last executing test programs: 13.957428268s ago: executing program 0 (id=1): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x850, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x2c4202, 0x20) write$tcp_mem(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000840)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r6, r5, 0x0) inotify_add_watch(r2, &(0x7f0000000880)='./cgroup.cpu/cpuset.cpus\x00', 0x3) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) process_vm_readv(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/173, 0xad}], 0x1, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/94, 0x5e}], 0x6, 0x0) 13.456135657s ago: executing program 2 (id=6): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, &(0x7f00000004c0)=""/225, 0xe1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_getres(0xfffffffffffffffe, &(0x7f0000000100)) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) 10.894925465s ago: executing program 0 (id=7): socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000680)="$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") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x100, 0x0]}}]}]}, 0x54}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000002000000010000003400088030000080080009800400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000300b08073e8d44e91e3da922c22438244bb885c69e269c8"], 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 10.893340085s ago: executing program 2 (id=8): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18001a9b9cbc650b1bca000008000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r6}, &(0x7f00000003c0), &(0x7f0000000080)=r2}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40020000) sendmsg$inet(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d00)="df", 0x1}], 0x1}, 0x0) 10.634002936s ago: executing program 4 (id=5): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x850, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x2c4202, 0x20) write$tcp_mem(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000840)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000880)='./cgroup.cpu/cpuset.cpus\x00', 0x3) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) process_vm_readv(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/173, 0xad}], 0x1, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/94, 0x5e}], 0x6, 0x0) 9.908315782s ago: executing program 0 (id=9): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, &(0x7f00000004c0)=""/225, 0xe1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_getres(0xfffffffffffffffe, &(0x7f0000000100)) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) 9.770389762s ago: executing program 1 (id=2): socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000680)="$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") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x100, 0x0]}}]}]}, 0x54}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000002000000010000003400088030000080080009800400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c"], 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 9.556569259s ago: executing program 3 (id=4): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18001a9b9cbc650b1bca000008000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r6}, &(0x7f00000003c0), &(0x7f0000000080)=r3}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40020000) sendmsg$inet(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d00)="df", 0x1}], 0x1}, 0x0) 9.321111057s ago: executing program 4 (id=10): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, &(0x7f00000004c0)=""/225, 0xe1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_getres(0xfffffffffffffffe, &(0x7f0000000100)) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x800002f, 0x4, @tid=r0}, &(0x7f0000000240)) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x21, 0x0) 8.454358854s ago: executing program 2 (id=11): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, &(0x7f00000004c0)=""/225, 0xe1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_getres(0xfffffffffffffffe, &(0x7f0000000100)) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x800002f, 0x4, @tid=r0}, &(0x7f0000000240)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) 8.399648449s ago: executing program 0 (id=12): socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000680)="$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") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x100, 0x0]}}]}]}, 0x54}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000002000000010000003400088030000080080009800400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e1400020077"], 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 8.399143559s ago: executing program 4 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x850, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x2c4202, 0x20) write$tcp_mem(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r6, r5, 0x0) inotify_add_watch(r2, &(0x7f0000000880)='./cgroup.cpu/cpuset.cpus\x00', 0x3) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) process_vm_readv(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/173, 0xad}], 0x1, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/94, 0x5e}], 0x6, 0x0) 8.029936048s ago: executing program 3 (id=14): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x850, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x2c4202, 0x20) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000840)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r6, r5, 0x0) inotify_add_watch(r2, &(0x7f0000000880)='./cgroup.cpu/cpuset.cpus\x00', 0x3) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) process_vm_readv(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/173, 0xad}], 0x1, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/94, 0x5e}], 0x6, 0x0) 5.562727239s ago: executing program 2 (id=15): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, &(0x7f00000004c0)=""/225, 0xe1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_getres(0xfffffffffffffffe, &(0x7f0000000100)) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x800002f, 0x4, @tid=r0}, &(0x7f0000000240)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) 5.28979977s ago: executing program 1 (id=16): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, &(0x7f00000004c0)=""/225, 0xe1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x800002f, 0x4, @tid=r0}, &(0x7f0000000240)) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) 5.094998345s ago: executing program 0 (id=17): socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000680)="$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") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x100, 0x0]}}]}]}, 0x54}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000002000000010000003400088030000080080009800400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e14000200776730000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 3.299185664s ago: executing program 3 (id=18): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, &(0x7f00000004c0)=""/225, 0xe1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_getres(0xfffffffffffffffe, &(0x7f0000000100)) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x800002f, 0x4, @tid=r0}, &(0x7f0000000240)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) 3.219363611s ago: executing program 2 (id=19): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x850, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000840)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, r4, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000880)='./cgroup.cpu/cpuset.cpus\x00', 0x3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) process_vm_readv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/173, 0xad}], 0x1, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/94, 0x5e}], 0x6, 0x0) 3.208734971s ago: executing program 4 (id=20): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x850, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x2c4202, 0x20) write$tcp_mem(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000840)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) inotify_add_watch(r2, &(0x7f0000000880)='./cgroup.cpu/cpuset.cpus\x00', 0x3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) process_vm_readv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/173, 0xad}], 0x1, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/94, 0x5e}], 0x6, 0x0) 847.017115ms ago: executing program 3 (id=21): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18001a9b9cbc650b1bca000008000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r7}, &(0x7f00000003c0), &(0x7f0000000080)=r3}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40020000) sendmsg$inet(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d00)="df", 0x1}], 0x1}, 0x0) 25.643428ms ago: executing program 2 (id=22): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x850, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000840)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, r4, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000880)='./cgroup.cpu/cpuset.cpus\x00', 0x3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) process_vm_readv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/173, 0xad}], 0x1, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/94, 0x5e}], 0x6, 0x0) 474.78µs ago: executing program 1 (id=23): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, &(0x7f00000004c0)=""/225, 0xe1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) clock_getres(0xfffffffffffffffe, &(0x7f0000000100)) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x800002f, 0x4, @tid=r0}, &(0x7f0000000240)) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) 0s ago: executing program 0 (id=24): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x850, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000840)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, r4, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000880)='./cgroup.cpu/cpuset.cpus\x00', 0x3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) process_vm_readv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/173, 0xad}], 0x1, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/94, 0x5e}], 0x6, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 8.105660][ T111] udevd (111) used greatest stack depth: 22624 bytes left [ 13.783448][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 13.783461][ T28] audit: type=1400 audit(1765955997.080:59): avc: denied { transition } for pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.787630][ T28] audit: type=1400 audit(1765955997.080:60): avc: denied { noatsecure } for pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.790291][ T28] audit: type=1400 audit(1765955997.090:61): avc: denied { write } for pid=225 comm="sh" path="pipe:[13913]" dev="pipefs" ino=13913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.793306][ T28] audit: type=1400 audit(1765955997.090:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.796134][ T28] audit: type=1400 audit(1765955997.090:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.543637][ T228] sshd-session (228) used greatest stack depth: 20960 bytes left Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts. [ 20.722977][ T28] audit: type=1400 audit(1765956004.020:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.724038][ T275] cgroup: Unknown subsys name 'net' [ 20.745652][ T28] audit: type=1400 audit(1765956004.020:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.772910][ T28] audit: type=1400 audit(1765956004.050:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.773048][ T275] cgroup: Unknown subsys name 'devices' [ 20.916036][ T275] cgroup: Unknown subsys name 'hugetlb' [ 20.921646][ T275] cgroup: Unknown subsys name 'rlimit' [ 21.023802][ T28] audit: type=1400 audit(1765956004.320:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.047007][ T28] audit: type=1400 audit(1765956004.320:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.055642][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.071892][ T28] audit: type=1400 audit(1765956004.320:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.103440][ T28] audit: type=1400 audit(1765956004.390:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.128912][ T28] audit: type=1400 audit(1765956004.390:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.163700][ T28] audit: type=1400 audit(1765956004.460:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.189238][ T28] audit: type=1400 audit(1765956004.460:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.189428][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.236063][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.243108][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.250660][ T283] device bridge_slave_0 entered promiscuous mode [ 22.264648][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.271685][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.279129][ T283] device bridge_slave_1 entered promiscuous mode [ 22.302749][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.309857][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.317200][ T285] device bridge_slave_0 entered promiscuous mode [ 22.331450][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.338515][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.345950][ T284] device bridge_slave_0 entered promiscuous mode [ 22.353389][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.360457][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.368002][ T285] device bridge_slave_1 entered promiscuous mode [ 22.374524][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.381523][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.388852][ T286] device bridge_slave_0 entered promiscuous mode [ 22.395675][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.402695][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.410146][ T286] device bridge_slave_1 entered promiscuous mode [ 22.421685][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.428738][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.436085][ T284] device bridge_slave_1 entered promiscuous mode [ 22.519985][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.527029][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.534309][ T287] device bridge_slave_0 entered promiscuous mode [ 22.541088][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.548280][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.555657][ T287] device bridge_slave_1 entered promiscuous mode [ 22.687154][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.694204][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.701525][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.708544][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.719289][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.726336][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.733601][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.740636][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.759708][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.766767][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.774015][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.781057][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.796457][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.803480][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.810741][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.817772][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.862656][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.870133][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.877925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.885951][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.893063][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.900351][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.907557][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.914931][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.922043][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.945228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.952611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.960838][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.967862][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.975342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.983544][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.990581][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.998034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.006219][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.013222][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.020570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.028726][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.035746][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.060369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.068410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.085974][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.093347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.101018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.108991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.117227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.125604][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.132637][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.140097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.148240][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.155267][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.166193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.191458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.199860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.207555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.216131][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.223155][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.230635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.239457][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.246489][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.253794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.262026][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.269057][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.276499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.284767][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.291778][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.299155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.307101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.315569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.327793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.335930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.349949][ T286] device veth0_vlan entered promiscuous mode [ 23.359061][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.367167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.375527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.383506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.391581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.400139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.409142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.416602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.431779][ T286] device veth1_macvtap entered promiscuous mode [ 23.440727][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.449073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.457227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.465501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.473408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.481744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.489984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.498475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.506897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.518588][ T285] device veth0_vlan entered promiscuous mode [ 23.530531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.538600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.546869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.555786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.564006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.572445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.580956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.588489][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.601445][ T283] device veth0_vlan entered promiscuous mode [ 23.613556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.621666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.629883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.637594][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 23.638402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.653554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.661971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.682248][ T284] device veth0_vlan entered promiscuous mode [ 23.695910][ T285] device veth1_macvtap entered promiscuous mode [ 23.702838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.711381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.720757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.729484][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.738114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.746693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.754983][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.768872][ T287] device veth0_vlan entered promiscuous mode [ 23.780220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.787790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.795502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.803359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.812634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.820397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.914230][ T339] overlayfs: missing 'lowerdir' [ 24.217563][ T287] device veth1_macvtap entered promiscuous mode [ 24.244774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.253151][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.261556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.269798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.278414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.286791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.295382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.302966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.311183][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.329806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.338154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.350725][ T283] device veth1_macvtap entered promiscuous mode [ 24.383932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.397246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.780690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.792907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.006505][ T284] device veth1_macvtap entered promiscuous mode [ 25.954416][ T351] overlayfs: missing 'lowerdir' [ 27.401941][ T354] loop0: detected capacity change from 0 to 512 [ 27.408343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.415895][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 27.415911][ T28] audit: type=1400 audit(1765956010.700:106): avc: denied { map_create } for pid=355 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.442806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.451301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.454478][ T354] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 65536)! [ 27.459740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.477892][ T354] EXT4-fs (loop0): group descriptors corrupted! [ 27.484199][ T28] audit: type=1400 audit(1765956010.700:107): avc: denied { map_read map_write } for pid=355 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.504403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.512824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.521161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.529572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.544754][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.084384][ T362] bridge0: port 3(gretap0) entered blocking state [ 28.090836][ T362] bridge0: port 3(gretap0) entered disabled state [ 28.097726][ T362] device gretap0 entered promiscuous mode [ 28.103543][ T362] bridge0: port 3(gretap0) entered blocking state [ 28.109976][ T362] bridge0: port 3(gretap0) entered forwarding state [ 28.207031][ T28] audit: type=1400 audit(1765956011.500:108): avc: denied { create } for pid=353 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.233334][ T363] binder: 359:363 ioctl 4018620d 0 returned -22 [ 28.566642][ T28] audit: type=1400 audit(1765956011.500:109): avc: denied { write } for pid=353 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.753821][ T28] audit: type=1400 audit(1765956011.500:110): avc: denied { read } for pid=353 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.934540][ T28] audit: type=1400 audit(1765956011.500:111): avc: denied { read } for pid=353 comm="syz.0.7" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.966123][ T367] loop1: detected capacity change from 0 to 512 [ 28.967078][ T28] audit: type=1400 audit(1765956011.500:112): avc: denied { open } for pid=353 comm="syz.0.7" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.996211][ T367] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 65536)! [ 29.074610][ T367] EXT4-fs (loop1): group descriptors corrupted! [ 29.336506][ T379] overlayfs: missing 'lowerdir' [ 29.372786][ T376] overlayfs: missing 'lowerdir' [ 29.607305][ T28] audit: type=1400 audit(1765956012.760:113): avc: denied { write } for pid=364 comm="syz.0.9" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.749566][ T375] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 30.119763][ T385] loop0: detected capacity change from 0 to 512 [ 30.139131][ T386] bridge0: port 3(gretap0) entered blocking state [ 30.145629][ T386] bridge0: port 3(gretap0) entered disabled state [ 30.152473][ T386] device gretap0 entered promiscuous mode [ 30.158350][ T386] bridge0: port 3(gretap0) entered blocking state [ 30.164792][ T386] bridge0: port 3(gretap0) entered forwarding state [ 30.176477][ T390] binder: 382:390 ioctl 4018620d 0 returned -22 [ 30.192694][ T385] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 65536)! [ 30.207650][ T385] EXT4-fs (loop0): group descriptors corrupted! [ 31.104411][ T394] overlayfs: missing 'lowerdir' [ 32.616048][ T397] binder: 391:397 ioctl 4018620d 0 returned -22 [ 34.034491][ T405] overlayfs: missing 'lowerdir' [ 35.070884][ T412] loop0: detected capacity change from 0 to 512 [ 35.181695][ T414] overlayfs: missing 'lowerdir' [ 35.974419][ T417] overlayfs: missing 'lowerdir' [ 37.358665][ T419] binder: 410:419 ioctl 4018620d 0 returned -22 [ 38.212881][ T412] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 65536)! [ 38.240936][ T412] EXT4-fs (loop0): group descriptors corrupted! [ 38.873112][ T432] overlayfs: missing 'lowerdir' [ 138.424215][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 138.431280][ C1] (detected by 1, t=10002 jiffies, g=1337, q=629 ncpus=2) [ 138.438476][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294951056-4294941053), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 138.451845][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g1337 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 138.462955][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 138.472919][ C1] rcu: RCU grace-period kthread stack dump: [ 138.478811][ C1] task:rcu_preempt state:R running task stack:28528 pid:14 ppid:2 flags:0x00004000 [ 138.489606][ C1] Call Trace: [ 138.492890][ C1] [ 138.495821][ C1] __schedule+0xb87/0x14e0 [ 138.500256][ C1] ? __sched_text_start+0x8/0x8 [ 138.505110][ C1] schedule+0xbd/0x170 [ 138.509180][ C1] schedule_timeout+0x12c/0x2e0 [ 138.514024][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 138.519399][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 138.524881][ C1] ? __cfi_process_timeout+0x10/0x10 [ 138.530166][ C1] ? prepare_to_swait_event+0x308/0x320 [ 138.535720][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 138.540571][ C1] ? rcu_gp_init+0xf10/0xf10 [ 138.545156][ C1] rcu_gp_kthread+0x95/0x370 [ 138.549741][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 138.554951][ C1] ? __kasan_check_read+0x11/0x20 [ 138.559974][ C1] ? __kthread_parkme+0x142/0x180 [ 138.565003][ C1] kthread+0x281/0x320 [ 138.569077][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 138.574288][ C1] ? __cfi_kthread+0x10/0x10 [ 138.578889][ C1] ret_from_fork+0x1f/0x30 [ 138.583338][ C1] [ 138.586367][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 138.592698][ C1] CPU: 1 PID: 430 Comm: syz.2.22 Not tainted syzkaller #0 [ 138.599806][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.609866][ C1] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70 [ 138.615684][ C1] Code: 74 12 48 89 fb 48 c7 c7 80 d4 ed 86 e8 f1 35 c0 fc 48 89 df 48 83 3d 26 66 f9 01 00 74 26 e8 93 0c 00 00 90 fb bf 01 00 00 00 13 4b 57 fc 65 8b 05 54 ff 0d 7b 85 c0 74 03 5b 5d c3 e8 14 0c [ 138.635299][ C1] RSP: 0018:ffffc9000e2cfb90 EFLAGS: 00000246 [ 138.641374][ C1] RAX: 0000000000000001 RBX: 0000000000000021 RCX: dffffc0000000000 [ 138.649347][ C1] RDX: ffffc90002aef000 RSI: 000000000007ffff RDI: 0000000000000001 [ 138.657316][ C1] RBP: ffffc9000e2cfb98 R08: dffffc0000000000 R09: fffff52001c59fc0 [ 138.665290][ C1] R10: fffff52001c59fc0 R11: 1ffff92001c59fbc R12: dffffc0000000000 [ 138.673263][ C1] R13: 1ffff11022728944 R14: 000000001c000004 R15: ffff888113944a20 [ 138.681230][ C1] FS: 00007f5a1b5a46c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 138.690158][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.696739][ C1] CR2: 000000110c266228 CR3: 000000013450e000 CR4: 00000000003506a0 [ 138.704711][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.712689][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.720664][ C1] Call Trace: [ 138.723939][ C1] [ 138.726884][ C1] get_signal+0x12a4/0x1520 [ 138.731406][ C1] arch_do_signal_or_restart+0xb0/0x1030 [ 138.737043][ C1] ? __ia32_sys_rt_sigreturn+0x5e7/0x6c0 [ 138.742684][ C1] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 138.748579][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 138.754739][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 138.759940][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 138.765397][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 138.770864][ C1] do_syscall_64+0x58/0xa0 [ 138.775286][ C1] ? clear_bhb_loop+0x30/0x80 [ 138.779980][ C1] ? clear_bhb_loop+0x30/0x80 [ 138.784664][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.790559][ C1] RIP: 0033:0x7f5a1a78f747 [ 138.794980][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 138.814583][ C1] RSP: 002b:00007f5a1b5a40e8 EFLAGS: 00000246 [ 138.820650][ C1] RAX: 00000000000000ca RBX: 00007f5a1a9e5fa8 RCX: 00007f5a1a78f749 [ 138.828617][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5a1a9e5fa8 [ 138.836582][ C1] RBP: 00007f5a1a9e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 138.844551][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.852520][ C1] R13: 00007f5a1a9e6038 R14: 00007ffdb1c7d270 R15: 00007ffdb1c7d358 [ 138.860513][ C1] [ 243.295010][ T433] binder: 429:433 ioctl 4018620d 0 returned -22 SYZFAIL: failed to send rpc fd=3 want=50848 sent=0 n=-1 (errno 104: Connection reset by peer) [ 245.829754][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.837244][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.844636][ T436] device bridge_slave_0 entered promiscuous mode [ 245.851444][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.858630][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.866129][ T436] device bridge_slave_1 entered promiscuous mode [ 245.905768][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.912811][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.920089][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.927115][ T436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.946401][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.953910][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.961158][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.970782][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.979023][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.986041][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.995928][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.004107][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.011137][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.022780][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.032369][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.047041][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.057732][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.065962][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.073312][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.081395][ T436] device veth0_vlan entered promiscuous mode [ 246.092317][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.101552][ T436] device veth1_macvtap entered promiscuous mode [ 246.110494][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.120162][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.235210][ T420] bridge0: port 3(gretap0) entered disabled state [ 246.242450][ T420] device gretap0 left promiscuous mode [ 246.248176][ T420] bridge0: port 3(gretap0) entered disabled state [ 246.384779][ T420] device bridge_slave_1 left promiscuous mode [ 246.390876][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.398316][ T420] device bridge_slave_0 left promiscuous mode [ 246.404554][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.412322][ T420] device veth1_macvtap left promiscuous mode [ 246.418418][ T420] device veth0_vlan left promiscuous mode [ 247.096999][ T420] bridge0: port 3(gretap0) entered disabled state [ 247.106736][ T420] device gretap0 left promiscuous mode [ 247.112200][ T420] bridge0: port 3(gretap0) entered disabled state [ 247.255039][ T420] device bridge_slave_1 left promiscuous mode [ 247.261140][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.268553][ T420] device bridge_slave_0 left promiscuous mode [ 247.274727][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.282315][ T420] device bridge_slave_1 left promiscuous mode [ 247.288667][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.296202][ T420] device bridge_slave_0 left promiscuous mode [ 247.302287][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.310100][ T420] device bridge_slave_1 left promiscuous mode [ 247.316230][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.323618][ T420] device bridge_slave_0 left promiscuous mode [ 247.329851][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.337589][ T420] device bridge_slave_1 left promiscuous mode [ 247.343671][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.351118][ T420] device bridge_slave_0 left promiscuous mode [ 247.357357][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.365087][ T420] device bridge_slave_1 left promiscuous mode [ 247.371247][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.378681][ T420] device bridge_slave_0 left promiscuous mode [ 247.384831][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.393141][ T420] device veth1_macvtap left promiscuous mode [ 247.399211][ T420] device veth0_vlan left promiscuous mode [ 247.405099][ T420] device veth1_macvtap left promiscuous mode [ 247.411078][ T420] device veth0_vlan left promiscuous mode [ 247.417193][ T420] device veth1_macvtap left promiscuous mode [ 247.423179][ T420] device veth0_vlan left promiscuous mode [ 247.429215][ T420] device veth1_macvtap left promiscuous mode [ 247.435279][ T420] device veth0_vlan left promiscuous mode [ 247.441261][ T420] device veth1_macvtap left promiscuous mode [ 247.447475][ T420] device veth0_vlan left promiscuous mode