x5, &(0x7f0000000d40)=[@txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0xd9}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}], 0x60}}, {{&(0x7f0000000e00)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e22, @loopback}, 0x0, 0x2, 0x3, 0x2}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e80)="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", 0xff}], 0x1, &(0x7f0000000fc0)=[@timestamping={{0x14, 0x1, 0x25, 0x148cbc7b}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0x48}}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001040)="59477dfed6a8350f6d0ef69a52a746c265ceebaacf89f19274ced8422c48bc539c8857f72f66d5484f4bc67eab4c4afe86cdef29d631168c7adb4579066af6e33b4fe3c440238ac07584f73b0d8e3ae5301ccdd1f7a5adfb467f8adcd1ce2e13e7dac6afe0b288c6231d811292ce23f00ed4d84313cb90a0a0c0e94251ede17a3d653b87ddf7aca73019b84f85880531b132c27bccba05aab971d177f9f0a62d70cdae162e32171f0833d89df6bcfc2c4936ca7addd9c313cea93863300d6149ce0789bd7eb25c8428a0d5f08c0c412a7463845a9a4d51de0819ceeeb8c5e13766d97f2eccff2e36116e96179ffcbc42", 0xf0}, {&(0x7f0000001140)="e11e0dd8e6bd00d7f04b3293135580575ae80223bfc6d8c8863790f22d045b9c1d88a22105a82a63b4d0f286a97b138ade6d9133541eea59af10a42596a20f7ccfa346e8bd6054a6420a5a4991fe01d1899c7baf3f12356f9a1d37df3fd9bd063f50b3fcdf314e7df3f5dee8af2dd04a9ed79cf82c532f66dc0ed0ab2d3bbf6487535e9248ed48", 0x87}, {&(0x7f0000001200)="6baf0f8a63438fe5d183cf75191302aa7cb98c926f1806991e5eab2b9850529ca043144e6d03a1bb91f4abeb66984bbd4db07bb6d3be02d59b1febf188cc74a3ed32792212eb284061983b0be18c07cdef7dc3109c5a792a57af89580dbda48c134ba1ed9cbe9033023de1fb6ab305ff7f40064f15c64014344ee9d9a967356a05ecd9c6277d8dc8b34ee14c9af43fac7d46bcb74d24a47c7ae338d6b52bc546e53003893998f2698e975719900623e8f59c5fe87f2b00ca63449f15ac04eeeb78660c8199c028e506d301f08a4b875d90b3f5d59409f97875af464d848e3a660727388656bcdce786c2", 0xea}, {&(0x7f0000001300)="e9d09a3ca14e7d197a1928c82f6cfa2b729325cb2348b593b694ee28a7e193b3c72623346a35dd", 0x27}, {&(0x7f0000001340)="c0fb5dfdabba92196da160f4db7533592a23dfd32f22d35de1", 0x19}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="2db4915f06f190aa1894a3299c7c824d", 0x10}], 0x7, &(0x7f0000002440)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0xe}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}], 0x60}}], 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x73, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) 1m3.164435525s ago: executing program 5 (id=1494): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r5, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 1m3.138428927s ago: executing program 5 (id=1495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000023c0)=0x2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000040)="cfdec1a6231a02277ac8a9ceaed723ddb576be882341bc81553c717dc2b5250a76e406b836c1904eb8", 0x29}, {&(0x7f00000004c0)="4d6795970a8bdf952456e244fa1dd9a7460e16b18441839ea2838977f1f7a8f48ed672a39f0b84479c23015c172f334216ae2ac6022d84268c001bd1b71dc0f18a882532198d05e7fde0ad9ea511efc0a5b053cf4677f77eb66fad09165c27d1e0b0f476593c86f54af0e6ae424fd60784d0b2c5f7899a04b3128bda08b8129c196871677852256df755f7ecec1b3d11b0e438ffa12789dd24efbb0dd474b01867f6aab5", 0xb9}, {&(0x7f0000000280)="0797aa9829005daac852a2ec7185230f723df7cbe605f84939d82cb77d5fd5fcf4aaf82b7d", 0x25}, {&(0x7f0000000580)="ee591df184cbd7a14eab4a0f69843e427940a940df4e90bbaf50099050231199f8816fa9addd97eb5f2a93f4c2258c451c352e2c80be9f825740cca60b52c20fcbebe98ae79678f3511df838a9aa8a6ef611e0d872c9942ca5a5466823db82653345dc70c04bdd78b2fb6fe36f6a184fa1a4bf8da2b6cd6494e3154cb8de050e75cd4c2853e98fee08d370a1e090154738e33d33765c5c2efed535381ea3da6c01d99e3358e5134d235e1e58b205f19daece47cea7f6824e4b439fa05b1b7353b4f5e6171770424bfeaa2bcf3cb7c15943b8e783961e3c96d57ab9e7ac08b520a007b585f8617f30188035", 0xeb}], 0x4) 1m3.070974473s ago: executing program 5 (id=1496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000023c0)=0x2, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m2.928770924s ago: executing program 33 (id=1496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000023c0)=0x2, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m1.10939922s ago: executing program 6 (id=1497): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20014015}, 0x0) 1m0.891279517s ago: executing program 6 (id=1509): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000001440)={0x84, &(0x7f00000001c0)={0x40, 0x0, 0x2, "0600"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m0.566799663s ago: executing program 3 (id=1512): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x200000000248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='cpuacct'}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a2"], 0x0}, 0x0) 57.723194581s ago: executing program 6 (id=1525): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) 57.557858835s ago: executing program 3 (id=1528): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfe}}]}}}]}, 0x5c}}, 0x0) (fail_nth: 5) 56.190304154s ago: executing program 6 (id=1533): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x4) copy_file_range(0xffffffffffffffff, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 56.097624742s ago: executing program 6 (id=1534): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x30bd26, 0x25dfdbfd, {0x2, 0x8, 0x1, 0xfe, r1}}, 0x18}, 0x1, 0x0, 0x0, 0x20014015}, 0x0) 56.082153043s ago: executing program 6 (id=1536): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x802, 0x1) connect$inet(r1, &(0x7f0000002780)={0x2, 0x4e24, @loopback}, 0x10) write(r1, &(0x7f0000000440)="08008edf773c8000", 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x7, {0x0, 0x0, 0x0, r3, 0x44198, 0x188f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x40000c0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x11, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) read(r1, &(0x7f0000000100)=""/39, 0x27) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r6) r7 = accept(0xffffffffffffffff, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000000)=0x80) readahead(r0, 0xfd40, 0x9) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r6}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 55.99384546s ago: executing program 34 (id=1536): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x802, 0x1) connect$inet(r1, &(0x7f0000002780)={0x2, 0x4e24, @loopback}, 0x10) write(r1, &(0x7f0000000440)="08008edf773c8000", 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x7, {0x0, 0x0, 0x0, r3, 0x44198, 0x188f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x40000c0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x11, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) read(r1, &(0x7f0000000100)=""/39, 0x27) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r6) r7 = accept(0xffffffffffffffff, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000000)=0x80) readahead(r0, 0xfd40, 0x9) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r6}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 55.991633591s ago: executing program 3 (id=1539): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x1, 0x0) fcntl$setpipe(r4, 0x408, 0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x64000600) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000040)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00040000000000020000000000e5b99d3200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000a02410a82c5d8e00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000d6090000760000007baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(r1, 0x26, &(0x7f0000000000)) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000006c0)=@newae={0x1ac, 0x1e, 0x1, 0x70bd28, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0xa, 0xc1}, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x5, 0x3503}, [@algo_auth_trunc={0x5b, 0x14, {{'blake2s-224\x00'}, 0x78, 0xc0, "4345c6ddef25ad22c6f75adf084d75"}}, @etimer_thresh={0x8, 0xc, 0xfffffff1}, @algo_comp={0xf9, 0x3, {{'deflate\x00'}, 0x588, "0c4ae1665f5f68a3752d416953a9a4f2c5bf75e52f8c4cb62eb71caac3407065b02414d5a862f1bc16069c29fee836b89c5af516e1ec5465a6afacd6254d748e46767aa5b17619b2f5ecfa81802fc9da086a88a9ac8503a5c3cd5880dc8fc18c3ca7fdfb35797907da537e03754bbc3c80c355d1df67710e951c148792bb7e55cba2dfe005a3de37e193551b51fd2cc2180fee3fc36560b4dac9a4e7cc69f5e3fb2bb84e7d952249280c36bda3ebb6f8e7"}}, @mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0x1ac}}, 0x4c080) socket$inet6(0x10, 0x3, 0x0) 55.088948563s ago: executing program 3 (id=1544): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r4, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 54.933653015s ago: executing program 3 (id=1546): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x30bd26, 0x25dfdbfd, {0x2, 0x8, 0x1, 0xfe, r1}}, 0x18}, 0x1, 0x0, 0x0, 0x20014015}, 0x0) 54.00409019s ago: executing program 3 (id=1548): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) (fail_nth: 5) 53.883961649s ago: executing program 35 (id=1548): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) (fail_nth: 5) 21.989054537s ago: executing program 2 (id=1684): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x650ce4b086bd440f) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000100)) 20.979123098s ago: executing program 2 (id=1687): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) rename(&(0x7f0000000040)='./bus\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x192, 0x4) sendto$packet(r4, 0x0, 0x0, 0x1, 0x0, 0x0) recvfrom$packet(r4, 0x0, 0x0, 0x2000, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x79, 0x0, 0x0, 0x4c}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x69) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0) 19.727571448s ago: executing program 2 (id=1691): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) rename(&(0x7f0000000040)='./bus\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x192, 0x4) sendto$packet(r4, 0x0, 0x0, 0x1, 0x0, 0x0) recvfrom$packet(r4, 0x0, 0x0, 0x2000, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x79, 0x0, 0x0, 0x4c}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x69) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0) 18.754467726s ago: executing program 2 (id=1697): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) ioctl$TIOCGSOFTCAR(r0, 0x4b46, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r7, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3008093, 0x0) 17.771915125s ago: executing program 2 (id=1701): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x650ce4b086bd440f) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d3, &(0x7f0000000100)) 17.407165874s ago: executing program 2 (id=1702): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1d3, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0100000004000000e27f"], 0x48) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) 17.056715433s ago: executing program 36 (id=1702): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1d3, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0100000004000000e27f"], 0x48) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) 10.703633112s ago: executing program 9 (id=1730): r0 = syz_io_uring_setup(0x126e, &(0x7f00000006c0)={0x0, 0x72de}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="f20f8b23192601c3c4235d6b150b0000008a0f015e00400ff401b666460b35b9fd0200000f3266baa000ad450f00160f07", 0x31}], 0x1, 0x80, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) 6.921921535s ago: executing program 9 (id=1746): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x20, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='attr/keycreate\x00') preadv(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)=""/101, 0x65}], 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 6.879485938s ago: executing program 4 (id=1749): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000080000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 6.86711808s ago: executing program 9 (id=1750): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4], [0x1, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_SET_PROPBIT(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000005c0)={{}, 0x0, 0xfffd, 0xecd}, 0xfffffedf) openat$random(0xffffffffffffff9c, 0x0, 0x40800, 0x0) io_uring_setup(0x5a23, &(0x7f0000001440)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) close(r0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) getpeername$inet(r0, &(0x7f0000001580)={0x2, 0x0, @empty}, &(0x7f00000015c0)=0x10) syz_read_part_table(0x104c, &(0x7f00000002c0)="$eJzsz7GpAkEUhtF/HrtPQZApQWOrGFNNjWzCEgRrMdAeRVkNNDEUFM7JhrnfhRu+yDXJ+N3n5PWxuuxGyX42z6H93aMyhK3muFxkWpPtMLYuObX/lNqne4T9c0eXzflztwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA77gFAAD///krCKU=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c00070905", @ANYRES16=r5], 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001480)={'\x00', 0x4, 0x0, 0x0, 0x7, 0xf}) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) 6.434516644s ago: executing program 8 (id=1755): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x27) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={0x0, 0x800e, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 6.434307684s ago: executing program 4 (id=1756): r0 = syz_io_uring_setup(0x126e, &(0x7f00000006c0)={0x0, 0x72de}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="f20f8b23192601c3c4235d6b150b0000008a0f015e00400ff401b666460b35b9fd0200000f3266baa000ad450f00160f07", 0x31}], 0x1, 0x80, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) 6.35945711s ago: executing program 8 (id=1758): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x445bd}, 0x94) (async) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r1, &(0x7f0000000180)='1\x00', 0x2) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001340)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], 0x0}, 0x94) (async, rerun: 64) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x8, 0x1, 0x0, 0x0, 0x280}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffff9, 0x80000, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) munmap(&(0x7f0000779000/0x1000)=nil, 0x1000) 5.11937485s ago: executing program 7 (id=1759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000023c0)=0x2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.11906737s ago: executing program 8 (id=1760): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r1, &(0x7f00000024c0)={@void, @val={0x0, 0x3, 0x8, 0x6ed, 0x19, 0xc}, @ipv4=@gre={{0x7, 0x4, 0x1, 0x14, 0xfc0, 0x66, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x8, @multicast1, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4, 0x45, 0x3, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x28, 0x1, 0x1, 0x0, 0x2, 0x8}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x5, 0x1, 0x0, 0x1, 0x3, 0x1}, 0x2, {0x2, 0x2, 0x1, 0x6, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "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"}}}}, 0xfca) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(r5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x0) 5.11610312s ago: executing program 0 (id=1761): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x68, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x8, "1d6ace8f8ca9100083faa1f1a6db56fa1ede4bc5398bd6606aaa671ffdd8e79d60cde5302fa555d0f9e0b2fa0d62fffea7fab292bbcd05812814821553a3"}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) getsockopt(0xffffffffffffffff, 0x6, 0x10000, &(0x7f0000000880)=""/170, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000000)='./bus\x00') ftruncate(0xffffffffffffffff, 0xc17a) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f00000002c0)=ANY=[], 0x76) 4.202466473s ago: executing program 7 (id=1762): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000020007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 3.819554434s ago: executing program 7 (id=1763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73"], 0x56) 3.463137253s ago: executing program 0 (id=1764): r0 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='dax\x00', &(0x7f0000000140)='\x00\x00\x00\x00\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000140003800400040008e30200fd7f00000400050000000000140002008a657468305f746f5f626f6e64000000"], 0x40}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000400)=0xa) readv(r5, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) epoll_create1(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r7, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) statfs(&(0x7f0000000040)='./file0\x00', 0x0) 3.406601917s ago: executing program 0 (id=1765): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$eJzs3EFrE08Yx/Hn37RNmtImfxBBQX3Qi16WNr4ADdKCGFBqU9SDsLUbDVmTshsiEbG5iFdfR/HoTVDfQC/ixbu3IgheehBXupttk5rWbU2a2H4/UGa2M7/OLN2WZwud9TuvHpcKrlEwqzKUUBkSaciGSHqz1/Rfsx3y+6PSqiGXxr9/PnP77r0b2VxuZk51Njt/OaOqk+fePXn2+vyH6vjCm8m3cVlL31//lvmydnLt1PrP+UdFV4uulitVNXWxUqmai7alS0W3ZKjesi3TtbRYdi2nbbxgV5aX62qWlyaSy47lumqW61qy6lqtaNWpq/nQLJbVMAydSMrxNhxhTn51bs7M7jrsxbq6I3RfvP1yrNMcx8k2Og/mV3u1LwAAMLj2rv+DWn/3+j+3ELRdrv9FqP97pNF29Yf6H0eC42TNZPPntx31PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t5npcK2/AjLiIJEQmv+71P9MYBv/9X+rRddFnLP+4lROyXtXwtH7TBeLYgRbHFkilJyQ//eWgK+rPXczNT6htpfsnN/EotH/PPJvDzoXSn/Nn/p4O8yvvNXK2ZH5Fk6/oZScmJzutntvPhcQgrtfyoXLzQkjckJR8fSEVsWfKf6+3882nVazdzO9Yf8+ftJsrpGgAAAAAADApDt6Tb33+Dsx8Nf0JCfh8P8vv4+8CO9+thOc1LNAAAAAAAh8KtPy2Ztm05B+jEReQv4ke1E5OB2MaOzlUROfRFRaTRn1tOiEjwGT1I/OtWPFLKizBnWEQG4kmI2On3byYAAAAA3bZd9O8j9OlFD3cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxE/U8sHB+yVuRtvPtwoE94i3LxQ79BgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAB8isAAP//0KwZYw==") r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x1, 0xa, 0x9, 0x1, {0x5, 0x17d, 0x4, 0x0, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x20000000, 0xee00, 0x0, 0x3ff, 0x8001}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f20) 2.799613935s ago: executing program 4 (id=1766): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x10000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4090) sendmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000001c0)="7a42ae0f459476e00b53f5bf92487e23a88c54f59e1c77d6eb0c75864b95e18d2fd527dd", 0x24}], 0x1}, 0x800) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4140aecd, &(0x7f0000000340)=ANY=[@ANYBLOB="76be7dcd8da0f49fa4cae9f1a5599f436a793939d530ebdd4dc8b3703f17c4093d9af880a00e76ae4423519ff2dc5b3e87e5d12a3a8a61f83bdfc866847b02538c972434d0bbe2004d484cff5544c8ff398d0f9ce5021d729060514bafe86b70418824fd4ed6751cd5f88d1a495f11724cb3f7"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r5], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) fsetxattr$security_selinux(r7, &(0x7f0000000100), 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x64000600) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x3d, 0x2}) 2.068652184s ago: executing program 9 (id=1767): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x74, 0x40000}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x0, 0x10, 0xd, 0x6, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x68, 0x0, 0x1, 0x0, 0x0, @empty, @broadcast, {[@end]}}}}}) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d7, &(0x7f0000000840)="$eJzslj3PEkEQx/+7dznAaEwsbSwkUQuPu0ONDYk0VhYmvhALE4mcBDklAQohMegnsLezsPcLmGjrhzBoow1W2tic2ZfjVsIBD6/FM7/kmfvvPbtzszObWUAQxLHl+7c/4/h35UcewEkUkdPvf1rpHG7M/5r/9fLzrZu1Nw/ff8mN3cI8n3G8+vdtAJ+qFvrTtf+vLurnXfCpvgeOS1rXwOBq/Qgc97UOwfBA66eG7oj5rvukFYXu407UEMITxhcmEKY8G9/kNUPDiI8Z/+8Nhu16FIXdHYpl+ZtUOSpGfGa9XKhoPSN/Pjh8rctguKP1deSS3KiUGPs/a6f+rYX7d7DrjIhQjrDqzKnMUjkA1gsDYNuqPV7pI7vLM5QhLEiRVHRLnq097UIc9CVzYO89q2yzZK5Ti4831JrkTTxSYznndIbDeLTiJxysk420P8XvGC4Y/Um1krfyqhElLPUGw8utZ/Vm2AyfB0H5mnfF864GJdmIlF3Q/wqyP51I/c+9kwQOc/Ci3u93fWWn40DZeR2Xy/7HcfG8GoviOjN+84Zm+s+WT3kU2h8yoycIgjgc58D+xho7Efo2gfFb9/YBYyQIgiAIgiAIgiAIYjP+BQAA//++S0Wu") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 2.065459444s ago: executing program 0 (id=1768): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x27) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={0x0, 0x800e, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.99523487s ago: executing program 0 (id=1769): r0 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f0000000040), 0x1004) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYRES16=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket(0x1a, 0x5, 0xaf6) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0}) 1.449824814s ago: executing program 9 (id=1770): r0 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) fsmount(r4, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (fail_nth: 5) openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) 1.441874524s ago: executing program 4 (id=1771): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r1, &(0x7f0000032140)=""/102344, 0x18fc8, 0x56) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x101}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, r0, 0x6, 0x0, 0xffffffffffffff7d}, 0x94) 1.428506546s ago: executing program 4 (id=1772): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x1, 0x8080000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r7, 0x20, 0x0, 0x8000) 1.419255516s ago: executing program 7 (id=1773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000023c0)=0x2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.359124831s ago: executing program 8 (id=1774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(r0, &(0x7f0000000300)='coredump_filter\x00') ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000400)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000180)="d1f7624a6b0e53c3", 0x8}]) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000340)="7e9adf65e9c6bafa", 0x8}], 0x1) 623.31707ms ago: executing program 9 (id=1775): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x83e00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, 0x0, 0x7, 0x0, 0x4}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1dec, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getxattr(0x0, 0x0, 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xeb, &(0x7f0000000140)=""/235}, 0x94) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x83e00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, 0x0, 0x7, 0x0, 0x4}, 0x14}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) getpid() (async) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1dec, &(0x7f0000000040)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) getxattr(0x0, 0x0, 0x0, 0x0) (async) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xeb, &(0x7f0000000140)=""/235}, 0x94) (async) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) (async) 589.706853ms ago: executing program 8 (id=1776): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYBLOB="0000000000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x10000, 0x4) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0xdbdec995cd06bd41) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="8506000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 518.771119ms ago: executing program 0 (id=1777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000023c0)=0x2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 465.103443ms ago: executing program 8 (id=1778): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4], [0x1, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_SET_PROPBIT(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000005c0)={{}, 0x0, 0xfffd, 0xecd}, 0xfffffedf) openat$random(0xffffffffffffff9c, 0x0, 0x40800, 0x0) io_uring_setup(0x5a23, &(0x7f0000001440)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) close(r0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) getpeername$inet(r0, &(0x7f0000001580)={0x2, 0x0, @empty}, &(0x7f00000015c0)=0x10) syz_read_part_table(0x104c, &(0x7f00000002c0)="$eJzsz7GpAkEUhtF/HrtPQZApQWOrGFNNjWzCEgRrMdAeRVkNNDEUFM7JhrnfhRu+yDXJ+N3n5PWxuuxGyX42z6H93aMyhK3muFxkWpPtMLYuObX/lNqne4T9c0eXzflztwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA77gFAAD///krCKU=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c00070905", @ANYRES16=r5], 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001480)={'\x00', 0x4, 0x0, 0x0, 0x7, 0xf}) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) 176.074546ms ago: executing program 7 (id=1779): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x27) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={0x0, 0x800e, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 16.744679ms ago: executing program 7 (id=1780): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) (fail_nth: 5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 0s ago: executing program 4 (id=1781): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1a91c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x7}}]}, 0x38}}, 0x44080) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x10}]}}]}, 0x48}}, 0x4000) kernel console output (not intermixed with test programs): +0x1f0/0x2c0 [ 390.917650][ T5475] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 390.923113][ T5475] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 390.929190][ T5475] x64_sys_call+0x171/0x9a0 [ 390.933702][ T5475] do_syscall_64+0x4c/0xa0 [ 390.938131][ T5475] ? clear_bhb_loop+0x30/0x80 [ 390.942814][ T5475] ? clear_bhb_loop+0x30/0x80 [ 390.947523][ T5475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.953438][ T5475] RIP: 0033:0x7faa83f8ebe9 [ 390.957855][ T5475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.977470][ T5475] RSP: 002b:00007faa84e38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.985905][ T5475] RAX: ffffffffffffffda RBX: 00007faa841b5fa0 RCX: 00007faa83f8ebe9 [ 390.993884][ T5475] RDX: 000000000004c080 RSI: 0000200000000100 RDI: 0000000000000003 [ 391.001876][ T5475] RBP: 00007faa84e38090 R08: 0000000000000000 R09: 0000000000000000 [ 391.009850][ T5475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.017834][ T5475] R13: 00007faa841b6038 R14: 00007faa841b5fa0 R15: 00007fffe2dbcb48 [ 391.025814][ T5475] [ 391.074284][ T4697] usb 1-1: Using ep0 maxpacket: 32 [ 391.085223][ T4697] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.140214][ T4697] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x9 has invalid wMaxPacketSize 0 [ 391.152053][ T4697] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 391.165410][ T4697] usb 1-1: config 0 interface 0 has no altsetting 0 [ 391.172046][ T4697] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 391.181669][ T4697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.272556][ T5481] bridge25: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 391.528798][ T554] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 391.602043][ T554] usb 5-1: Using ep0 maxpacket: 16 [ 391.602144][ T4697] usb 1-1: config 0 descriptor?? [ 391.613238][ T554] usb 5-1: no configurations [ 391.618072][ T554] usb 5-1: can't read configurations, error -22 [ 391.633622][ T5485] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 391.784361][ T554] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 391.814806][ T554] usb 5-1: Using ep0 maxpacket: 16 [ 391.821545][ T4697] usbhid 1-1:0.0: can't add hid device: -71 [ 391.821839][ T554] usb 5-1: no configurations [ 391.834963][ T554] usb 5-1: can't read configurations, error -22 [ 391.837155][ T4697] usbhid: probe of 1-1:0.0 failed with error -71 [ 391.849254][ T554] usb usb5-port1: unable to enumerate USB device [ 392.024916][ T4697] usb 1-1: USB disconnect, device number 36 [ 393.134079][ T5490] bridge33: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 393.393427][ T5495] syz.5.1408[5495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.393509][ T5495] syz.5.1408[5495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.482706][ T5504] input: syz1 as /devices/virtual/input/input26 [ 393.565321][ T28] audit: type=1400 audit(2000000052.050:1874): avc: denied { load_policy } for pid=5508 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 393.591420][ T5509] SELinux: failed to load policy [ 393.604678][ T28] audit: type=1400 audit(2000000052.080:1875): avc: denied { listen } for pid=5508 comm="syz.5.1412" path="/13/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 394.595247][ T5525] 9pnet_fd: Insufficient options for proto=fd [ 394.675647][ T5527] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.682935][ T5527] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.878360][ T5539] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 394.899832][ T5538] loop5: detected capacity change from 0 to 512 [ 394.963397][ T5538] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 394.972643][ T5538] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.648796][ T5249] EXT4-fs (loop5): unmounting filesystem. [ 395.686078][ T28] audit: type=1400 audit(2000000054.170:1876): avc: denied { mount } for pid=5549 comm="syz.0.1423" name="/" dev="pstore" ino=14846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 395.792503][ T5557] FAULT_INJECTION: forcing a failure. [ 395.792503][ T5557] name failslab, interval 1, probability 0, space 0, times 0 [ 395.805200][ T5557] CPU: 0 PID: 5557 Comm: syz.5.1425 Not tainted syzkaller #0 [ 395.812597][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.822777][ T5557] Call Trace: [ 395.826075][ T5557] [ 395.829014][ T5557] __dump_stack+0x21/0x24 [ 395.833360][ T5557] dump_stack_lvl+0xee/0x150 [ 395.837960][ T5557] ? __cfi_dump_stack_lvl+0x8/0x8 [ 395.843002][ T5557] ? kasan_set_track+0x60/0x70 [ 395.847858][ T5557] ? kasan_save_alloc_info+0x25/0x30 [ 395.853155][ T5557] ? __kasan_slab_alloc+0x72/0x80 [ 395.858187][ T5557] ? slab_post_alloc_hook+0x4f/0x2d0 [ 395.863476][ T5557] ? kmem_cache_alloc+0x16e/0x330 [ 395.868508][ T5557] dump_stack+0x15/0x24 [ 395.872679][ T5557] should_fail_ex+0x3d4/0x520 [ 395.877485][ T5557] __should_failslab+0xac/0xf0 [ 395.882257][ T5557] ? ref_tracker_alloc+0x139/0x430 [ 395.887382][ T5557] should_failslab+0x9/0x20 [ 395.891911][ T5557] __kmem_cache_alloc_node+0x3d/0x2c0 [ 395.897292][ T5557] ? ref_tracker_alloc+0x139/0x430 [ 395.902419][ T5557] kmalloc_trace+0x29/0xb0 [ 395.906848][ T5557] ref_tracker_alloc+0x139/0x430 [ 395.911796][ T5557] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 395.917267][ T5557] ? slab_post_alloc_hook+0x6d/0x2d0 [ 395.922562][ T5557] ? dst_alloc+0x16a/0x1e0 [ 395.926992][ T5557] dst_init+0xc4/0x3d0 [ 395.931069][ T5557] ? __cfi_ip6_dst_gc+0x10/0x10 [ 395.935929][ T5557] dst_alloc+0x191/0x1e0 [ 395.940182][ T5557] ip6_pol_route+0x9ae/0x1110 [ 395.944860][ T5557] ? ip6_pol_route+0x477/0x1110 [ 395.949719][ T5557] ? __cfi_ip6_pol_route+0x10/0x10 [ 395.954836][ T5557] ? kernel_text_address+0xa0/0xd0 [ 395.959956][ T5557] ? unwind_get_return_address+0x4d/0x90 [ 395.965594][ T5557] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 395.971761][ T5557] ip6_pol_route_input+0x56/0x80 [ 395.976707][ T5557] fib6_rule_lookup+0x1d7/0x580 [ 395.981565][ T5557] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 395.987199][ T5557] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 395.992580][ T5557] ? ip6t_do_table+0x1328/0x14e0 [ 395.997529][ T5557] ? __inet6_lookup_established+0xad9/0xb70 [ 396.003431][ T5557] ip6_route_input+0x58c/0x8c0 [ 396.008207][ T5557] ? __cfi_ip6_route_input+0x10/0x10 [ 396.013501][ T5557] ? __cfi_ip6t_do_table+0x10/0x10 [ 396.018624][ T5557] ? tcp_v6_early_demux+0x36b/0x910 [ 396.023845][ T5557] ? tcp_v6_early_demux+0x537/0x910 [ 396.029055][ T5557] ip6_rcv_finish+0x156/0x370 [ 396.033737][ T5557] ipv6_rcv+0xe9/0x210 [ 396.037812][ T5557] ? do_syscall_64+0x4c/0xa0 [ 396.042412][ T5557] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.048484][ T5557] ? __cfi_ipv6_rcv+0x10/0x10 [ 396.053166][ T5557] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 396.058373][ T5557] ? __cfi_ipv6_rcv+0x10/0x10 [ 396.063054][ T5557] __netif_receive_skb+0xd7/0x2a0 [ 396.068107][ T5557] ? tun_rx_batched+0x158/0x770 [ 396.072973][ T5557] netif_receive_skb+0x98/0x3d0 [ 396.077834][ T5557] ? __cfi_netif_receive_skb+0x10/0x10 [ 396.083301][ T5557] ? kasan_save_alloc_info+0x25/0x30 [ 396.088602][ T5557] ? tun_rx_batched+0x158/0x770 [ 396.093476][ T5557] tun_rx_batched+0x1b6/0x770 [ 396.098166][ T5557] ? pskb_may_pull+0x100/0x100 [ 396.102940][ T5557] ? tun_get_user+0x1f21/0x3320 [ 396.107804][ T5557] tun_get_user+0x2494/0x3320 [ 396.112494][ T5557] ? tun_do_read+0x1c20/0x1c20 [ 396.117267][ T5557] ? __kasan_check_write+0x14/0x20 [ 396.122395][ T5557] ? ref_tracker_alloc+0x30f/0x430 [ 396.127523][ T5557] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 396.132996][ T5557] ? avc_policy_seqno+0x1b/0x70 [ 396.137854][ T5557] ? selinux_file_permission+0x2a5/0x510 [ 396.143490][ T5557] tun_chr_write_iter+0x1fb/0x300 [ 396.148531][ T5557] vfs_write+0x5db/0xca0 [ 396.152782][ T5557] ? slab_free_freelist_hook+0xc2/0x190 [ 396.158338][ T5557] ? __cfi_vfs_write+0x10/0x10 [ 396.163119][ T5557] ? __fget_files+0x2d5/0x330 [ 396.167810][ T5557] ? __fdget_pos+0x1f2/0x380 [ 396.172422][ T5557] ? ksys_write+0x71/0x240 [ 396.176942][ T5557] ksys_write+0x140/0x240 [ 396.181285][ T5557] ? __cfi_ksys_write+0x10/0x10 [ 396.186323][ T5557] ? debug_smp_processor_id+0x17/0x20 [ 396.191707][ T5557] __x64_sys_write+0x7b/0x90 [ 396.196309][ T5557] x64_sys_call+0x27b/0x9a0 [ 396.200818][ T5557] do_syscall_64+0x4c/0xa0 [ 396.205243][ T5557] ? clear_bhb_loop+0x30/0x80 [ 396.209924][ T5557] ? clear_bhb_loop+0x30/0x80 [ 396.214612][ T5557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.220516][ T5557] RIP: 0033:0x7f190b18d69f [ 396.224938][ T5557] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 396.244553][ T5557] RSP: 002b:00007f190c0d6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 396.252980][ T5557] RAX: ffffffffffffffda RBX: 00007f190b3b5fa0 RCX: 00007f190b18d69f [ 396.260957][ T5557] RDX: 000000000000004a RSI: 00002000000004c0 RDI: 00000000000000c8 [ 396.269103][ T5557] RBP: 00007f190c0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 396.277078][ T5557] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 396.285054][ T5557] R13: 00007f190b3b6038 R14: 00007f190b3b5fa0 R15: 00007ffd2a490438 [ 396.293037][ T5557] [ 396.303064][ T5552] overlayfs: missing 'workdir' [ 396.308185][ T28] audit: type=1400 audit(2000000054.780:1877): avc: denied { mounton } for pid=5547 comm="syz.4.1424" path="/syzcgroup/unified/syz4/file0" dev="cgroup2" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 396.333531][ T5552] IPv6: addrconf: prefix option has invalid lifetime [ 397.446583][ T5571] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=274 sclass=netlink_xfrm_socket pid=5571 comm=syz.4.1429 [ 397.504331][ T554] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 397.706104][ T554] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.776917][ T554] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 397.893910][ T5571] loop4: detected capacity change from 0 to 1024 [ 397.936634][ T5571] EXT4-fs: Ignoring removed i_version option [ 398.009060][ T554] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 398.038124][ T5571] EXT4-fs (loop4): Test dummy encryption mode enabled [ 398.124433][ T554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.158125][ T554] usb 6-1: config 0 descriptor?? [ 398.169876][ T554] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 398.178048][ T5571] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 398.190530][ T5579] loop3: detected capacity change from 0 to 512 [ 398.209775][ T28] audit: type=1400 audit(2000000056.690:1878): avc: denied { relabelfrom } for pid=5569 comm="syz.4.1429" name="" dev="pipefs" ino=31808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 398.246756][ T5579] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c02c, mo2=0002] [ 398.255255][ T5579] System zones: 0-7 [ 398.259737][ T5579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 398.278862][ T28] audit: type=1400 audit(2000000056.760:1879): avc: denied { map } for pid=5569 comm="syz.4.1429" path="/278/file0/cpuset.effective_mems" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 398.306773][ T5571] bridge0: port 3(vlan2) entered blocking state [ 398.385757][ T28] audit: type=1400 audit(2000000056.870:1880): avc: denied { setattr } for pid=5578 comm="syz.3.1430" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 398.391599][ T5571] bridge0: port 3(vlan2) entered disabled state [ 398.415082][ T5579] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #14: comm syz.3.1430: attempt to clear invalid blocks 1886221359 len 1 [ 398.428754][ T28] audit: type=1400 audit(2000000056.900:1881): avc: denied { unlink } for pid=5578 comm="syz.3.1430" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 398.428940][ T5579] EXT4-fs (loop3): Remounting filesystem read-only [ 398.497364][ T287] EXT4-fs (loop3): unmounting filesystem. [ 398.621530][ T5589] loop3: detected capacity change from 0 to 128 [ 399.234099][ T285] EXT4-fs (loop4): unmounting filesystem. [ 399.290236][ T5597] loop0: detected capacity change from 0 to 512 [ 399.301792][ T5597] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 399.315996][ T5597] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 399.337351][ T284] EXT4-fs (loop0): unmounting filesystem. [ 399.423772][ T24] usb 6-1: USB disconnect, device number 2 [ 399.538235][ T5613] loop3: detected capacity change from 0 to 128 [ 399.594357][ T554] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 399.718935][ T5613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 399.771967][ T5613] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 399.794371][ T554] usb 5-1: Using ep0 maxpacket: 32 [ 399.801719][ T554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.892069][ T554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.902995][ T554] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 399.912371][ T554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.925101][ T554] usb 5-1: config 0 descriptor?? [ 399.935551][ T554] hub 5-1:0.0: USB hub found [ 400.140562][ T5599] loop4: detected capacity change from 0 to 512 [ 400.154819][ T5599] ext3: Unknown parameter 'nombcache"init_itable' [ 400.217149][ T342] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 400.233118][ T554] hub 5-1:0.0: 10 ports detected [ 400.244356][ T554] hub 5-1:0.0: insufficient power available to use all downstream ports [ 400.434177][ T554] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 400.442096][ T554] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 400.451274][ T287] EXT4-fs (loop3): unmounting filesystem. [ 400.461681][ T554] usbhid 5-1:0.0: can't add hid device: -71 [ 400.467816][ T554] usbhid: probe of 5-1:0.0 failed with error -71 [ 400.515115][ T554] usb 5-1: USB disconnect, device number 43 [ 400.614333][ T4697] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 400.696542][ T5630] FAULT_INJECTION: forcing a failure. [ 400.696542][ T5630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.709685][ T5630] CPU: 1 PID: 5630 Comm: syz.0.1446 Not tainted syzkaller #0 [ 400.717082][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.727199][ T5630] Call Trace: [ 400.730493][ T5630] [ 400.733435][ T5630] __dump_stack+0x21/0x24 [ 400.737792][ T5630] dump_stack_lvl+0xee/0x150 [ 400.742407][ T5630] ? __cfi_dump_stack_lvl+0x8/0x8 [ 400.747457][ T5630] dump_stack+0x15/0x24 [ 400.751648][ T5630] should_fail_ex+0x3d4/0x520 [ 400.756346][ T5630] should_fail+0xb/0x10 [ 400.760522][ T5630] should_fail_usercopy+0x1a/0x20 [ 400.765565][ T5630] _copy_from_user+0x1e/0xc0 [ 400.770172][ T5630] iovec_from_user+0x1aa/0x2e0 [ 400.774959][ T5630] ? __kasan_check_write+0x14/0x20 [ 400.780102][ T5630] __import_iovec+0x71/0x470 [ 400.784717][ T5630] import_iovec+0x7c/0xb0 [ 400.789072][ T5630] ___sys_sendmsg+0x1e4/0x290 [ 400.793764][ T5630] ? __sys_sendmsg+0x270/0x270 [ 400.798556][ T5630] ? __sys_sendmmsg+0x23e/0x460 [ 400.803422][ T5630] __sys_sendmmsg+0x274/0x460 [ 400.808115][ T5630] ? __cfi___sys_sendmmsg+0x10/0x10 [ 400.813329][ T5630] ? __kasan_check_read+0x11/0x20 [ 400.818386][ T5630] ? preempt_schedule_irq+0xbb/0x110 [ 400.823702][ T5630] ? fpregs_restore_userregs+0x128/0x260 [ 400.829356][ T5630] __x64_sys_sendmmsg+0xa0/0xb0 [ 400.834228][ T5630] x64_sys_call+0x3f5/0x9a0 [ 400.838758][ T5630] do_syscall_64+0x4c/0xa0 [ 400.843198][ T5630] ? clear_bhb_loop+0x30/0x80 [ 400.847901][ T5630] ? clear_bhb_loop+0x30/0x80 [ 400.852593][ T5630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.858505][ T5630] RIP: 0033:0x7feeaa38ebe9 [ 400.862934][ T5630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.882555][ T5630] RSP: 002b:00007feea8dd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 400.891087][ T5630] RAX: ffffffffffffffda RBX: 00007feeaa5b6180 RCX: 00007feeaa38ebe9 [ 400.899077][ T5630] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000007 [ 400.907071][ T5630] RBP: 00007feea8dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.915056][ T5630] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.923049][ T5630] R13: 00007feeaa5b6218 R14: 00007feeaa5b6180 R15: 00007ffe59ff7ae8 [ 400.931047][ T5630] [ 400.936259][ T4697] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.954262][ T4697] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.964622][ T4697] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 400.973699][ T4697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 400.985374][ T4697] usb 6-1: SerialNumber: syz [ 401.139277][ T5632] FAULT_INJECTION: forcing a failure. [ 401.139277][ T5632] name failslab, interval 1, probability 0, space 0, times 0 [ 401.151980][ T5632] CPU: 1 PID: 5632 Comm: syz.4.1447 Not tainted syzkaller #0 [ 401.159379][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.169453][ T5632] Call Trace: [ 401.172745][ T5632] [ 401.175694][ T5632] __dump_stack+0x21/0x24 [ 401.180053][ T5632] dump_stack_lvl+0xee/0x150 [ 401.184673][ T5632] ? __cfi_dump_stack_lvl+0x8/0x8 [ 401.189724][ T5632] dump_stack+0x15/0x24 [ 401.193924][ T5632] should_fail_ex+0x3d4/0x520 [ 401.198643][ T5632] __should_failslab+0xac/0xf0 [ 401.203438][ T5632] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 401.209181][ T5632] should_failslab+0x9/0x20 [ 401.213724][ T5632] __kmem_cache_alloc_node+0x3d/0x2c0 [ 401.219125][ T5632] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 401.224876][ T5632] kmalloc_trace+0x29/0xb0 [ 401.229332][ T5632] selinux_sk_alloc_security+0x7e/0x1a0 [ 401.234921][ T5632] security_sk_alloc+0x83/0xb0 [ 401.239704][ T5632] sk_prot_alloc+0x108/0x320 [ 401.244321][ T5632] sk_alloc+0x3b/0x460 [ 401.248416][ T5632] ? __kasan_check_write+0x14/0x20 [ 401.253568][ T5632] bpf_prog_test_run_skb+0x37e/0x1290 [ 401.258965][ T5632] ? __fget_files+0x2d5/0x330 [ 401.263671][ T5632] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 401.269500][ T5632] bpf_prog_test_run+0x3e3/0x630 [ 401.274456][ T5632] ? slab_free_freelist_hook+0xc2/0x190 [ 401.280031][ T5632] ? bpf_prog_query+0x270/0x270 [ 401.284900][ T5632] ? selinux_bpf+0xce/0xf0 [ 401.289346][ T5632] ? security_bpf+0x93/0xb0 [ 401.293873][ T5632] __sys_bpf+0x56d/0x780 [ 401.298161][ T5632] ? bpf_link_show_fdinfo+0x320/0x320 [ 401.303561][ T5632] ? __cfi_ksys_write+0x10/0x10 [ 401.308452][ T5632] ? debug_smp_processor_id+0x17/0x20 [ 401.313873][ T5632] __x64_sys_bpf+0x7c/0x90 [ 401.318332][ T5632] x64_sys_call+0x488/0x9a0 [ 401.322871][ T5632] do_syscall_64+0x4c/0xa0 [ 401.327343][ T5632] ? clear_bhb_loop+0x30/0x80 [ 401.332044][ T5632] ? clear_bhb_loop+0x30/0x80 [ 401.336753][ T5632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.342690][ T5632] RIP: 0033:0x7f5f0958ebe9 [ 401.347129][ T5632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.366777][ T5632] RSP: 002b:00007f5f07ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.375229][ T5632] RAX: ffffffffffffffda RBX: 00007f5f097b5fa0 RCX: 00007f5f0958ebe9 [ 401.383225][ T5632] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 401.391211][ T5632] RBP: 00007f5f07ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 401.399233][ T5632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.407247][ T5632] R13: 00007f5f097b6038 R14: 00007f5f097b5fa0 R15: 00007fff01bcbe38 [ 401.415277][ T5632] [ 401.584774][ T5647] bridge34: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 401.993603][ T28] audit: type=1400 audit(2000000060.470:1882): avc: denied { getopt } for pid=5643 comm="syz.0.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 402.104281][ T858] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 402.295503][ T858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.314426][ T858] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 402.357941][ T858] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 402.379434][ T858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.401072][ T858] usb 5-1: config 0 descriptor?? [ 402.416400][ T858] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 402.591698][ T28] audit: type=1400 audit(2000000061.070:1883): avc: denied { write } for pid=5657 comm="syz.3.1453" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 402.679558][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 403.230209][ T5680] FAULT_INJECTION: forcing a failure. [ 403.230209][ T5680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.243684][ T5680] CPU: 1 PID: 5680 Comm: syz.3.1460 Not tainted syzkaller #0 [ 403.251090][ T5680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 403.261175][ T5680] Call Trace: [ 403.264497][ T5680] [ 403.267462][ T5680] __dump_stack+0x21/0x24 [ 403.271815][ T5680] dump_stack_lvl+0xee/0x150 [ 403.276444][ T5680] ? __cfi_dump_stack_lvl+0x8/0x8 [ 403.281504][ T5680] dump_stack+0x15/0x24 [ 403.285692][ T5680] should_fail_ex+0x3d4/0x520 [ 403.290399][ T5680] should_fail+0xb/0x10 [ 403.294582][ T5680] should_fail_usercopy+0x1a/0x20 [ 403.299632][ T5680] _copy_to_user+0x1e/0x90 [ 403.304106][ T5680] bpf_test_finish+0x247/0x6b0 [ 403.308887][ T5680] ? __htab_map_lookup_elem+0x1c5/0x240 [ 403.314459][ T5680] ? convert_skb_to___skb+0x430/0x430 [ 403.319855][ T5680] ? bpf_test_timer_continue+0x156/0x4a0 [ 403.325520][ T5680] bpf_prog_test_run_flow_dissector+0x498/0x600 [ 403.329545][ T4697] usb 6-1: 0:2 : does not exist [ 403.331793][ T5680] ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 403.331831][ T5680] ? __kasan_check_write+0x14/0x20 [ 403.347100][ T4697] usb 6-1: unit 5 not found! [ 403.348619][ T5680] ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 403.359984][ T5680] bpf_prog_test_run+0x3e3/0x630 [ 403.364955][ T5680] ? slab_free_freelist_hook+0xc2/0x190 [ 403.370532][ T5680] ? bpf_prog_query+0x270/0x270 [ 403.370541][ T4697] usb 6-1: USB disconnect, device number 3 [ 403.381303][ T5680] ? selinux_bpf+0xce/0xf0 [ 403.385831][ T5680] ? security_bpf+0x93/0xb0 [ 403.390344][ T5680] __sys_bpf+0x56d/0x780 [ 403.394596][ T5680] ? bpf_link_show_fdinfo+0x320/0x320 [ 403.400062][ T5680] ? __cfi_ksys_write+0x10/0x10 [ 403.404925][ T5680] ? debug_smp_processor_id+0x17/0x20 [ 403.410316][ T5680] __x64_sys_bpf+0x7c/0x90 [ 403.414746][ T5680] x64_sys_call+0x488/0x9a0 [ 403.419287][ T5680] do_syscall_64+0x4c/0xa0 [ 403.423714][ T5680] ? clear_bhb_loop+0x30/0x80 [ 403.428573][ T5680] ? clear_bhb_loop+0x30/0x80 [ 403.433255][ T5680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.439150][ T5680] RIP: 0033:0x7faa83f8ebe9 [ 403.443566][ T5680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.463190][ T5680] RSP: 002b:00007faa84e38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.471731][ T5680] RAX: ffffffffffffffda RBX: 00007faa841b5fa0 RCX: 00007faa83f8ebe9 [ 403.479746][ T5680] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 403.487727][ T5680] RBP: 00007faa84e38090 R08: 0000000000000000 R09: 0000000000000000 [ 403.495792][ T5680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.503771][ T5680] R13: 00007faa841b6038 R14: 00007faa841b5fa0 R15: 00007fffe2dbcb48 [ 403.511748][ T5680] [ 403.665127][ T1521] udevd[1521]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 403.773728][ T5697] loop3: detected capacity change from 0 to 8192 [ 404.021154][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.028314][ T5701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.035694][ T5701] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.042768][ T5701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.057119][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 404.065106][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 404.310724][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.323096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 404.331970][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 404.340324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 404.348755][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.357203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 404.365829][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 404.374688][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 404.383049][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 404.454507][ T5707] loop3: detected capacity change from 0 to 128 [ 404.487999][ T28] audit: type=1400 audit(2000000062.960:1884): avc: denied { map } for pid=5706 comm="syz.3.1469" path="pipe:[9658]" dev="pipefs" ino=9658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 404.512850][ T479] usb 5-1: USB disconnect, device number 44 [ 404.536081][ T28] audit: type=1400 audit(2000000062.960:1885): avc: denied { execute } for pid=5706 comm="syz.3.1469" path="pipe:[9658]" dev="pipefs" ino=9658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 404.632042][ T5720] loop4: detected capacity change from 0 to 128 [ 404.643129][ T5720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 404.654022][ T5720] ext4 filesystem being mounted at /285/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 406.112642][ T5730] FAULT_INJECTION: forcing a failure. [ 406.112642][ T5730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.125829][ T5730] CPU: 1 PID: 5730 Comm: syz.5.1475 Not tainted syzkaller #0 [ 406.133235][ T5730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.143319][ T5730] Call Trace: [ 406.146612][ T5730] [ 406.149559][ T5730] __dump_stack+0x21/0x24 [ 406.153923][ T5730] dump_stack_lvl+0xee/0x150 [ 406.158535][ T5730] ? __cfi_dump_stack_lvl+0x8/0x8 [ 406.163586][ T5730] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 406.169681][ T5730] dump_stack+0x15/0x24 [ 406.173875][ T5730] should_fail_ex+0x3d4/0x520 [ 406.178584][ T5730] should_fail+0xb/0x10 [ 406.182763][ T5730] should_fail_usercopy+0x1a/0x20 [ 406.187812][ T5730] copyin+0x20/0xa0 [ 406.191638][ T5730] _copy_from_iter+0x3e2/0xfd0 [ 406.196418][ T5730] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 406.202077][ T5730] ? __cfi__copy_from_iter+0x10/0x10 [ 406.207377][ T5730] ? __build_skb_around+0x24f/0x470 [ 406.212775][ T5730] ? check_stack_object+0x81/0x140 [ 406.217943][ T5730] ? __check_object_size+0x45a/0x600 [ 406.223250][ T5730] netlink_sendmsg+0x72c/0xbc0 [ 406.228035][ T5730] ? __cfi_netlink_sendmsg+0x10/0x10 [ 406.233339][ T5730] ? security_socket_sendmsg+0x93/0xb0 [ 406.238835][ T5730] ? __cfi_netlink_sendmsg+0x10/0x10 [ 406.244137][ T5730] ____sys_sendmsg+0x5a9/0x990 [ 406.248905][ T5730] ? __sys_sendmsg_sock+0x40/0x40 [ 406.254039][ T5730] ? import_iovec+0x7c/0xb0 [ 406.258552][ T5730] ___sys_sendmsg+0x21c/0x290 [ 406.263233][ T5730] ? __sys_sendmsg+0x270/0x270 [ 406.268008][ T5730] ? __cfi___switch_to+0x10/0x10 [ 406.272955][ T5730] ? __fdget+0x19c/0x220 [ 406.277214][ T5730] __x64_sys_sendmsg+0x1f0/0x2c0 [ 406.282276][ T5730] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 406.287764][ T5730] ? __kasan_check_write+0x14/0x20 [ 406.292920][ T5730] ? fpregs_restore_userregs+0x128/0x260 [ 406.298562][ T5730] ? switch_fpu_return+0xe/0x10 [ 406.303444][ T5730] x64_sys_call+0x171/0x9a0 [ 406.307958][ T5730] do_syscall_64+0x4c/0xa0 [ 406.312384][ T5730] ? clear_bhb_loop+0x30/0x80 [ 406.317084][ T5730] ? clear_bhb_loop+0x30/0x80 [ 406.321764][ T5730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.327663][ T5730] RIP: 0033:0x7f190b18ebe9 [ 406.332103][ T5730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.351744][ T5730] RSP: 002b:00007f190c094038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.360172][ T5730] RAX: ffffffffffffffda RBX: 00007f190b3b6180 RCX: 00007f190b18ebe9 [ 406.368181][ T5730] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000b [ 406.376166][ T5730] RBP: 00007f190c094090 R08: 0000000000000000 R09: 0000000000000000 [ 406.384148][ T5730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.392122][ T5730] R13: 00007f190b3b6218 R14: 00007f190b3b6180 R15: 00007ffd2a490438 [ 406.400118][ T5730] [ 406.420323][ T5734] loop3: detected capacity change from 0 to 512 [ 406.429264][ T5734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.442446][ T5734] EXT4-fs (loop3): Test dummy encryption mode enabled [ 406.451543][ T5734] EXT4-fs (loop3): 1 truncate cleaned up [ 406.457993][ T5734] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 406.895117][ T5749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1476'. [ 407.021054][ T285] EXT4-fs (loop4): unmounting filesystem. [ 407.134127][ T5765] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 407.333233][ T287] EXT4-fs (loop3): unmounting filesystem. [ 407.484330][ T513] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 407.716077][ T513] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.821712][ T5771] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1483'. [ 407.834987][ T513] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 408.013500][ T513] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 408.142769][ T513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.267271][ T513] usb 1-1: config 0 descriptor?? [ 408.294586][ T513] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 408.898446][ T5792] loop4: detected capacity change from 0 to 128 [ 408.927514][ T5792] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 408.936380][ T5792] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 409.020033][ T5799] loop3: detected capacity change from 0 to 512 [ 409.038118][ T5799] EXT4-fs: Ignoring removed nomblk_io_submit option [ 409.052066][ T5799] EXT4-fs (loop3): Test dummy encryption mode enabled [ 409.060748][ T5799] EXT4-fs (loop3): 1 truncate cleaned up [ 409.066526][ T5799] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 409.263565][ T5808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1493'. [ 409.616993][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.624201][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.631957][ T5812] device bridge_slave_0 entered promiscuous mode [ 409.639604][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.646681][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.654167][ T5812] device bridge_slave_1 entered promiscuous mode [ 409.710419][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.717546][ T5812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.724876][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.731926][ T5812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.739381][ T5801] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 409.772600][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 409.780815][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.782011][ T285] EXT4-fs (loop4): unmounting filesystem. [ 409.793936][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.812526][ T28] audit: type=1400 audit(2000000068.290:1886): avc: denied { write } for pid=5822 comm="syz.4.1499" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 409.812560][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 409.843702][ T28] audit: type=1400 audit(2000000068.290:1887): avc: denied { ioctl } for pid=5822 comm="syz.4.1499" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 409.869413][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.876511][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.904021][ T5823] netlink: 'syz.4.1499': attribute type 4 has an invalid length. [ 409.913231][ T287] EXT4-fs (loop3): unmounting filesystem. [ 409.921866][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 409.930968][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.938085][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.946572][ T5827] netlink: 'syz.2.1501': attribute type 11 has an invalid length. [ 409.954475][ T5827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1501'. [ 410.075067][ T5833] input: syz0 as /devices/virtual/input/input27 [ 410.174832][ T60] usb 1-1: USB disconnect, device number 37 [ 410.184822][ T5829] bridge26: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 410.544445][ T5841] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 410.551142][ T5844] loop3: detected capacity change from 0 to 128 [ 410.552188][ T5841] device gretap1 entered promiscuous mode [ 410.575539][ T5844] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0101) [ 410.577996][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 410.593887][ T5844] FAT-fs (loop3): Filesystem has been set read-only [ 410.627729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.652045][ T5845] loop0: detected capacity change from 0 to 8192 [ 410.661057][ T28] audit: type=1400 audit(2000000069.140:1888): avc: denied { read } for pid=5843 comm="syz.3.1506" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 410.695326][ T28] audit: type=1400 audit(2000000069.140:1889): avc: denied { open } for pid=5843 comm="syz.3.1506" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 410.725454][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 410.746868][ T5845] loop0: p1 p2 p3 p4 [ 410.748936][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.762572][ T5845] loop0: p3 start 331777 is beyond EOD, truncated [ 410.784746][ T5845] loop0: p4 size 262144 extends beyond EOD, truncated [ 410.790503][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 410.823643][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 410.868721][ T5812] device veth0_vlan entered promiscuous mode [ 410.878225][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 410.900317][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 410.976448][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 410.985416][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 410.992998][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 411.001503][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 411.017731][ T5812] device veth1_macvtap entered promiscuous mode [ 411.032691][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 411.042518][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 411.054352][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 411.074385][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 411.095079][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 411.192497][ T60] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 411.374299][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 411.390908][ T60] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.405819][ T5135] device bridge_slave_1 left promiscuous mode [ 411.414612][ T5135] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.432347][ T60] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8 has invalid wMaxPacketSize 0 [ 411.446810][ T60] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 411.460172][ T60] usb 1-1: config 0 interface 0 has no altsetting 0 [ 411.474517][ T60] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 411.484163][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.493372][ T5135] device bridge_slave_0 left promiscuous mode [ 411.506877][ T60] usb 1-1: config 0 descriptor?? [ 411.512032][ T5135] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.523317][ T5135] device veth1_macvtap left promiscuous mode [ 411.529905][ T5135] device veth0_vlan left promiscuous mode [ 412.074492][ T548] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 412.296569][ T548] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.316241][ T60] usbhid 1-1:0.0: can't add hid device: -71 [ 412.330306][ T60] usbhid: probe of 1-1:0.0 failed with error -71 [ 412.366083][ T548] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.430406][ T60] usb 1-1: USB disconnect, device number 38 [ 412.625914][ T548] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 412.686198][ T548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.771733][ T548] usb 4-1: config 0 descriptor?? [ 412.871839][ T548] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 413.041564][ T5875] bridge35: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 413.736665][ T5900] FAULT_INJECTION: forcing a failure. [ 413.736665][ T5900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.756592][ T5900] CPU: 1 PID: 5900 Comm: syz.4.1520 Not tainted syzkaller #0 [ 413.764043][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.774140][ T5900] Call Trace: [ 413.777445][ T5900] [ 413.780497][ T5900] __dump_stack+0x21/0x24 [ 413.784871][ T5900] dump_stack_lvl+0xee/0x150 [ 413.789503][ T5900] ? __cfi_dump_stack_lvl+0x8/0x8 [ 413.794568][ T5900] dump_stack+0x15/0x24 [ 413.798737][ T5900] should_fail_ex+0x3d4/0x520 [ 413.803425][ T5900] should_fail+0xb/0x10 [ 413.807582][ T5900] should_fail_usercopy+0x1a/0x20 [ 413.812632][ T5900] copyin+0x20/0xa0 [ 413.816436][ T5900] _copy_from_iter+0x3e2/0xfd0 [ 413.821218][ T5900] ? __cfi__copy_from_iter+0x10/0x10 [ 413.826507][ T5900] ? __kasan_check_write+0x14/0x20 [ 413.831627][ T5900] ? __build_skb_around+0x24f/0x470 [ 413.836836][ T5900] ? check_stack_object+0x81/0x140 [ 413.842016][ T5900] ? __check_object_size+0x45a/0x600 [ 413.847314][ T5900] netlink_sendmsg+0x72c/0xbc0 [ 413.852082][ T5900] ? __cfi_netlink_sendmsg+0x10/0x10 [ 413.857400][ T5900] ? security_socket_sendmsg+0x93/0xb0 [ 413.862866][ T5900] ? __cfi_netlink_sendmsg+0x10/0x10 [ 413.868154][ T5900] ____sys_sendmsg+0x5a9/0x990 [ 413.872922][ T5900] ? __sys_sendmsg_sock+0x40/0x40 [ 413.877960][ T5900] ? import_iovec+0x7c/0xb0 [ 413.882468][ T5900] ___sys_sendmsg+0x21c/0x290 [ 413.887148][ T5900] ? __sys_sendmsg+0x270/0x270 [ 413.891911][ T5900] ? __kasan_check_write+0x14/0x20 [ 413.897026][ T5900] ? proc_fail_nth_write+0x17a/0x1f0 [ 413.902325][ T5900] ? vfs_write+0x9d6/0xca0 [ 413.907104][ T5900] ? __fdget+0x19c/0x220 [ 413.911354][ T5900] __x64_sys_sendmsg+0x1f0/0x2c0 [ 413.916290][ T5900] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 413.921769][ T5900] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 413.927840][ T5900] x64_sys_call+0x171/0x9a0 [ 413.932351][ T5900] do_syscall_64+0x4c/0xa0 [ 413.936770][ T5900] ? clear_bhb_loop+0x30/0x80 [ 413.941447][ T5900] ? clear_bhb_loop+0x30/0x80 [ 413.946124][ T5900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.952024][ T5900] RIP: 0033:0x7f5f0958ebe9 [ 413.956464][ T5900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.976073][ T5900] RSP: 002b:00007f5f07ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.984489][ T5900] RAX: ffffffffffffffda RBX: 00007f5f097b5fa0 RCX: 00007f5f0958ebe9 [ 413.992462][ T5900] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 414.000432][ T5900] RBP: 00007f5f07ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 414.008422][ T5900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.016418][ T5900] R13: 00007f5f097b6038 R14: 00007f5f097b5fa0 R15: 00007fff01bcbe38 [ 414.024398][ T5900] [ 414.136438][ T5905] overlayfs: failed to clone upperpath [ 414.165304][ T28] audit: type=1400 audit(2000000072.650:1890): avc: denied { associate } for pid=5906 comm="syz.2.1522" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 414.665282][ T60] usb 4-1: USB disconnect, device number 34 [ 414.686845][ T5920] FAULT_INJECTION: forcing a failure. [ 414.686845][ T5920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.708312][ T5920] CPU: 0 PID: 5920 Comm: syz.3.1528 Not tainted syzkaller #0 [ 414.715788][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.725914][ T5920] Call Trace: [ 414.729223][ T5920] [ 414.732181][ T5920] __dump_stack+0x21/0x24 [ 414.736575][ T5920] dump_stack_lvl+0xee/0x150 [ 414.741208][ T5920] ? __cfi_dump_stack_lvl+0x8/0x8 [ 414.746273][ T5920] dump_stack+0x15/0x24 [ 414.750455][ T5920] should_fail_ex+0x3d4/0x520 [ 414.755159][ T5920] should_fail+0xb/0x10 [ 414.759386][ T5920] should_fail_usercopy+0x1a/0x20 [ 414.764437][ T5920] copyin+0x20/0xa0 [ 414.768262][ T5920] _copy_from_iter+0x3e2/0xfd0 [ 414.773051][ T5920] ? __cfi__copy_from_iter+0x10/0x10 [ 414.778364][ T5920] ? __kasan_check_write+0x14/0x20 [ 414.783505][ T5920] ? __build_skb_around+0x24f/0x470 [ 414.788729][ T5920] ? check_stack_object+0x81/0x140 [ 414.793888][ T5920] ? __check_object_size+0x45a/0x600 [ 414.799209][ T5920] netlink_sendmsg+0x72c/0xbc0 [ 414.804009][ T5920] ? irqentry_exit+0x37/0x40 [ 414.808633][ T5920] ? sysvec_reschedule_ipi+0x78/0x80 [ 414.813943][ T5920] ? __cfi_netlink_sendmsg+0x10/0x10 [ 414.819309][ T5920] ? __cfi_netlink_sendmsg+0x10/0x10 [ 414.824646][ T5920] ? __cfi_netlink_sendmsg+0x10/0x10 [ 414.829970][ T5920] ____sys_sendmsg+0x5a9/0x990 [ 414.834770][ T5920] ? __sys_sendmsg_sock+0x40/0x40 [ 414.839817][ T5920] ? import_iovec+0x7c/0xb0 [ 414.844354][ T5920] ___sys_sendmsg+0x21c/0x290 [ 414.849053][ T5920] ? __sys_sendmsg+0x270/0x270 [ 414.853839][ T5920] ? __kasan_check_write+0x14/0x20 [ 414.858981][ T5920] ? proc_fail_nth_write+0x17a/0x1f0 [ 414.864315][ T5920] ? vfs_write+0x9d6/0xca0 [ 414.868773][ T5920] ? __fdget+0x19c/0x220 [ 414.873135][ T5920] __x64_sys_sendmsg+0x1f0/0x2c0 [ 414.878101][ T5920] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 414.883585][ T5920] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 414.889683][ T5920] x64_sys_call+0x171/0x9a0 [ 414.894226][ T5920] do_syscall_64+0x4c/0xa0 [ 414.898678][ T5920] ? clear_bhb_loop+0x30/0x80 [ 414.903379][ T5920] ? clear_bhb_loop+0x30/0x80 [ 414.908075][ T5920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.913980][ T5920] RIP: 0033:0x7faa83f8ebe9 [ 414.918405][ T5920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.938011][ T5920] RSP: 002b:00007faa84e38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.946431][ T5920] RAX: ffffffffffffffda RBX: 00007faa841b5fa0 RCX: 00007faa83f8ebe9 [ 414.954418][ T5920] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 414.962480][ T5920] RBP: 00007faa84e38090 R08: 0000000000000000 R09: 0000000000000000 [ 414.970455][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.978432][ T5920] R13: 00007faa841b6038 R14: 00007faa841b5fa0 R15: 00007fffe2dbcb48 [ 414.986410][ T5920] [ 415.883392][ T5922] bridge19: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 415.927636][ T5918] bridge36: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 416.006682][ T5929] overlayfs: failed to clone upperpath [ 416.672011][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1541'. [ 416.926284][ T5958] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1542'. [ 416.938190][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.945350][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.952919][ T5951] device bridge_slave_0 entered promiscuous mode [ 416.963273][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.970812][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.979739][ T5951] device bridge_slave_1 entered promiscuous mode [ 417.068168][ T5135] device bridge_slave_1 left promiscuous mode [ 417.074664][ T5135] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.147780][ T5962] loop4: detected capacity change from 0 to 128 [ 417.155867][ T5135] device bridge_slave_0 left promiscuous mode [ 417.162041][ T5135] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.190673][ T5962] EXT4-fs (loop4): Test dummy encryption mode enabled [ 417.198645][ T5135] device veth1_macvtap left promiscuous mode [ 417.204705][ T28] audit: type=1400 audit(2000000075.680:1891): avc: denied { audit_read } for pid=5966 comm="syz.0.1545" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 417.219032][ T5135] device veth0_vlan left promiscuous mode [ 417.226922][ T5962] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 417.296453][ T5962] ext4 filesystem being mounted at /300/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 417.314368][ T5962] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 417.323845][ T28] audit: type=1400 audit(2000000075.800:1892): avc: denied { mounton } for pid=5961 comm="syz.4.1543" path="/300/mnt/bus" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 417.325368][ T5962] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 417.347115][ T28] audit: type=1400 audit(2000000075.800:1893): avc: denied { write } for pid=5961 comm="syz.4.1543" name="bus" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 417.377736][ T28] audit: type=1400 audit(2000000075.810:1894): avc: denied { add_name } for pid=5961 comm="syz.4.1543" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 417.398277][ T28] audit: type=1400 audit(2000000075.810:1895): avc: denied { setattr } for pid=5961 comm="syz.4.1543" name="work" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 417.459672][ T28] audit: type=1400 audit(2000000075.840:1896): avc: denied { remove_name } for pid=5961 comm="syz.4.1543" name="#13" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 417.483909][ T28] audit: type=1400 audit(2000000075.840:1897): avc: denied { rename } for pid=5961 comm="syz.4.1543" name="#13" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 417.626115][ T28] audit: type=1400 audit(2000000075.840:1898): avc: denied { unlink } for pid=5961 comm="syz.4.1543" name="#13" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 418.147200][ T28] audit: type=1400 audit(2000000075.910:1899): avc: denied { getopt } for pid=5966 comm="syz.0.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 418.276812][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 418.285597][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 418.361331][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 418.375581][ T5991] FAULT_INJECTION: forcing a failure. [ 418.375581][ T5991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.390211][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 418.399066][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.406168][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.413765][ T5991] CPU: 0 PID: 5991 Comm: syz.0.1551 Not tainted syzkaller #0 [ 418.421163][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.431248][ T5991] Call Trace: [ 418.434563][ T5991] [ 418.437537][ T5991] __dump_stack+0x21/0x24 [ 418.441944][ T5991] dump_stack_lvl+0xee/0x150 [ 418.446576][ T5991] ? __cfi_dump_stack_lvl+0x8/0x8 [ 418.451647][ T5991] dump_stack+0x15/0x24 [ 418.455875][ T5991] should_fail_ex+0x3d4/0x520 [ 418.460579][ T5991] should_fail+0xb/0x10 [ 418.464770][ T5991] should_fail_usercopy+0x1a/0x20 [ 418.469832][ T5991] copyin+0x20/0xa0 [ 418.473672][ T5991] _copy_from_iter+0x3e2/0xfd0 [ 418.478472][ T5991] ? __cfi__copy_from_iter+0x10/0x10 [ 418.483789][ T5991] ? __kasan_check_write+0x14/0x20 [ 418.489205][ T5991] ? __build_skb_around+0x24f/0x470 [ 418.491000][ T5951] device veth0_vlan entered promiscuous mode [ 418.494434][ T5991] ? check_stack_object+0x81/0x140 [ 418.494470][ T5991] ? __check_object_size+0x45a/0x600 [ 418.509273][ T5951] device veth1_macvtap entered promiscuous mode [ 418.510839][ T5991] netlink_sendmsg+0x72c/0xbc0 [ 418.521853][ T5991] ? __cfi_netlink_sendmsg+0x10/0x10 [ 418.527180][ T5991] ? security_socket_sendmsg+0x93/0xb0 [ 418.532673][ T5991] ? __cfi_netlink_sendmsg+0x10/0x10 [ 418.537965][ T5991] ____sys_sendmsg+0x5a9/0x990 [ 418.542728][ T5991] ? __sys_sendmsg_sock+0x40/0x40 [ 418.547748][ T5991] ? import_iovec+0x7c/0xb0 [ 418.552252][ T5991] ___sys_sendmsg+0x21c/0x290 [ 418.556925][ T5991] ? __sys_sendmsg+0x270/0x270 [ 418.561682][ T5991] ? __kasan_check_write+0x14/0x20 [ 418.566796][ T5991] ? proc_fail_nth_write+0x17a/0x1f0 [ 418.572092][ T5991] ? vfs_write+0x9d6/0xca0 [ 418.576512][ T5991] ? __fdget+0x19c/0x220 [ 418.580755][ T5991] __x64_sys_sendmsg+0x1f0/0x2c0 [ 418.585687][ T5991] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 418.591142][ T5991] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 418.597232][ T5991] x64_sys_call+0x171/0x9a0 [ 418.601738][ T5991] do_syscall_64+0x4c/0xa0 [ 418.606175][ T5991] ? clear_bhb_loop+0x30/0x80 [ 418.610851][ T5991] ? clear_bhb_loop+0x30/0x80 [ 418.615529][ T5991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.621423][ T5991] RIP: 0033:0x7feeaa38ebe9 [ 418.625833][ T5991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.645433][ T5991] RSP: 002b:00007feeab11b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.653847][ T5991] RAX: ffffffffffffffda RBX: 00007feeaa5b5fa0 RCX: 00007feeaa38ebe9 [ 418.661813][ T5991] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 418.669780][ T5991] RBP: 00007feeab11b090 R08: 0000000000000000 R09: 0000000000000000 [ 418.677837][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.685802][ T5991] R13: 00007feeaa5b6038 R14: 00007feeaa5b5fa0 R15: 00007ffe59ff7ae8 [ 418.693788][ T5991] [ 418.699786][ T5989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1550'. [ 418.733617][ T285] EXT4-fs (loop4): unmounting filesystem. [ 418.746123][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 418.755638][ T5989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5989 comm=syz.2.1550 [ 418.774812][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 418.783092][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 418.790834][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 418.798603][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 418.807059][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 418.815312][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 418.823825][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 418.832186][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.839281][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.866596][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 418.883012][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 418.891685][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 418.900470][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 419.492423][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 419.536716][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.566162][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 419.595462][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 420.094324][ T6003] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 420.538496][ T43] tipc: Disabling bearer [ 420.543947][ T43] tipc: Left network mode [ 420.553331][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.560927][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.570988][ T5992] device bridge_slave_0 entered promiscuous mode [ 420.575811][ T6018] loop4: detected capacity change from 0 to 128 [ 420.584683][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.591868][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.600204][ T5992] device bridge_slave_1 entered promiscuous mode [ 420.628638][ T6018] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 420.638605][ T6018] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 420.793475][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.800725][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.808101][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.815166][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.863885][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.872160][ T4600] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.880385][ T4600] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.888076][ T288] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 420.908208][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.916685][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.923745][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.932497][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 420.941338][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.948417][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.967028][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 420.975541][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 420.991725][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 421.012889][ T5992] device veth0_vlan entered promiscuous mode [ 421.020187][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 421.028387][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 421.036977][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 421.064925][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 421.075189][ T5992] device veth1_macvtap entered promiscuous mode [ 421.085379][ T288] usb 1-1: config 0 has an invalid interface number: 73 but max is 0 [ 421.093536][ T288] usb 1-1: config 0 has no interface number 0 [ 421.102840][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.111209][ T288] usb 1-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64 [ 421.121029][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 421.129412][ T288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.144526][ T288] usb 1-1: Product: syz [ 421.152317][ T288] usb 1-1: Manufacturer: syz [ 421.157117][ T288] usb 1-1: SerialNumber: syz [ 421.186384][ T288] usb 1-1: config 0 descriptor?? [ 421.242862][ T43] device bridge_slave_1 left promiscuous mode [ 421.249856][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.252647][ T6042] input: syz0 as /devices/virtual/input/input28 [ 421.264155][ T43] device bridge_slave_0 left promiscuous mode [ 421.279727][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.289478][ T43] device veth1_macvtap left promiscuous mode [ 421.352381][ T6045] mmap: syz.2.1561 (6045) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 421.365697][ T6045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6045 comm=syz.2.1561 [ 421.399737][ T288] usb 1-1: USB disconnect, device number 39 [ 421.472657][ T6046] loop8: detected capacity change from 0 to 8192 [ 421.481853][ T285] EXT4-fs (loop4): unmounting filesystem. [ 421.518667][ T6046] loop8: p1 p2 p3 p4 [ 421.525153][ T6046] loop8: p3 start 331777 is beyond EOD, truncated [ 421.531653][ T6046] loop8: p4 size 262144 extends beyond EOD, truncated [ 421.545088][ T6048] loop4: detected capacity change from 0 to 256 [ 421.561510][ T6048] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 421.676999][ T6048] loop4: detected capacity change from 0 to 8192 [ 421.834340][ T858] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 421.859905][ T6051] loop7: detected capacity change from 0 to 2048 [ 421.938020][ T6051] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 421.953338][ T6051] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.046750][ T858] usb 9-1: Using ep0 maxpacket: 32 [ 422.053468][ T858] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.063457][ T858] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 422.073267][ T858] usb 9-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 422.086331][ T858] usb 9-1: config 0 interface 0 has no altsetting 0 [ 422.092956][ T858] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 422.422227][ T858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.431187][ T858] usb 9-1: config 0 descriptor?? [ 422.544743][ T6066] FAULT_INJECTION: forcing a failure. [ 422.544743][ T6066] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.558162][ T6066] CPU: 1 PID: 6066 Comm: syz.0.1567 Not tainted syzkaller #0 [ 422.565569][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.575647][ T6066] Call Trace: [ 422.578943][ T6066] [ 422.581888][ T6066] __dump_stack+0x21/0x24 [ 422.586249][ T6066] dump_stack_lvl+0xee/0x150 [ 422.590868][ T6066] ? __cfi_dump_stack_lvl+0x8/0x8 [ 422.595965][ T6066] ? __alloc_pages+0x450/0x450 [ 422.600764][ T6066] dump_stack+0x15/0x24 [ 422.604944][ T6066] should_fail_ex+0x3d4/0x520 [ 422.609643][ T6066] should_fail_alloc_page+0x61/0x90 [ 422.614872][ T6066] prepare_alloc_pages+0x148/0x5f0 [ 422.620025][ T6066] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 422.625342][ T6066] ? __this_cpu_preempt_check+0x13/0x20 [ 422.630971][ T6066] __alloc_pages+0x124/0x450 [ 422.635592][ T6066] ? __kasan_kmalloc_large+0xa4/0xb0 [ 422.640906][ T6066] ? __cfi___alloc_pages+0x10/0x10 [ 422.646048][ T6066] ? __alloc_skb+0x2df/0x4b0 [ 422.650673][ T6066] alloc_skb_with_frags+0x20c/0x620 [ 422.655907][ T6066] sock_alloc_send_pskb+0x853/0x980 [ 422.661143][ T6066] ? copyin+0x82/0xa0 [ 422.665156][ T6066] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 422.670908][ T6066] ? __rcu_read_unlock+0x5e/0xa0 [ 422.675905][ T6066] packet_sendmsg+0x3720/0x5280 [ 422.680812][ T6066] ? avc_has_perm+0x158/0x240 [ 422.685533][ T6066] ? __cfi_avc_has_perm+0x10/0x10 [ 422.689647][ T858] usbhid 9-1:0.0: can't add hid device: -71 [ 422.690592][ T6066] ? kstrtouint+0x74/0xe0 [ 422.700833][ T6066] ? selinux_socket_sendmsg+0x208/0x2e0 [ 422.706396][ T6066] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 422.712300][ T6066] ? __cfi_packet_sendmsg+0x10/0x10 [ 422.717507][ T6066] ? __fget_files+0x2d5/0x330 [ 422.722232][ T6066] ? security_socket_sendmsg+0x93/0xb0 [ 422.727713][ T6066] __sys_sendto+0x464/0x5e0 [ 422.732256][ T6066] ? slab_free_freelist_hook+0xc2/0x190 [ 422.737815][ T6066] ? __cfi___sys_sendto+0x10/0x10 [ 422.742858][ T6066] ? ksys_write+0x1eb/0x240 [ 422.747376][ T6066] ? __cfi_ksys_write+0x10/0x10 [ 422.752237][ T6066] __x64_sys_sendto+0xe5/0x100 [ 422.757011][ T6066] x64_sys_call+0x83/0x9a0 [ 422.761457][ T6066] do_syscall_64+0x4c/0xa0 [ 422.765882][ T6066] ? clear_bhb_loop+0x30/0x80 [ 422.770571][ T6066] ? clear_bhb_loop+0x30/0x80 [ 422.775252][ T6066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.781152][ T6066] RIP: 0033:0x7feeaa38ebe9 [ 422.785573][ T6066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.805182][ T6066] RSP: 002b:00007feea8df7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 422.813865][ T6066] RAX: ffffffffffffffda RBX: 00007feeaa5b6090 RCX: 00007feeaa38ebe9 [ 422.821840][ T6066] RDX: 000000000001fffc RSI: 0000200000000180 RDI: 000000000000000a [ 422.829818][ T6066] RBP: 00007feea8df7090 R08: 0000200000000140 R09: 0000000000000014 [ 422.837792][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.847326][ T6066] R13: 00007feeaa5b6128 R14: 00007feeaa5b6090 R15: 00007ffe59ff7ae8 [ 422.855310][ T6066] [ 422.858975][ T858] usbhid: probe of 9-1:0.0 failed with error -71 [ 422.866888][ T858] usb 9-1: USB disconnect, device number 2 [ 422.918743][ T5951] EXT4-fs (loop7): unmounting filesystem. [ 423.064550][ T6062] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 423.319631][ T6072] loop0: detected capacity change from 0 to 128 [ 423.326379][ T6072] EXT4-fs: Ignoring removed nobh option [ 423.341554][ T6072] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 423.350839][ T6072] ext4 filesystem being mounted at /296/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 423.365636][ T28] audit: type=1400 audit(2000000081.850:1900): avc: denied { ioctl } for pid=6071 comm="syz.0.1569" path="/296/mnt/file1" dev="loop0" ino=12 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 423.537508][ T284] EXT4-fs (loop0): unmounting filesystem. [ 423.558277][ T6080] loop0: detected capacity change from 0 to 512 [ 424.225120][ T6010] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 424.437460][ T6010] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 424.451449][ T6010] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.462573][ T6010] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 424.477426][ T6010] usb 9-1: config 1 has no interface number 1 [ 424.483593][ T6010] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 424.503440][ T6095] input: syz0 as /devices/virtual/input/input29 [ 424.519169][ T6010] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 424.543731][ T6010] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.603048][ T6010] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.624906][ T6010] usb 9-1: Product: syz [ 424.629139][ T6010] usb 9-1: Manufacturer: syz [ 424.633788][ T6010] usb 9-1: SerialNumber: syz [ 424.868095][ T6104] bridge21: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 424.893577][ T6103] loop7: detected capacity change from 0 to 8192 [ 425.132609][ T6010] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 425.141463][ T6103] loop7: p1 p2 p3 p4 [ 425.145605][ T6010] usb 9-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 425.155477][ T6103] loop7: p3 start 331777 is beyond EOD, truncated [ 425.162521][ T6103] loop7: p4 size 262144 extends beyond EOD, truncated [ 425.168446][ T6010] usb 9-1: USB disconnect, device number 3 [ 425.172017][ T6107] capability: warning: `syz.2.1578' uses deprecated v2 capabilities in a way that may be insecure [ 425.395201][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 425.546194][ T28] audit: type=1326 audit(2000000084.030:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0958ebe9 code=0x7ffc0000 [ 425.591997][ T6122] loop4: detected capacity change from 0 to 2048 [ 425.624398][ T28] audit: type=1326 audit(2000000084.050:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f0958ebe9 code=0x7ffc0000 [ 425.650450][ T6122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 425.683681][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 425.708186][ T28] audit: type=1326 audit(2000000084.050:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0958ebe9 code=0x7ffc0000 [ 425.752257][ T28] audit: type=1326 audit(2000000084.050:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f0958ebe9 code=0x7ffc0000 [ 425.774738][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 425.776034][ T28] audit: type=1326 audit(2000000084.050:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0958ebe9 code=0x7ffc0000 [ 425.851138][ T28] audit: type=1326 audit(2000000084.050:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f0958ebe9 code=0x7ffc0000 [ 425.908080][ T28] audit: type=1326 audit(2000000084.050:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0958ebe9 code=0x7ffc0000 [ 425.931987][ T28] audit: type=1326 audit(2000000084.050:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f0958ebe9 code=0x7ffc0000 [ 425.955706][ T28] audit: type=1326 audit(2000000084.050:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0958ebe9 code=0x7ffc0000 [ 426.555425][ T285] EXT4-fs (loop4): unmounting filesystem. [ 427.157545][ T6142] loop0: detected capacity change from 0 to 256 [ 427.212541][ T6142] loop0: detected capacity change from 0 to 512 [ 427.224583][ T6010] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 427.229424][ T6142] ext2: Unknown parameter 'measure' [ 427.264948][ T1521] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 427.414600][ T6010] usb 9-1: Using ep0 maxpacket: 32 [ 427.425092][ T6010] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.438150][ T6010] usb 9-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 427.767155][ T6010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.777867][ T6010] usb 9-1: config 0 descriptor?? [ 428.117760][ T6164] loop0: detected capacity change from 0 to 512 [ 428.127495][ T6164] EXT4-fs: Ignoring removed nomblk_io_submit option [ 428.140482][ T6164] EXT4-fs (loop0): Test dummy encryption mode enabled [ 428.161933][ T6164] EXT4-fs (loop0): 1 truncate cleaned up [ 428.170871][ T6164] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 428.326153][ T6169] bridge23: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 428.448906][ T6171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1595'. [ 428.763240][ T6010] logitech-hidpp-device 0003:046D:C087.000B: item fetching failed at offset 4/5 [ 428.772696][ T6010] logitech-hidpp-device 0003:046D:C087.000B: hidpp_probe:parse failed [ 428.782683][ T6010] logitech-hidpp-device: probe of 0003:046D:C087.000B failed with error -22 [ 428.793069][ T6010] usb 9-1: USB disconnect, device number 4 [ 428.983091][ T284] EXT4-fs (loop0): unmounting filesystem. [ 429.046972][ T6186] tipc: Enabled bearer , priority 0 [ 429.054016][ T6186] device syzkaller0 entered promiscuous mode [ 429.061706][ T6186] fuse: Unknown parameter 'ô­Y!' [ 429.067483][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 429.067498][ T28] audit: type=1400 audit(2000000087.550:1975): avc: denied { write } for pid=6185 comm="syz.0.1601" name="file0" dev="tmpfs" ino=1676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 429.081745][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1603'. [ 429.113845][ T28] audit: type=1400 audit(2000000087.560:1976): avc: denied { open } for pid=6185 comm="syz.0.1601" path="/305/file0" dev="tmpfs" ino=1676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 429.115144][ T6186] tipc: Resetting bearer [ 429.199685][ T6185] tipc: Resetting bearer [ 429.265551][ T6185] tipc: Disabling bearer [ 430.038671][ T6207] loop4: detected capacity change from 0 to 512 [ 430.056244][ T6207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 430.070054][ T6207] EXT4-fs (loop4): Test dummy encryption mode enabled [ 430.079015][ T6207] EXT4-fs (loop4): 1 truncate cleaned up [ 430.084901][ T6207] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 430.246565][ T6214] loop0: detected capacity change from 0 to 512 [ 430.256721][ T6214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 430.264318][ T6214] EXT4-fs (loop0): Test dummy encryption mode enabled [ 430.545421][ T6218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1609'. [ 430.570199][ T6214] EXT4-fs (loop0): 1 truncate cleaned up [ 430.597928][ T6214] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 431.454322][ T6229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1612'. [ 431.605105][ T285] EXT4-fs (loop4): unmounting filesystem. [ 431.722701][ T284] EXT4-fs (loop0): unmounting filesystem. [ 431.819736][ T6241] loop8: detected capacity change from 0 to 2048 [ 431.842584][ T6241] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 431.851461][ T6241] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.957281][ T6010] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 432.877979][ T6253] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1622'. [ 432.976703][ T5992] EXT4-fs (loop8): unmounting filesystem. [ 433.360698][ T28] audit: type=1326 audit(2000000091.840:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd358b8ebe9 code=0x7ffc0000 [ 433.421432][ T28] audit: type=1326 audit(2000000091.880:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fd358b8ebe9 code=0x7ffc0000 [ 433.444870][ T28] audit: type=1326 audit(2000000091.880:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd358b8ebe9 code=0x7ffc0000 [ 433.468295][ T28] audit: type=1326 audit(2000000091.880:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd358b8ebe9 code=0x7ffc0000 [ 433.491780][ T28] audit: type=1326 audit(2000000091.880:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd358b8ebe9 code=0x7ffc0000 [ 433.515385][ T28] audit: type=1326 audit(2000000091.880:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd358b8ebe9 code=0x7ffc0000 [ 433.541252][ T28] audit: type=1326 audit(2000000091.880:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd358b8ebe9 code=0x7ffc0000 [ 433.564760][ T6010] usb 5-1: Using ep0 maxpacket: 16 [ 433.569961][ T28] audit: type=1326 audit(2000000091.890:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.8.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fd358b8ebe9 code=0x7ffc0000 [ 433.595275][ T6010] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 433.625811][ T6010] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 433.652597][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.660912][ T6010] usb 5-1: Product: syz [ 433.665276][ T6010] usb 5-1: Manufacturer: syz [ 433.669892][ T6010] usb 5-1: SerialNumber: syz [ 434.006874][ T6010] usb 5-1: config 0 descriptor?? [ 434.013005][ T6010] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 434.024569][ T6010] usb 5-1: Detected FT232R [ 434.213713][ T6010] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 434.346580][ T6274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1629'. [ 434.620777][ T6010] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 434.684183][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1631'. [ 434.736769][ T6280] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1632'. [ 434.809634][ T6010] usb 5-1: USB disconnect, device number 45 [ 434.818632][ T6010] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 434.925857][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 434.974477][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 435.153785][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 435.225230][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 435.265033][ T6010] ftdi_sio 5-1:0.0: device disconnected [ 435.276497][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 435.288934][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 435.297341][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 435.305859][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 435.314180][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 435.408446][ T6259] loop0: detected capacity change from 0 to 131072 [ 435.506035][ T6259] F2FS-fs (loop0): Found nat_bits in checkpoint [ 435.560979][ T6259] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 435.880359][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 435.880379][ T28] audit: type=1400 audit(2000000094.180:1987): avc: denied { bind } for pid=6294 comm="syz.7.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 437.638553][ T6320] overlayfs: failed to clone upperpath [ 438.413552][ T6333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1645'. [ 439.323765][ T548] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 439.505982][ T548] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.318834][ T548] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.463343][ T548] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 442.529991][ T548] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.644755][ T548] usb 9-1: config 0 descriptor?? [ 442.861247][ T6346] xt_hashlimit: size too large, truncated to 1048576 [ 443.285017][ T548] usb 9-1: can't set config #0, error -71 [ 443.321476][ T6356] input: syz0 as /devices/virtual/input/input30 [ 443.325260][ T548] usb 9-1: USB disconnect, device number 5 [ 443.605130][ T6360] loop8: detected capacity change from 0 to 8192 [ 443.822819][ T6360] loop8: p1 p2 p3 p4 [ 443.943403][ T6360] loop8: p3 start 331777 is beyond EOD, truncated [ 443.947018][ T6372] loop7: detected capacity change from 0 to 128 [ 443.958228][ T6360] loop8: p4 size 262144 extends beyond EOD, truncated [ 443.986189][ T6372] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 444.006325][ T6372] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 444.140694][ T6381] FAULT_INJECTION: forcing a failure. [ 444.140694][ T6381] name failslab, interval 1, probability 0, space 0, times 0 [ 444.153390][ T6381] CPU: 1 PID: 6381 Comm: syz.0.1644 Not tainted syzkaller #0 [ 444.160816][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 444.170887][ T6381] Call Trace: [ 444.174185][ T6381] [ 444.177127][ T6381] __dump_stack+0x21/0x24 [ 444.181518][ T6381] dump_stack_lvl+0xee/0x150 [ 444.186135][ T6381] ? __cfi_dump_stack_lvl+0x8/0x8 [ 444.191179][ T6381] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.197261][ T6381] dump_stack+0x15/0x24 [ 444.201453][ T6381] should_fail_ex+0x3d4/0x520 [ 444.206154][ T6381] __should_failslab+0xac/0xf0 [ 444.210943][ T6381] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 444.216680][ T6381] should_failslab+0x9/0x20 [ 444.221213][ T6381] __kmem_cache_alloc_node+0x3d/0x2c0 [ 444.226607][ T6381] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 444.232343][ T6381] kmalloc_trace+0x29/0xb0 [ 444.236785][ T6381] selinux_sk_alloc_security+0x7e/0x1a0 [ 444.242344][ T6381] security_sk_alloc+0x83/0xb0 [ 444.247121][ T6381] sk_prot_alloc+0x108/0x320 [ 444.251739][ T6381] sk_alloc+0x3b/0x460 [ 444.255830][ T6381] ? bt_sock_alloc+0x25/0x140 [ 444.260527][ T6381] bt_sock_alloc+0x3b/0x140 [ 444.265142][ T6381] l2cap_sock_create+0x139/0x660 [ 444.270102][ T6381] bt_sock_create+0x176/0x250 [ 444.274800][ T6381] __sock_create+0x39e/0x7c0 [ 444.279411][ T6381] sock_create_kern+0x3b/0x50 [ 444.284109][ T6381] rfcomm_dlc_open+0x32c/0x1530 [ 444.289011][ T6381] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 444.295097][ T6381] ? irqentry_exit+0x37/0x40 [ 444.299711][ T6381] ? __cfi_rfcomm_dlc_open+0x10/0x10 [ 444.305019][ T6381] ? _raw_spin_lock_bh+0x8e/0xe0 [ 444.309990][ T6381] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 444.315485][ T6381] ? __local_bh_enable_ip+0x58/0x80 [ 444.320702][ T6381] ? _raw_spin_unlock_bh+0x50/0x60 [ 444.325831][ T6381] ? __kasan_check_write+0x14/0x20 [ 444.330953][ T6381] ? _raw_spin_lock_bh+0x8e/0xe0 [ 444.335900][ T6381] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 444.341376][ T6381] ? __local_bh_enable_ip+0x58/0x80 [ 444.346577][ T6381] ? release_sock+0x169/0x1c0 [ 444.351290][ T6381] rfcomm_sock_connect+0x2fb/0x5f0 [ 444.356430][ T6381] ? __cfi_rfcomm_sock_connect+0x10/0x10 [ 444.362085][ T6381] __sys_connect+0x398/0x420 [ 444.366689][ T6381] ? __cfi___sys_connect+0x10/0x10 [ 444.371808][ T6381] ? __kasan_check_write+0x14/0x20 [ 444.376938][ T6381] ? fpregs_restore_userregs+0x128/0x260 [ 444.382579][ T6381] __x64_sys_connect+0x7a/0x90 [ 444.387355][ T6381] x64_sys_call+0x88d/0x9a0 [ 444.391871][ T6381] do_syscall_64+0x4c/0xa0 [ 444.396312][ T6381] ? clear_bhb_loop+0x30/0x80 [ 444.400992][ T6381] ? clear_bhb_loop+0x30/0x80 [ 444.405693][ T6381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.411601][ T6381] RIP: 0033:0x7feeaa38ebe9 [ 444.416018][ T6381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.435657][ T6381] RSP: 002b:00007feea8dd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 444.444087][ T6381] RAX: ffffffffffffffda RBX: 00007feeaa5b6180 RCX: 00007feeaa38ebe9 [ 444.452063][ T6381] RDX: 000000000000000a RSI: 0000200000000140 RDI: 0000000000000004 [ 444.460124][ T6381] RBP: 00007feea8dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 444.468114][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.476104][ T6381] R13: 00007feeaa5b6218 R14: 00007feeaa5b6180 R15: 00007ffe59ff7ae8 [ 444.484103][ T6381] [ 444.554340][ T6010] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 444.675004][ T6387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1657'. [ 445.044296][ T6010] usb 9-1: Using ep0 maxpacket: 32 [ 445.055059][ T6010] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.070147][ T6010] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x9 has invalid wMaxPacketSize 0 [ 445.127544][ T28] audit: type=1400 audit(2000000103.610:1988): avc: denied { read write } for pid=6402 comm="syz.4.1664" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 445.152306][ T6010] usb 9-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 445.316949][ T28] audit: type=1400 audit(2000000103.610:1989): avc: denied { open } for pid=6402 comm="syz.4.1664" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 445.433582][ T6409] loop4: detected capacity change from 0 to 1024 [ 445.454026][ T6010] usb 9-1: config 0 interface 0 has no altsetting 0 [ 445.461145][ T6010] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 445.470261][ T6010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.494116][ T6010] usb 9-1: config 0 descriptor?? [ 445.526724][ T6409] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 445.631613][ T5951] EXT4-fs (loop7): unmounting filesystem. [ 445.637774][ T28] audit: type=1400 audit(2000000104.120:1990): avc: denied { connect } for pid=6406 comm="syz.4.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 445.678643][ T28] audit: type=1400 audit(2000000104.140:1991): avc: denied { read } for pid=6406 comm="syz.4.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 445.774912][ T6010] usbhid 9-1:0.0: can't add hid device: -71 [ 445.782176][ T6010] usbhid: probe of 9-1:0.0 failed with error -71 [ 445.804557][ T6010] usb 9-1: USB disconnect, device number 6 [ 445.916157][ T6419] loop0: detected capacity change from 0 to 128 [ 445.931328][ T6419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 445.940569][ T6419] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 446.843777][ T285] EXT4-fs (loop4): unmounting filesystem. [ 446.920004][ T284] EXT4-fs (loop0): unmounting filesystem. [ 446.951651][ T6430] loop7: detected capacity change from 0 to 512 [ 446.958625][ T6430] EXT4-fs: Ignoring removed nomblk_io_submit option [ 446.966306][ T6430] EXT4-fs (loop7): Test dummy encryption mode enabled [ 447.030307][ T6430] EXT4-fs (loop7): 1 truncate cleaned up [ 447.056720][ T6430] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 447.307326][ T6438] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1669'. [ 447.434895][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1671'. [ 447.826006][ T5951] EXT4-fs (loop7): unmounting filesystem. [ 447.868040][ T6447] loop4: detected capacity change from 0 to 2048 [ 447.928869][ T6450] FAULT_INJECTION: forcing a failure. [ 447.928869][ T6450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.943719][ T6447] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 447.962732][ T6447] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.004756][ T6450] CPU: 1 PID: 6450 Comm: syz.7.1675 Not tainted syzkaller #0 [ 448.012195][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.022261][ T6450] Call Trace: [ 448.025544][ T6450] [ 448.028484][ T6450] __dump_stack+0x21/0x24 [ 448.032831][ T6450] dump_stack_lvl+0xee/0x150 [ 448.037435][ T6450] ? __cfi_dump_stack_lvl+0x8/0x8 [ 448.042474][ T6450] dump_stack+0x15/0x24 [ 448.046643][ T6450] should_fail_ex+0x3d4/0x520 [ 448.051335][ T6450] should_fail+0xb/0x10 [ 448.055502][ T6450] should_fail_usercopy+0x1a/0x20 [ 448.060534][ T6450] _copy_from_user+0x1e/0xc0 [ 448.065140][ T6450] iovec_from_user+0x1aa/0x2e0 [ 448.069914][ T6450] ? _parse_integer+0x2a/0x40 [ 448.074602][ T6450] __import_iovec+0x71/0x470 [ 448.079202][ T6450] import_iovec+0x7c/0xb0 [ 448.083547][ T6450] ___sys_sendmsg+0x1e4/0x290 [ 448.088238][ T6450] ? __sys_sendmsg+0x270/0x270 [ 448.093009][ T6450] ? __kasan_check_write+0x14/0x20 [ 448.098136][ T6450] ? proc_fail_nth_write+0x17a/0x1f0 [ 448.103444][ T6450] ? vfs_write+0x9d6/0xca0 [ 448.107882][ T6450] ? __fdget+0x19c/0x220 [ 448.112140][ T6450] __x64_sys_sendmsg+0x1f0/0x2c0 [ 448.117084][ T6450] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 448.122558][ T6450] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 448.128644][ T6450] x64_sys_call+0x171/0x9a0 [ 448.133157][ T6450] do_syscall_64+0x4c/0xa0 [ 448.137585][ T6450] ? clear_bhb_loop+0x30/0x80 [ 448.142267][ T6450] ? clear_bhb_loop+0x30/0x80 [ 448.146951][ T6450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.152848][ T6450] RIP: 0033:0x7fb0b818ebe9 [ 448.157270][ T6450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.176899][ T6450] RSP: 002b:00007fb0b6bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.185323][ T6450] RAX: ffffffffffffffda RBX: 00007fb0b83b5fa0 RCX: 00007fb0b818ebe9 [ 448.193315][ T6450] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 448.201310][ T6450] RBP: 00007fb0b6bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 448.209312][ T6450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.217304][ T6450] R13: 00007fb0b83b6038 R14: 00007fb0b83b5fa0 R15: 00007fff98258f48 [ 448.225287][ T6450] [ 448.233560][ T6436] loop0: detected capacity change from 0 to 40427 [ 448.243913][ T6436] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 448.252990][ T6436] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 448.263892][ T6436] F2FS-fs (loop0): Found nat_bits in checkpoint [ 448.304480][ T6436] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 448.311649][ T6436] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 449.897007][ T285] EXT4-fs (loop4): unmounting filesystem. [ 449.948242][ T6473] FAULT_INJECTION: forcing a failure. [ 449.948242][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 450.001844][ T6473] CPU: 0 PID: 6473 Comm: syz.4.1680 Not tainted syzkaller #0 [ 450.009337][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.019423][ T6473] Call Trace: [ 450.022723][ T6473] [ 450.025668][ T6473] __dump_stack+0x21/0x24 [ 450.030032][ T6473] dump_stack_lvl+0xee/0x150 [ 450.034651][ T6473] ? __cfi_dump_stack_lvl+0x8/0x8 [ 450.039703][ T6473] ? do_user_addr_fault+0x9ac/0x1050 [ 450.045022][ T6473] dump_stack+0x15/0x24 [ 450.049223][ T6473] should_fail_ex+0x3d4/0x520 [ 450.053934][ T6473] ? getname_flags+0xb9/0x500 [ 450.058643][ T6473] __should_failslab+0xac/0xf0 [ 450.063431][ T6473] should_failslab+0x9/0x20 [ 450.067967][ T6473] kmem_cache_alloc+0x3b/0x330 [ 450.072751][ T6473] ? asm_exc_page_fault+0x27/0x30 [ 450.077799][ T6473] getname_flags+0xb9/0x500 [ 450.082329][ T6473] ? refcount_dec_and_lock_irqsave+0x71/0x100 [ 450.088420][ T6473] user_path_at_empty+0x30/0x1c0 [ 450.093381][ T6473] __se_sys_mount+0x2e3/0x380 [ 450.098089][ T6473] ? __x64_sys_mount+0xd0/0xd0 [ 450.102882][ T6473] ? __cfi_ksys_write+0x10/0x10 [ 450.107765][ T6473] __x64_sys_mount+0xbf/0xd0 [ 450.112384][ T6473] x64_sys_call+0x65d/0x9a0 [ 450.116913][ T6473] do_syscall_64+0x4c/0xa0 [ 450.121363][ T6473] ? clear_bhb_loop+0x30/0x80 [ 450.126067][ T6473] ? clear_bhb_loop+0x30/0x80 [ 450.130757][ T6473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.136663][ T6473] RIP: 0033:0x7f5f0958ebe9 [ 450.141080][ T6473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.160690][ T6473] RSP: 002b:00007f5f07ff7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 450.169113][ T6473] RAX: ffffffffffffffda RBX: 00007f5f097b5fa0 RCX: 00007f5f0958ebe9 [ 450.177090][ T6473] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 450.185068][ T6473] RBP: 00007f5f07ff7090 R08: 0000200000000780 R09: 0000000000000000 [ 450.193045][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.201019][ T6473] R13: 00007f5f097b6038 R14: 00007f5f097b5fa0 R15: 00007fff01bcbe38 [ 450.209002][ T6473] [ 451.250040][ T6493] loop8: detected capacity change from 0 to 512 [ 451.281077][ T6493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 451.339030][ T6493] EXT4-fs (loop8): Test dummy encryption mode enabled [ 451.356249][ T6488] loop4: detected capacity change from 0 to 40427 [ 451.367792][ T6488] F2FS-fs (loop4): Image doesn't support compression [ 451.375359][ T6493] EXT4-fs (loop8): 1 truncate cleaned up [ 451.381567][ T6493] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 451.394459][ T6488] F2FS-fs (loop4): invalid crc value [ 451.605955][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1686'. [ 452.395652][ T6505] syz.7.1688 (6505): /proc/6504/oom_adj is deprecated, please use /proc/6504/oom_score_adj instead. [ 452.409268][ T5992] EXT4-fs (loop8): unmounting filesystem. [ 452.415998][ T6488] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 452.480433][ T6508] loop8: detected capacity change from 0 to 2048 [ 452.571080][ T6488] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 452.596619][ T6508] Alternate GPT is invalid, using primary GPT. [ 452.620689][ T6508] loop8: p2 p3 p7 [ 452.636553][ T28] audit: type=1400 audit(2000000111.120:1992): avc: denied { read write } for pid=6506 comm="syz.8.1689" name="loop8p3" dev="devtmpfs" ino=2193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 452.825766][ T6516] syz.8.1689 uses obsolete (PF_INET,SOCK_PACKET) [ 452.836379][ T28] audit: type=1400 audit(2000000111.120:1993): avc: denied { open } for pid=6506 comm="syz.8.1689" path="/dev/loop8p3" dev="devtmpfs" ino=2193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 453.039394][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1692'. [ 453.051137][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'. [ 453.077599][ T28] audit: type=1400 audit(2000000111.560:1994): avc: denied { call } for pid=6524 comm="syz.4.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 453.217195][ T6531] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1695'. [ 454.259455][ T6546] loop8: detected capacity change from 0 to 512 [ 454.274452][ T6546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.281795][ T6546] EXT4-fs (loop8): Test dummy encryption mode enabled [ 454.302293][ T6546] EXT4-fs (loop8): 1 truncate cleaned up [ 454.325062][ T6546] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 454.430998][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 454.550854][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1700'. [ 454.614404][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 454.636474][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 454.713645][ T24] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 454.791870][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.844119][ T24] usb 5-1: Product: syz [ 454.872198][ T24] usb 5-1: Manufacturer: syz [ 454.900746][ T24] usb 5-1: SerialNumber: syz [ 455.007393][ T24] usb 5-1: config 0 descriptor?? [ 455.018596][ T24] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 455.068446][ T24] usb 5-1: Detected FT232R [ 455.215140][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 455.233905][ T5992] EXT4-fs (loop8): unmounting filesystem. [ 455.438249][ T24] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 455.656906][ T24] usb 5-1: USB disconnect, device number 46 [ 455.669708][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 455.714766][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.728480][ T24] ftdi_sio 5-1:0.0: device disconnected [ 455.734162][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.747122][ T6555] device bridge_slave_0 entered promiscuous mode [ 455.752384][ T28] audit: type=1400 audit(2000000114.230:1995): avc: denied { read write } for pid=6566 comm="syz.7.1708" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.755518][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.787538][ T28] audit: type=1400 audit(2000000114.270:1996): avc: denied { open } for pid=6566 comm="syz.7.1708" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.788574][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.814572][ T28] audit: type=1400 audit(2000000114.270:1997): avc: denied { ioctl } for pid=6566 comm="syz.7.1708" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.819872][ T6555] device bridge_slave_1 entered promiscuous mode [ 455.940123][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 455.947605][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.959221][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 455.968744][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 455.977601][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.984731][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.993764][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 456.325343][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 456.333928][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 456.342919][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.350038][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.358983][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.376944][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 456.397705][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 456.408437][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 456.416991][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.424967][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.442580][ T6581] input: syz0 as /devices/virtual/input/input31 [ 456.463085][ T43] device bridge_slave_1 left promiscuous mode [ 456.471154][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.481671][ T43] device bridge_slave_0 left promiscuous mode [ 456.488710][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.514901][ T6582] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1709'. [ 456.529605][ T28] audit: type=1400 audit(2000000114.990:1998): avc: denied { create } for pid=6577 comm="syz.8.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 456.595103][ T43] device bridge0 left promiscuous mode [ 456.608329][ T43] device veth1_macvtap left promiscuous mode [ 456.639916][ T43] device veth0_vlan left promiscuous mode [ 456.651877][ T28] audit: type=1400 audit(2000000114.990:1999): avc: denied { write } for pid=6577 comm="syz.8.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 456.715478][ T4697] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 456.723917][ T28] audit: type=1400 audit(2000000115.000:2000): avc: denied { nlmsg_write } for pid=6577 comm="syz.8.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 456.809313][ T6584] loop4: detected capacity change from 0 to 8192 [ 456.865120][ T6584] loop4: p1 p2 p3 p4 [ 456.872007][ T6584] loop4: p3 start 331777 is beyond EOD, truncated [ 456.879985][ T6584] loop4: p4 size 262144 extends beyond EOD, truncated [ 456.896396][ T4697] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x78, skipping [ 456.916390][ T4697] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 456.939020][ T4697] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 456.953374][ T4697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.973279][ T6568] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 456.989200][ T4697] snd-usb-audio: probe of 1-1:27.0 failed with error -12 [ 457.004829][ T6353] udevd[6353]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 457.254345][ T60] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 457.444285][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 457.450646][ T60] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.460589][ T60] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8 has invalid wMaxPacketSize 0 [ 457.470437][ T60] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 457.483462][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 457.490138][ T60] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 457.499284][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.508754][ T60] usb 5-1: config 0 descriptor?? [ 457.743299][ T60] usbhid 5-1:0.0: can't add hid device: -71 [ 457.749419][ T60] usbhid: probe of 5-1:0.0 failed with error -71 [ 457.758035][ T60] usb 5-1: USB disconnect, device number 47 [ 458.045478][ T28] audit: type=1400 audit(2000000116.530:2001): avc: denied { ioctl } for pid=6591 comm="syz.8.1712" path="socket:[37041]" dev="sockfs" ino=37041 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 458.537680][ T6555] device veth0_vlan entered promiscuous mode [ 458.560883][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 458.574777][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 458.602081][ T6555] device veth1_macvtap entered promiscuous mode [ 458.613408][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 458.622167][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 458.631654][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 458.644719][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 458.653173][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 458.829864][ T6611] input: syz0 as /devices/virtual/input/input32 [ 458.916259][ T6614] loop7: detected capacity change from 0 to 512 [ 458.948042][ T6614] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 459.130291][ T6617] input: syz0 as /devices/virtual/input/input33 [ 459.140295][ T6615] loop9: detected capacity change from 0 to 8192 [ 459.194983][ T6615] loop9: p1 p2 p3 p4 [ 459.200504][ T6615] loop9: p3 start 331777 is beyond EOD, truncated [ 459.240090][ T6615] loop9: p4 size 262144 extends beyond EOD, truncated [ 459.442448][ T6620] loop8: detected capacity change from 0 to 8192 [ 459.494661][ T60] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 459.537492][ T6620] loop8: p1 p2 p3 p4 [ 459.557621][ T6620] loop8: p3 start 331777 is beyond EOD, truncated [ 459.571764][ T548] usb 1-1: USB disconnect, device number 40 [ 459.625252][ T6620] loop8: p4 size 262144 extends beyond EOD, truncated [ 459.684411][ T60] usb 10-1: Using ep0 maxpacket: 32 [ 459.690814][ T60] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.782194][ T60] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 459.799707][ T60] usb 10-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 459.843511][ T60] usb 10-1: config 0 interface 0 has no altsetting 0 [ 459.860973][ T60] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 460.289870][ T6010] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 460.320389][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.329829][ T60] usb 10-1: config 0 descriptor?? [ 460.554306][ T6010] usb 9-1: Using ep0 maxpacket: 32 [ 460.562972][ T6631] FAULT_INJECTION: forcing a failure. [ 460.562972][ T6631] name failslab, interval 1, probability 0, space 0, times 0 [ 460.585678][ T6010] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.604252][ T6010] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 460.622503][ T6625] loop4: detected capacity change from 0 to 40427 [ 460.624261][ T6631] CPU: 0 PID: 6631 Comm: syz.0.1723 Not tainted syzkaller #0 [ 460.636374][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.646457][ T6631] Call Trace: [ 460.649755][ T6631] [ 460.652707][ T6631] __dump_stack+0x21/0x24 [ 460.657075][ T6631] dump_stack_lvl+0xee/0x150 [ 460.661698][ T6631] ? __cfi_dump_stack_lvl+0x8/0x8 [ 460.666762][ T6631] ? do_user_addr_fault+0x9ac/0x1050 [ 460.672086][ T6631] dump_stack+0x15/0x24 [ 460.676280][ T6631] should_fail_ex+0x3d4/0x520 [ 460.680087][ T6625] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 460.680991][ T6631] ? getname_flags+0xb9/0x500 [ 460.681027][ T6631] __should_failslab+0xac/0xf0 [ 460.698199][ T6631] should_failslab+0x9/0x20 [ 460.699891][ T6625] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 460.702746][ T6631] kmem_cache_alloc+0x3b/0x330 [ 460.702778][ T6631] ? asm_exc_page_fault+0x27/0x30 [ 460.720921][ T6631] getname_flags+0xb9/0x500 [ 460.725505][ T6631] ? refcount_dec_and_lock_irqsave+0x71/0x100 [ 460.731716][ T6631] user_path_at_empty+0x30/0x1c0 [ 460.736686][ T6631] __se_sys_mount+0x2e3/0x380 [ 460.741409][ T6631] ? __x64_sys_mount+0xd0/0xd0 [ 460.746210][ T6631] ? __cfi_ksys_write+0x10/0x10 [ 460.751102][ T6631] __x64_sys_mount+0xbf/0xd0 [ 460.755732][ T6631] x64_sys_call+0x65d/0x9a0 [ 460.760271][ T6631] do_syscall_64+0x4c/0xa0 [ 460.764731][ T6631] ? clear_bhb_loop+0x30/0x80 [ 460.769437][ T6631] ? clear_bhb_loop+0x30/0x80 [ 460.774142][ T6631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.780061][ T6631] RIP: 0033:0x7feeaa38ebe9 [ 460.784499][ T6631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.804134][ T6631] RSP: 002b:00007feeab11b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 460.812618][ T6631] RAX: ffffffffffffffda RBX: 00007feeaa5b5fa0 RCX: 00007feeaa38ebe9 [ 460.820621][ T6631] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 460.826706][ T6625] F2FS-fs (loop4): invalid crc value [ 460.828623][ T6631] RBP: 00007feeab11b090 R08: 0000200000002280 R09: 0000000000000000 [ 460.828643][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.828657][ T6631] R13: 00007feeaa5b6038 R14: 00007feeaa5b5fa0 R15: 00007ffe59ff7ae8 [ 460.857907][ T6631] [ 460.861262][ T6010] usb 9-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 460.883031][ T6010] usb 9-1: config 0 interface 0 has no altsetting 0 [ 460.890125][ T6010] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 460.895465][ T6625] F2FS-fs (loop4): Found nat_bits in checkpoint [ 460.899590][ T6010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.924025][ T6010] usb 9-1: config 0 descriptor?? [ 460.947372][ T60] usbhid 10-1:0.0: can't add hid device: -71 [ 460.968009][ T60] usbhid: probe of 10-1:0.0 failed with error -71 [ 461.055135][ T60] usb 10-1: USB disconnect, device number 2 [ 461.088342][ T6625] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 461.095473][ T6625] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 461.200364][ T6010] usbhid 9-1:0.0: can't add hid device: -71 [ 461.200453][ T4600] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 461.207596][ T6010] usbhid: probe of 9-1:0.0 failed with error -71 [ 461.216696][ T4600] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 461.240234][ T6010] usb 9-1: USB disconnect, device number 7 [ 461.524359][ T6654] loop7: detected capacity change from 0 to 512 [ 461.703915][ T6654] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 461.713256][ T6654] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 461.726861][ T6654] FAULT_INJECTION: forcing a failure. [ 461.726861][ T6654] name failslab, interval 1, probability 0, space 0, times 0 [ 461.739644][ T6654] CPU: 0 PID: 6654 Comm: syz.7.1729 Not tainted syzkaller #0 [ 461.747041][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.757218][ T6654] Call Trace: [ 461.760509][ T6654] [ 461.763482][ T6654] __dump_stack+0x21/0x24 [ 461.767834][ T6654] dump_stack_lvl+0xee/0x150 [ 461.772444][ T6654] ? __cfi_dump_stack_lvl+0x8/0x8 [ 461.777496][ T6654] ? __kasan_check_read+0x11/0x20 [ 461.782542][ T6654] dump_stack+0x15/0x24 [ 461.786719][ T6654] should_fail_ex+0x3d4/0x520 [ 461.791423][ T6654] __should_failslab+0xac/0xf0 [ 461.796290][ T6654] should_failslab+0x9/0x20 [ 461.800816][ T6654] slab_pre_alloc_hook+0x30/0x1e0 [ 461.805858][ T6654] kmem_cache_alloc_lru+0x49/0x280 [ 461.810988][ T6654] ? __d_alloc+0x34/0x6c0 [ 461.815353][ T6654] __d_alloc+0x34/0x6c0 [ 461.819543][ T6654] ? rcu_preempt_deferred_qs_irqrestore+0x6c8/0x9d0 [ 461.826169][ T6654] d_alloc_parallel+0xd6/0x1240 [ 461.831049][ T6654] ? rcu_read_unlock_special+0xab/0x480 [ 461.836618][ T6654] ? __kasan_check_write+0x14/0x20 [ 461.841749][ T6654] ? lockref_get_not_dead+0x150/0x250 [ 461.847136][ T6654] ? __rcu_read_unlock+0xa0/0xa0 [ 461.852093][ T6654] ? __cfi_d_alloc_parallel+0x10/0x10 [ 461.857485][ T6654] ? clear_nonspinnable+0x60/0x60 [ 461.862531][ T6654] ? __mnt_want_write+0x1e6/0x260 [ 461.867571][ T6654] path_openat+0x954/0x2f50 [ 461.872180][ T6654] ? do_filp_open+0x3c0/0x3c0 [ 461.876874][ T6654] ? release_firmware_map_entry+0x194/0x194 [ 461.882795][ T6654] do_filp_open+0x1c1/0x3c0 [ 461.887311][ T6654] ? __cfi_do_filp_open+0x10/0x10 [ 461.892352][ T6654] ? preempt_schedule+0xa7/0xb0 [ 461.897228][ T6654] ? alloc_fd+0x4e6/0x590 [ 461.901583][ T6654] do_sys_openat2+0x185/0x7e0 [ 461.906277][ T6654] ? do_sys_open+0xe0/0xe0 [ 461.910705][ T6654] ? release_firmware_map_entry+0x194/0x194 [ 461.916617][ T6654] ? ksys_write+0x1eb/0x240 [ 461.921145][ T6654] ? __kasan_check_write+0x14/0x20 [ 461.926281][ T6654] __x64_sys_open+0x11c/0x140 [ 461.930979][ T6654] x64_sys_call+0x97b/0x9a0 [ 461.935510][ T6654] do_syscall_64+0x4c/0xa0 [ 461.939946][ T6654] ? clear_bhb_loop+0x30/0x80 [ 461.944639][ T6654] ? clear_bhb_loop+0x30/0x80 [ 461.949333][ T6654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.955245][ T6654] RIP: 0033:0x7fb0b818ebe9 [ 461.959695][ T6654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.979403][ T6654] RSP: 002b:00007fb0b6bb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 461.987835][ T6654] RAX: ffffffffffffffda RBX: 00007fb0b83b6180 RCX: 00007fb0b818ebe9 [ 461.995822][ T6654] RDX: 0000000000000080 RSI: 0000000000143142 RDI: 0000200000000040 [ 462.003804][ T6654] RBP: 00007fb0b6bb5090 R08: 0000000000000000 R09: 0000000000000000 [ 462.011786][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.019825][ T6654] R13: 00007fb0b83b6218 R14: 00007fb0b83b6180 R15: 00007fff98258f48 [ 462.027821][ T6654] [ 462.669337][ T6670] bridge25: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 462.923488][ T5951] EXT4-fs (loop7): unmounting filesystem. [ 462.967443][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1736'. [ 463.019680][ T6683] loop7: detected capacity change from 0 to 256 [ 463.054115][ T6683] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 463.104405][ T28] audit: type=1400 audit(2000000121.590:2002): avc: denied { setattr } for pid=6682 comm="syz.7.1739" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.250350][ T4600] Bluetooth: hci0: Frame reassembly failed (-84) [ 463.368554][ T6694] loop7: detected capacity change from 0 to 128 [ 463.377365][ T6694] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 463.390297][ T6694] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 463.438171][ T28] audit: type=1400 audit(2000000121.880:2003): avc: denied { mount } for pid=6691 comm="syz.7.1742" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 465.255027][ T2268] Bluetooth: hci0: command 0x1003 tx timeout [ 465.255062][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 465.304260][ T28] audit: type=1400 audit(2000000123.780:2004): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 465.327974][ T4600] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 465.403293][ T6713] input: syz0 as /devices/virtual/input/input34 [ 465.420602][ T6719] FAULT_INJECTION: forcing a failure. [ 465.420602][ T6719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.434063][ T6719] CPU: 0 PID: 6719 Comm: syz.8.1752 Not tainted syzkaller #0 [ 465.441482][ T6719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 465.451616][ T6719] Call Trace: [ 465.454931][ T6719] [ 465.457875][ T6719] __dump_stack+0x21/0x24 [ 465.462234][ T6719] dump_stack_lvl+0xee/0x150 [ 465.466855][ T6719] ? __cfi_dump_stack_lvl+0x8/0x8 [ 465.471902][ T6719] dump_stack+0x15/0x24 [ 465.476085][ T6719] should_fail_ex+0x3d4/0x520 [ 465.480829][ T6719] should_fail+0xb/0x10 [ 465.485009][ T6719] should_fail_usercopy+0x1a/0x20 [ 465.490094][ T6719] copyin+0x20/0xa0 [ 465.493923][ T6719] _copy_from_iter+0x3e2/0xfd0 [ 465.498699][ T6719] ? __cfi__copy_from_iter+0x10/0x10 [ 465.503993][ T6719] ? __kasan_check_write+0x14/0x20 [ 465.509129][ T6719] ? __build_skb_around+0x24f/0x470 [ 465.514381][ T6719] ? check_stack_object+0x81/0x140 [ 465.519511][ T6719] ? __check_object_size+0x45a/0x600 [ 465.524815][ T6719] netlink_sendmsg+0x72c/0xbc0 [ 465.529602][ T6719] ? __cfi_netlink_sendmsg+0x10/0x10 [ 465.534946][ T6719] ? security_socket_sendmsg+0x93/0xb0 [ 465.540523][ T6719] ? __cfi_netlink_sendmsg+0x10/0x10 [ 465.545919][ T6719] ____sys_sendmsg+0x5a9/0x990 [ 465.550811][ T6719] ? __sys_sendmsg_sock+0x40/0x40 [ 465.555851][ T6719] ? import_iovec+0x7c/0xb0 [ 465.560376][ T6719] ___sys_sendmsg+0x21c/0x290 [ 465.565060][ T6719] ? __sys_sendmsg+0x270/0x270 [ 465.569834][ T6719] ? __kasan_check_write+0x14/0x20 [ 465.574964][ T6719] ? proc_fail_nth_write+0x17a/0x1f0 [ 465.580272][ T6719] ? vfs_write+0x9d6/0xca0 [ 465.584709][ T6719] ? __fdget+0x19c/0x220 [ 465.588975][ T6719] __x64_sys_sendmsg+0x1f0/0x2c0 [ 465.593927][ T6719] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 465.599457][ T6719] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 465.605542][ T6719] x64_sys_call+0x171/0x9a0 [ 465.610062][ T6719] do_syscall_64+0x4c/0xa0 [ 465.614498][ T6719] ? clear_bhb_loop+0x30/0x80 [ 465.619200][ T6719] ? clear_bhb_loop+0x30/0x80 [ 465.623895][ T6719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.629809][ T6719] RIP: 0033:0x7fd358b8ebe9 [ 465.634240][ T6719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.653860][ T6719] RSP: 002b:00007fd3575f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.662295][ T6719] RAX: ffffffffffffffda RBX: 00007fd358db5fa0 RCX: 00007fd358b8ebe9 [ 465.670286][ T6719] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 465.678271][ T6719] RBP: 00007fd3575f7090 R08: 0000000000000000 R09: 0000000000000000 [ 465.686252][ T6719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.694232][ T6719] R13: 00007fd358db6038 R14: 00007fd358db5fa0 R15: 00007ffe4839ac58 [ 465.702258][ T6719] [ 467.175974][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 467.191441][ T6731] loop9: detected capacity change from 0 to 8192 [ 467.913708][ T6731] loop9: p1 p2 p3 p4 [ 468.226045][ T6010] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 468.267061][ T6759] bridge: RTM_NEWNEIGH with invalid ether address [ 468.281231][ T6731] loop9: p3 start 331777 is beyond EOD, truncated [ 468.344254][ T6731] loop9: p4 size 262144 extends beyond EOD, truncated [ 468.814298][ T6010] usb 10-1: Using ep0 maxpacket: 32 [ 469.896077][ T6010] usb 10-1: device descriptor read/all, error -71 [ 470.887676][ T6791] FAULT_INJECTION: forcing a failure. [ 470.887676][ T6791] name failslab, interval 1, probability 0, space 0, times 0 [ 470.900411][ T6791] CPU: 1 PID: 6791 Comm: syz.9.1770 Not tainted syzkaller #0 [ 470.907805][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 470.917874][ T6791] Call Trace: [ 470.921170][ T6791] [ 470.924110][ T6791] __dump_stack+0x21/0x24 [ 470.928476][ T6791] dump_stack_lvl+0xee/0x150 [ 470.933092][ T6791] ? __cfi_dump_stack_lvl+0x8/0x8 [ 470.938139][ T6791] dump_stack+0x15/0x24 [ 470.942314][ T6791] should_fail_ex+0x3d4/0x520 [ 470.947018][ T6791] ? security_file_alloc+0x33/0x130 [ 470.952233][ T6791] __should_failslab+0xac/0xf0 [ 470.957018][ T6791] should_failslab+0x9/0x20 [ 470.961638][ T6791] kmem_cache_alloc+0x3b/0x330 [ 470.966438][ T6791] ? __alloc_file+0x28/0x2a0 [ 470.971047][ T6791] security_file_alloc+0x33/0x130 [ 470.976091][ T6791] __alloc_file+0xb5/0x2a0 [ 470.980529][ T6791] alloc_empty_file+0x97/0x180 [ 470.985412][ T6791] path_openat+0xf4/0x2f50 [ 470.989851][ T6791] ? __kasan_check_write+0x14/0x20 [ 470.994991][ T6791] ? push_rt_task+0x35f/0x5b0 [ 470.999688][ T6791] ? _raw_spin_unlock+0x4c/0x70 [ 471.004565][ T6791] ? __cfi_push_rt_tasks+0x10/0x10 [ 471.009724][ T6791] ? finish_task_switch+0x16b/0x7b0 [ 471.014958][ T6791] ? __switch_to_asm+0x3a/0x60 [ 471.019756][ T6791] ? __schedule+0xb8f/0x14e0 [ 471.024384][ T6791] ? do_filp_open+0x3c0/0x3c0 [ 471.029087][ T6791] ? release_firmware_map_entry+0x194/0x194 [ 471.035090][ T6791] do_filp_open+0x1c1/0x3c0 [ 471.039610][ T6791] ? __cfi_do_filp_open+0x10/0x10 [ 471.044647][ T6791] ? alloc_fd+0x4e6/0x590 [ 471.049000][ T6791] do_sys_openat2+0x185/0x7e0 [ 471.053698][ T6791] ? do_sys_open+0xe0/0xe0 [ 471.058134][ T6791] ? release_firmware_map_entry+0x194/0x194 [ 471.064048][ T6791] ? ksys_write+0x1eb/0x240 [ 471.068574][ T6791] __x64_sys_openat+0x136/0x160 [ 471.073437][ T6791] x64_sys_call+0x783/0x9a0 [ 471.077954][ T6791] do_syscall_64+0x4c/0xa0 [ 471.082386][ T6791] ? clear_bhb_loop+0x30/0x80 [ 471.087070][ T6791] ? clear_bhb_loop+0x30/0x80 [ 471.091752][ T6791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.097652][ T6791] RIP: 0033:0x7fd46c18ebe9 [ 471.102071][ T6791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.121681][ T6791] RSP: 002b:00007fd46cfff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 471.130105][ T6791] RAX: ffffffffffffffda RBX: 00007fd46c3b6180 RCX: 00007fd46c18ebe9 [ 471.138085][ T6791] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 471.146161][ T6791] RBP: 00007fd46cfff090 R08: 0000000000000000 R09: 0000000000000000 [ 471.154135][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.162109][ T6791] R13: 00007fd46c3b6218 R14: 00007fd46c3b6180 R15: 00007fff03213a88 [ 471.170091][ T6791] [ 471.238870][ T6789] bridge0: port 3(gretap0) entered blocking state [ 471.245435][ T6789] bridge0: port 3(gretap0) entered disabled state [ 471.252359][ T6789] device gretap0 entered promiscuous mode [ 471.258304][ T6789] bridge0: port 3(gretap0) entered blocking state [ 471.264780][ T6789] bridge0: port 3(gretap0) entered forwarding state [ 471.404394][ T28] audit: type=1400 audit(2000000129.840:2005): avc: denied { create } for pid=6778 comm="syz.0.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 471.775732][ T6814] input: syz0 as /devices/virtual/input/input35 [ 471.984342][ T6815] bridge21: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 472.234584][ T6821] FAULT_INJECTION: forcing a failure. [ 472.234584][ T6821] name failslab, interval 1, probability 0, space 0, times 0 [ 472.257556][ T6821] CPU: 0 PID: 6821 Comm: syz.7.1780 Not tainted syzkaller #0 [ 472.265348][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.275434][ T6821] Call Trace: [ 472.278744][ T6821] [ 472.281699][ T6821] __dump_stack+0x21/0x24 [ 472.286066][ T6821] dump_stack_lvl+0xee/0x150 [ 472.290699][ T6821] ? __cfi_dump_stack_lvl+0x8/0x8 [ 472.295763][ T6821] dump_stack+0x15/0x24 [ 472.299945][ T6821] should_fail_ex+0x3d4/0x520 [ 472.304649][ T6821] ? security_file_alloc+0x33/0x130 [ 472.309871][ T6821] __should_failslab+0xac/0xf0 [ 472.314660][ T6821] should_failslab+0x9/0x20 [ 472.319195][ T6821] kmem_cache_alloc+0x3b/0x330 [ 472.324001][ T6821] ? __alloc_file+0x28/0x2a0 [ 472.328688][ T6821] security_file_alloc+0x33/0x130 [ 472.333724][ T6821] __alloc_file+0xb5/0x2a0 [ 472.338150][ T6821] alloc_empty_file+0x97/0x180 [ 472.342924][ T6821] alloc_file+0x59/0x640 [ 472.347177][ T6821] alloc_file_pseudo+0x17a/0x1f0 [ 472.352138][ T6821] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 472.357605][ T6821] ? _raw_spin_lock+0x8e/0xe0 [ 472.362294][ T6821] ? __cfi__raw_spin_lock+0x10/0x10 [ 472.367508][ T6821] ? inode_init_always+0x714/0x960 [ 472.372642][ T6821] sock_alloc_file+0xba/0x270 [ 472.377331][ T6821] do_accept+0x392/0x690 [ 472.381588][ T6821] ? __cfi_do_accept+0x10/0x10 [ 472.386366][ T6821] __sys_accept4+0xa7/0x120 [ 472.390880][ T6821] __x64_sys_accept4+0x9a/0xb0 [ 472.395657][ T6821] x64_sys_call+0x713/0x9a0 [ 472.400198][ T6821] do_syscall_64+0x4c/0xa0 [ 472.404637][ T6821] ? clear_bhb_loop+0x30/0x80 [ 472.409322][ T6821] ? clear_bhb_loop+0x30/0x80 [ 472.414007][ T6821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.419906][ T6821] RIP: 0033:0x7fb0b818ebe9 [ 472.424331][ T6821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.443969][ T6821] RSP: 002b:00007fb0b6bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 472.452407][ T6821] RAX: ffffffffffffffda RBX: 00007fb0b83b5fa0 RCX: 00007fb0b818ebe9 [ 472.460399][ T6821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 472.468394][ T6821] RBP: 00007fb0b6bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 472.476387][ T6821] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 472.484370][ T6821] R13: 00007fb0b83b6038 R14: 00007fb0b83b5fa0 R15: 00007fff98258f48 [ 472.492357][ T6821] [ 472.614895][ T6828] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 472.626755][ T6828] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 472.635187][ T6828] CPU: 1 PID: 6828 Comm: syz.4.1781 Not tainted syzkaller #0 [ 472.642584][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.652658][ T6828] RIP: 0010:qdisc_tree_reduce_backlog+0x181/0x360 [ 472.659107][ T6828] Code: e8 24 e8 b4 fd 4d 89 ef 83 7d d0 00 74 0a e8 b6 8c 70 fd e9 a2 00 00 00 4d 8b 36 49 8d 46 20 48 89 c1 48 c1 e9 03 48 89 4d b8 <80> 3c 19 00 48 89 45 d0 74 0d 48 8b 7d d0 e8 ec e7 b4 fd 48 8b 45 [ 472.678733][ T6828] RSP: 0018:ffffc90001066e28 EFLAGS: 00010202 [ 472.684826][ T6828] RAX: 0000000000000020 RBX: dffffc0000000000 RCX: 0000000000000004 [ 472.692819][ T6828] RDX: ffff888121076540 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.700836][ T6828] RBP: ffffc90001066e70 R08: ffff888121076540 R09: 0000000000000002 [ 472.708830][ T6828] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000afff2 [ 472.716907][ T6828] R13: ffff888132a9f800 R14: 0000000000000000 R15: ffff888132a9f800 [ 472.724906][ T6828] FS: 00007f5f07fb56c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 472.733856][ T6828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.740893][ T6828] CR2: 00007f5f07fb4f98 CR3: 00000001500ba000 CR4: 00000000003506a0 [ 472.748904][ T6828] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 472.756907][ T6828] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 472.764909][ T6828] Call Trace: [ 472.768208][ T6828] [ 472.771169][ T6828] fq_codel_change+0xafd/0x1010 [ 472.776070][ T6828] ? __cfi_fq_codel_change+0x10/0x10 [ 472.781399][ T6828] ? netlink_sendmsg+0x8aa/0xbc0 [ 472.786375][ T6828] ? irqentry_exit+0x37/0x40 [ 472.790998][ T6828] ? sysvec_reschedule_ipi+0x78/0x80 [ 472.796322][ T6828] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 472.801996][ T6828] fq_codel_init+0x384/0xa90 [ 472.806629][ T6828] ? __cfi_fq_codel_init+0x10/0x10 [ 472.811785][ T6828] qdisc_create+0x7f3/0x1040 [ 472.816415][ T6828] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 472.822529][ T6828] ? qdisc_notify+0x360/0x360 [ 472.827245][ T6828] ? qdisc_lookup+0x100/0x4e0 [ 472.831955][ T6828] tc_modify_qdisc+0x8ea/0x1900 [ 472.836847][ T6828] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 472.842164][ T6828] ? __kasan_check_write+0x14/0x20 [ 472.847325][ T6828] ? mutex_lock+0x8d/0x1a0 [ 472.851768][ T6828] ? __cfi_mutex_lock+0x10/0x10 [ 472.856660][ T6828] ? ns_capable+0x8c/0xf0 [ 472.861024][ T6828] ? netlink_net_capable+0x125/0x160 [ 472.866340][ T6828] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 472.871671][ T6828] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 472.876645][ T6828] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 472.882142][ T6828] ? __kasan_check_write+0x14/0x20 [ 472.887293][ T6828] ? push_rt_task+0x35f/0x5b0 [ 472.892008][ T6828] ? __cfi_push_rt_tasks+0x10/0x10 [ 472.897148][ T6828] ? _raw_spin_unlock+0x4c/0x70 [ 472.902034][ T6828] ? __cfi_push_rt_tasks+0x10/0x10 [ 472.907178][ T6828] ? finish_task_switch+0x16b/0x7b0 [ 472.912417][ T6828] ? __switch_to_asm+0x3a/0x60 [ 472.917225][ T6828] ? __schedule+0xb8f/0x14e0 [ 472.921862][ T6828] ? release_firmware_map_entry+0x194/0x194 [ 472.927803][ T6828] ? release_firmware_map_entry+0x194/0x194 [ 472.933740][ T6828] ? __cfi_avc_has_perm+0x10/0x10 [ 472.938801][ T6828] ? __kasan_check_read+0x11/0x20 [ 472.943874][ T6828] ? preempt_schedule_irq+0xbb/0x110 [ 472.949199][ T6828] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 472.955023][ T6828] netlink_rcv_skb+0x1f2/0x440 [ 472.959829][ T6828] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 472.965322][ T6828] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 472.970654][ T6828] ? __netlink_lookup+0x387/0x3b0 [ 472.975728][ T6828] rtnetlink_rcv+0x1c/0x20 [ 472.977627][ T6819] loop8: detected capacity change from 0 to 8192 [ 472.980173][ T6828] netlink_unicast+0x8b1/0xa30 [ 472.980208][ T6828] netlink_sendmsg+0x8aa/0xbc0 [ 472.996086][ T6828] ? __cfi_netlink_sendmsg+0x10/0x10 [ 473.001414][ T6828] ? security_socket_sendmsg+0x93/0xb0 [ 473.006923][ T6828] ? __cfi_netlink_sendmsg+0x10/0x10 [ 473.012249][ T6828] ____sys_sendmsg+0x5a9/0x990 [ 473.017048][ T6828] ? __sys_sendmsg_sock+0x40/0x40 [ 473.022105][ T6828] ? import_iovec+0x7c/0xb0 [ 473.026647][ T6828] ___sys_sendmsg+0x21c/0x290 [ 473.031369][ T6828] ? __sys_sendmsg+0x270/0x270 [ 473.036175][ T6828] ? __fdget+0x19c/0x220 [ 473.040461][ T6828] __x64_sys_sendmsg+0x1f0/0x2c0 [ 473.045443][ T6828] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 473.050939][ T6828] ? __kasan_check_write+0x14/0x20 [ 473.056098][ T6828] ? fpregs_restore_userregs+0x128/0x260 [ 473.061765][ T6828] ? switch_fpu_return+0xe/0x10 [ 473.066654][ T6828] x64_sys_call+0x171/0x9a0 [ 473.071200][ T6828] do_syscall_64+0x4c/0xa0 [ 473.075677][ T6828] ? clear_bhb_loop+0x30/0x80 [ 473.080401][ T6828] ? clear_bhb_loop+0x30/0x80 [ 473.085113][ T6828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.091035][ T6828] RIP: 0033:0x7f5f0958ebe9 [ 473.095483][ T6828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.115113][ T6828] RSP: 002b:00007f5f07fb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.123556][ T6828] RAX: ffffffffffffffda RBX: 00007f5f097b6180 RCX: 00007f5f0958ebe9 [ 473.131567][ T6828] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000009 [ 473.139565][ T6828] RBP: 00007f5f09611e19 R08: 0000000000000000 R09: 0000000000000000 [ 473.147570][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.155567][ T6828] R13: 00007f5f097b6218 R14: 00007f5f097b6180 R15: 00007fff01bcbe38 [ 473.163579][ T6828] [ 473.166634][ T6828] Modules linked in: [ 473.170672][ T6828] ---[ end trace 0000000000000000 ]--- [ 473.176181][ T6828] RIP: 0010:qdisc_tree_reduce_backlog+0x181/0x360 [ 473.182654][ T6828] Code: e8 24 e8 b4 fd 4d 89 ef 83 7d d0 00 74 0a e8 b6 8c 70 fd e9 a2 00 00 00 4d 8b 36 49 8d 46 20 48 89 c1 48 c1 e9 03 48 89 4d b8 <80> 3c 19 00 48 89 45 d0 74 0d 48 8b 7d d0 e8 ec e7 b4 fd 48 8b 45 [ 473.202342][ T6828] RSP: 0018:ffffc90001066e28 EFLAGS: 00010202 [ 473.208494][ T6828] RAX: 0000000000000020 RBX: dffffc0000000000 RCX: 0000000000000004 [ 473.216544][ T6828] RDX: ffff888121076540 RSI: 0000000000000000 RDI: 0000000000000000 [ 473.224598][ T6828] RBP: ffffc90001066e70 R08: ffff888121076540 R09: 0000000000000002 [ 473.232626][ T6828] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000afff2 [ 473.240685][ T6828] R13: ffff888132a9f800 R14: 0000000000000000 R15: ffff888132a9f800 [ 473.248738][ T6828] FS: 00007f5f07fb56c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 473.257755][ T6828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.264448][ T6828] CR2: 00007f5f07fb4f98 CR3: 00000001500ba000 CR4: 00000000003506a0 [ 473.272473][ T6828] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 473.280521][ T6828] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 473.288551][ T6828] Kernel panic - not syncing: Fatal exception in interrupt [ 473.296097][ T6828] Kernel Offset: disabled [ 473.300429][ T6828] Rebooting in 86400 seconds..