last executing test programs:

39m54.771464864s ago: executing program 32 (id=159):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10)
fcntl$setsig(r2, 0xa, 0x27)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

36m46.993158405s ago: executing program 33 (id=1735):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)
r6 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r7}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

15m44.230628638s ago: executing program 1 (id=9680):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000040)={0x11, 0x9, 0x100, 0x9, 0x102, 0x10004, 0x6, 0x66, 0x1})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15m42.932714204s ago: executing program 1 (id=9683):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r4}, 0x18)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4013, 0x0, 0x1, 0x0, 0x0)

15m42.907114054s ago: executing program 1 (id=9684):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x120)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)={0x29, 0x0, 0x2, 0xb6}, 0x8)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x1b)
ioctl$TCFLSH(r7, 0x400455c8, 0x4)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000000)={0x2, 0x7, 0x71, 0x4})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7ffffffc}})
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100))
write(r0, &(0x7f0000000200)="64496ece79f376f2d1e30d91d9bdbac5f1b59c074b987b6a010956f9fa9038d8b8b02859068a00db6dcc600be4f57f2975263e2771f0c302ba014647dd796ccb18339c97c1c74d1229f6d6019c7cfc3c914aac632e063bf7e6497336ee2ccea93adc1701743a19ab6f5468eee263d54c04cb14141d90c39b5518d51077764dcfde3b9308a68f001d42e3396d9c125f5e8fa0ca5c5f152f53157975ca4adb963725010b7b1198b17522ddf99221905306c1c24d20696f6a783d5ef313301ff80596726329f2f3c49c2003be26ba662712b71aa7b31ba5690f1649204d5c22a1e85a231a88ce03f2b0faa23fa4444b6e", 0xef)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)

15m42.720832718s ago: executing program 1 (id=9685):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
wait4(0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x180fe, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
fdatasync(r2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r2, 0x5)

15m42.463317803s ago: executing program 1 (id=9686):
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xce, 0x469, &(0x7f0000000ac0)="$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") (async, rerun: 64)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) (async, rerun: 64)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r0}, 0x18) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) (async, rerun: 32)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async, rerun: 32)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x4048010) (async, rerun: 32)
symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (rerun: 32)

15m42.436004013s ago: executing program 1 (id=9688):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r6=>0x0})
r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0xf2181)
ioctl$EVIOCGBITKEY(r7, 0x80404521, &(0x7f0000000580)=""/216)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)
sync()

15m37.184726155s ago: executing program 34 (id=9640):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r4=>0x0})
r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0xf2181)
ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000580)=""/216)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)
sync()
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911280000000000850000002e00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x28)

15m35.792139722s ago: executing program 35 (id=9648):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r4=>0x0})
r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0xf2181)
ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000580)=""/216)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)
sync()

15m26.11857073s ago: executing program 36 (id=9688):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r6=>0x0})
r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0xf2181)
ioctl$EVIOCGBITKEY(r7, 0x80404521, &(0x7f0000000580)=""/216)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)
sync()

5m25.664515034s ago: executing program 3 (id=11494):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r2, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) (fail_nth: 4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)

5m25.116812425s ago: executing program 3 (id=11495):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005640)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r7, 0x8b35, &(0x7f0000000140)={'wlan1\x00', @multicast})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000ab3dc9350000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {}, {0xd, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

5m25.003356347s ago: executing program 3 (id=11497):
socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)

5m23.474451467s ago: executing program 3 (id=11503):
socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a543"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@i_version}, {@nodioread_nolock}, {@discard}, {@debug}]}, 0x4, 0x511, &(0x7f0000000540)="$eJzs3cFvVE8dAPDv23Zp6a/8CspBjQoiioawbRdoCBfhojGExEg8eYDaLk3TXbbpLpFWDuXonUQST/onePNgwsmDN29684IHE1SioSYe1ry327K023b9dduF7ueTvL43M8t+Z7rMzL6B3QlgYJ2PiPWIOBERDyJiopWftI641TzSx71983Ru483TuSQajXv/SLLyNC/a/kzqk9ZzjkbED78X8ZNkZ9za6trSbLlcWmmlJ+uV5cna6tqVxVwrpzgzPTN14+r1Ys/aeq7ym9ffXbzzo9/99iuv/rj+7Z+l1Rr/+amsrL0dvdRsej7G2/KGI+LOYQTrk+HW3x8+Pmlv+1xEXMj6/0QMZa8mAHCcNRoT0ZhoTwMAx116/z8eSa7QWgsYj1yuUGiu4Z2NsVy5Wqtfnqg+fjQf2RrW6cjnHi6WS1OttcLTkU/S9HR2/S5dfC/9vHQ1Is5ExPORk1l5Ya5anu/nGx8AGGCfbJv//z3SnP8BgGNutN8VAACOnPkfAAaP+R8ABs//Mf/7dCAAHBPu/wFg8Jj/AWDw7Dv/PzuaegAAR+IHd++mR2Oj+f3Xm9/UfWW+VFsqVB7PFeaqK8uFhWp1oVwqzDUa+z1fuVpdnr62laytrt2vVB8/qt9frMwulO6X8ofZGACgK2fOvfxzOumv3zyZHdG2l4O5Go63XL8rAPTNUL8rAPSNz/PA4OriHt8yABxzHbbofc+u/0Xohc1f4WN16YvW/2FQHWT939oBfNw+2/r/d3peD+DomcNhcDUaiT3/AWDAWOMHDvTv/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCgxrMjyRWyvcDX05+5QiHiVEScjnzycLFcmoqITyPiTyP5kTQ93e9KAwAHlPtb0tr/69LExfHtpSeS/4xk54j46S/v/eLJbL2+Mp3m/3Mrv/4izT9ZXyme6EcDAIB2t3ZmZfN3sXVuu5F/++bp3OZxlFV8fbu5uWgad6N1NEuGYzg7j0Y+Isb+lbTSTen7laEexF9/FhFf2Gz/aDxpizCerYE0dz7dHj+Nfarn8dt//9vj595rby4rS8/57Hfx+R7UBQbNy9vNcbLV99Iu3up/uTifnTv3/9FshDq4dPxL+/XGjvEvtzX+De2In2R9/vxWeu+avL72++/vyGxMNMueRXxpuFP8ZCt+0nn8zV/sso1/+fJXL+xW1vhVxKWO7d/ckbqSDbOT9cryZG117cpiZXahtFB6VCzOTM9M3bh6vTiZrVE3f/6hU4y/37z86W7x0/aP7RJ/dO/2xze6bP+v//vgx1/bI/63vt759T+7R/x0Tvxml/Fnx27tun13Gn9+l/bv8/rH5S7jv/rr2nyXDwUAjkBtdW1ptlwurexzkb7X3O8xLrq/SO/tP4BqZBexHtGrJ8wWJSKi42PSd9QfRpMP6yL5MKrRi4t+j0zAYXvX6ftdEwAAAAAAAAAAAAAAYDe11bWlkc6f1urZRb/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1vwAAAP//tBrD+w==")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0xeeee0000, 0xe, 0xf0, 0x3e, 0xfd, 0xd4, 0x10, 0x0, 0x4, 0xf, 0x7}, {0x5000, 0x2, 0x3, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0x1000, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0xeeee0000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x83, 0x0, 0x1}, {0x100000, 0xf000, 0x9, 0x80, 0x3, 0x9, 0x7, 0x81, 0x52, 0x44, 0xe, 0x48}, {0x2, 0x10000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x5, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0x8, 0x98, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x8, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x2}, {0xeeee8000, 0x5}, {0x2, 0x12}, 0x40010000, 0x0, 0x3000, 0x300, 0xd, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]})
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xdddd1000})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94)
mlockall(0x7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000a80)='./file1\x00', 0x21081e, &(0x7f0000000b80)={[{@i_version}, {@nogrpid}, {@bh}], [{@smackfshat={'smackfshat', 0x3d, 'sched_switch\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x64, 0x31, 0x33, 0x62, 0x38, 0x35], 0x2d, [0x63, 0x66, 0x33, 0x65], 0x2d, [0x34, 0x66, 0x32, 0x54], 0x2d, [0x38, 0x63, 0x33, 0x63], 0x2d, [0x64, 0x64, 0x64, 0x37, 0x36, 0x65, 0x38, 0x32]}}}, {@fowner_eq}]}, 0xfd, 0x523, &(0x7f0000001740)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==")

5m21.24052153s ago: executing program 3 (id=11513):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
epoll_create1(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000800000000da16ac83f4e4629ce4c41e2800000001850000002c00000095000000000000e84395e980d4ab43a654dbda1289491f"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100001010000000000008000be7e8533", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00'], 0x44}}, 0x20000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={r4}, 0xc)
mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101fb0000000000000000000000000000009500000000000000360a000000030000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x4, 0x2}, 0x10)

5m20.254455209s ago: executing program 3 (id=11517):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x11d)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$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")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x400ff97)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x1000}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bc21, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0x8}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8008}, 0x20004804)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x24, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40410c0)

5m3.592847403s ago: executing program 37 (id=11517):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x11d)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x400ff97)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x1000}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bc21, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0x8}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8008}, 0x20004804)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x24, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40410c0)

2m42.361948769s ago: executing program 8 (id=12154):
socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@i_version}, {@nodioread_nolock}, {@discard}, {@debug}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0xeeee0000, 0xe, 0xf0, 0x3e, 0xfd, 0xd4, 0x10, 0x0, 0x4, 0xf, 0x7}, {0x5000, 0x2, 0x3, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0x1000, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0xeeee0000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x83, 0x0, 0x1}, {0x100000, 0xf000, 0x9, 0x80, 0x3, 0x9, 0x7, 0x81, 0x52, 0x44, 0xe, 0x48}, {0x2, 0x10000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x5, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0x8, 0x98, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x8, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x2}, {0xeeee8000, 0x5}, {0x2, 0x12}, 0x40010000, 0x0, 0x3000, 0x300, 0xd, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]})
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xdddd1000})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94)
mlockall(0x7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000a80)='./file1\x00', 0x21081e, &(0x7f0000000b80)={[{@i_version}, {@nogrpid}, {@bh}], [{@smackfshat={'smackfshat', 0x3d, 'sched_switch\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x64, 0x31, 0x33, 0x62, 0x38, 0x35], 0x2d, [0x63, 0x66, 0x33, 0x65], 0x2d, [0x34, 0x66, 0x32, 0x54], 0x2d, [0x38, 0x63, 0x33, 0x63], 0x2d, [0x64, 0x64, 0x64, 0x37, 0x36, 0x65, 0x38, 0x32]}}}, {@fowner_eq}]}, 0xfd, 0x523, &(0x7f0000001740)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x182)

2m41.440170637s ago: executing program 8 (id=12158):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x9, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfe, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r7=>0xffffffffffffffff})
r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
fchdir(r9)
open(&(0x7f00000003c0)='.\x00', 0x800, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
poll(0x0, 0x0, 0x8000007)

2m40.380792317s ago: executing program 8 (id=12168):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1000040, &(0x7f0000000e80)={[{@errors_remount}]}, 0x1, 0x599, &(0x7f0000000540)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010100002800"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x0, 0x700, 0x4000002, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffd, 0x0, 0x81, 0x4, 0x0, @remote, @multicast2}}}}) (fail_nth: 5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
clock_getres(0x3, &(0x7f0000000000))
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48)

2m37.961470464s ago: executing program 8 (id=12171):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r1, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2m37.884997706s ago: executing program 8 (id=12177):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

2m35.660551479s ago: executing program 8 (id=12182):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in=@private}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) (async)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@local, @in6=@private2}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x40000, &(0x7f00000006c0)={[{@size={'size', 0x3d, [0x0, 0x38, 0x78, 0x38, 0x33]}}, {@huge_advise}, {@noswap}, {@noswap}, {@huge_within_size}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x78, 0x34, 0x33, 0x25, 0x6d, 0x1c, 0x31]}}, {@mode={'mode', 0x3d, 0x3}}, {@huge_always}, {@uid={'uid', 0x3d, r1}}], [{@smackfsfloor={'smackfsfloor', 0x3d, ']/#/#'}}, {@audit}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_lt={'fowner<', r2}}, {@appraise}]})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000900)=<r3=>0x0)
ptrace(0x4208, r3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000104000001000000002406f035101994ac", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000104000001000000002406f035101994ac", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10)
r9 = dup(r7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r11, 0x709, 0x0, 0x4, {{0x5}, {@val={0x8, 0x117}, @void}}}, 0x1c}}, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r12, 0x103, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r12, 0x103, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000008c0)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xcc, r11, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff, 0x0, 0x7, 0x5, 0x8, 0x200, 0x3]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xca7, 0x4, 0xffff, 0x9, 0x1, 0x7, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x101, 0x3, 0x7, 0xb2c, 0x100, 0x345]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x6, 0x0, 0x4, 0x0, 0x9, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x17e075fb5229bdfa, 0x12, 0x5, 0xc, 0x6c, 0xc, 0x16, 0xb, 0x6, 0x4, 0x3, 0x0, 0x9, 0x4, 0x0, 0x5, 0x36, 0x48, 0x60, 0x30, 0x1b, 0x4, 0x24, 0x3, 0x4, 0x1, 0x60, 0x16, 0x36, 0x16]}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40)

2m19.428321845s ago: executing program 38 (id=12182):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in=@private}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) (async)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@local, @in6=@private2}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x40000, &(0x7f00000006c0)={[{@size={'size', 0x3d, [0x0, 0x38, 0x78, 0x38, 0x33]}}, {@huge_advise}, {@noswap}, {@noswap}, {@huge_within_size}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x78, 0x34, 0x33, 0x25, 0x6d, 0x1c, 0x31]}}, {@mode={'mode', 0x3d, 0x3}}, {@huge_always}, {@uid={'uid', 0x3d, r1}}], [{@smackfsfloor={'smackfsfloor', 0x3d, ']/#/#'}}, {@audit}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_lt={'fowner<', r2}}, {@appraise}]})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000900)=<r3=>0x0)
ptrace(0x4208, r3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000104000001000000002406f035101994ac", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000104000001000000002406f035101994ac", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10)
r9 = dup(r7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r11, 0x709, 0x0, 0x4, {{0x5}, {@val={0x8, 0x117}, @void}}}, 0x1c}}, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r12, 0x103, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r12, 0x103, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000008c0)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xcc, r11, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff, 0x0, 0x7, 0x5, 0x8, 0x200, 0x3]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xca7, 0x4, 0xffff, 0x9, 0x1, 0x7, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x101, 0x3, 0x7, 0xb2c, 0x100, 0x345]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x6, 0x0, 0x4, 0x0, 0x9, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x17e075fb5229bdfa, 0x12, 0x5, 0xc, 0x6c, 0xc, 0x16, 0xb, 0x6, 0x4, 0x3, 0x0, 0x9, 0x4, 0x0, 0x5, 0x36, 0x48, 0x60, 0x30, 0x1b, 0x4, 0x24, 0x3, 0x4, 0x1, 0x60, 0x16, 0x36, 0x16]}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40)

1m40.856328945s ago: executing program 2 (id=12432):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r4 = dup(r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x10001, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])

1m40.743011287s ago: executing program 2 (id=12433):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async)
prlimit64(0x0, 0xe, 0x0, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f00000000c0)="6c25d25f136da810", 0x8) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
sched_setaffinity(0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0047c3009d000000000000e2ffffff00"/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)

1m40.742774367s ago: executing program 2 (id=12434):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
r0 = socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) (fail_nth: 5)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x80, r8, 0x1, 0x0, 0x2, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')

1m39.227378646s ago: executing program 2 (id=12436):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=""/116)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x0)
r0 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x63022, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file7\x00', 0x2)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x13}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_clone3(&(0x7f00000000c0)={0x142000000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1})
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m38.917694353s ago: executing program 2 (id=12441):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
epoll_create1(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000800000000da16ac83f4e4629ce4c41e2800000001850000002c00000095000000000000e84395e980d4ab43a654dbda1289491f"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x44}}, 0x20000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={r4}, 0xc)
mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101fb0000000000000000000000000000009500000000000000360a000000030000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x4, 0x2}, 0x10)

1m38.791437595s ago: executing program 2 (id=12445):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000080)={&(0x7f0000000540)=""/221, 0xdd, 0x7fffffff, 0x10})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000001100)=ANY=[])
ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
unshare(0x20040600)
timer_create(0x0, 0x0, &(0x7f0000000000))
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r8}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
unshare(0x10000)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendto$inet(r9, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)

1m38.721540996s ago: executing program 39 (id=12445):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000080)={&(0x7f0000000540)=""/221, 0xdd, 0x7fffffff, 0x10})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000001100)=ANY=[])
ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
unshare(0x20040600)
timer_create(0x0, 0x0, &(0x7f0000000000))
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r8}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
unshare(0x10000)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendto$inet(r9, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)

46.192890166s ago: executing program 4 (id=12744):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
r1 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_INIT(r4, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
chmod(&(0x7f0000000080)='./file0\x00', 0x104)

45.881983382s ago: executing program 4 (id=12747):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0)

45.861632722s ago: executing program 4 (id=12748):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet(0x2, 0xa, 0x2000000)
getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
getrlimit(0x8, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x5, 0x0, 0x0, 0xa, 0x5}, @enum={0x2}]}, {0x0, [0x2e, 0x0]}}, 0x0, 0x34, 0x0, 0x0, 0x8a10, 0x10000}, 0x28)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xfffffffffffffee9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x25dfdbff, {0x7a, 0x0, 0x0, r7, 0x14200, 0x7661c}, [@IFLA_EVENT={0x8, 0x2c, 0x8}, @IFLA_VF_PORTS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4004040)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "c1161b6c"}, @global=@item_012={0x1, 0x1, 0x2, "ff"}]}}, 0x0}, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

43.519900279s ago: executing program 4 (id=12763):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newnexthop={0x28, 0x68, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x33}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400c1}, 0x40001)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")

40.420683641s ago: executing program 4 (id=12767):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x87}}, @call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10)
pipe2$9p(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
r6 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0x5}]}, {0x0, [0x30, 0x2e, 0x61]}}, &(0x7f0000000380)=""/155, 0x2d, 0x9b, 0x1, 0x7, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r10, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r12 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r11}, 0x10)
sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)

40.018558729s ago: executing program 4 (id=12773):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000000000000ff77000007"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000540)={r0, 0x0, &(0x7f0000001700)=""/42}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/45}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x6, &(0x7f0000000080)={0x1, 0x1})
fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x2, 0x0, 0x2, 0xdbd})
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f832dd33fc02000008000000b70300000000000085000000b00000", @ANYRES64=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffd9}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r8}, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r9}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
r10 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r10, &(0x7f0000000400), 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x2000200000dbd})
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f00000004c0)=r11}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r11}, 0x10)
sync()

24.49062263s ago: executing program 40 (id=12773):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000000000000ff77000007"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000540)={r0, 0x0, &(0x7f0000001700)=""/42}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/45}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x6, &(0x7f0000000080)={0x1, 0x1})
fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x2, 0x0, 0x2, 0xdbd})
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f832dd33fc02000008000000b70300000000000085000000b00000", @ANYRES64=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffd9}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r8}, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r9}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
r10 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r10, &(0x7f0000000400), 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x2000200000dbd})
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f00000004c0)=r11}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r11}, 0x10)
sync()

8.51143219s ago: executing program 6 (id=12886):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xd, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc131b8e", 0x19)
sendfile(r2, r1, 0x0, 0x3ffff)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa3f, 0x0, 0x101, 0x100}})

8.237571785s ago: executing program 6 (id=12889):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000600), &(0x7f00000006c0)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10)
syz_usb_disconnect(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

7.356006903s ago: executing program 9 (id=12895):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
fstatfs(r7, &(0x7f0000000740)=""/199)
ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000000c0)={0x9, 0x8, '\x00', 0x1, &(0x7f0000000080)=[0x0]})
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x17, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sigaltstack(0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x0, 0x20000004, 0x0, 0x0)

7.039796329s ago: executing program 7 (id=12897):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)

6.948896671s ago: executing program 7 (id=12898):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

6.888736852s ago: executing program 5 (id=12899):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

6.01204285s ago: executing program 9 (id=12900):
socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a543"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@i_version}, {@nodioread_nolock}, {@discard}, {@debug}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0xeeee0000, 0xe, 0xf0, 0x3e, 0xfd, 0xd4, 0x10, 0x0, 0x4, 0xf, 0x7}, {0x5000, 0x2, 0x3, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0x1000, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0xeeee0000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x83, 0x0, 0x1}, {0x100000, 0xf000, 0x9, 0x80, 0x3, 0x9, 0x7, 0x81, 0x52, 0x44, 0xe, 0x48}, {0x2, 0x10000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x5, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0x8, 0x98, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x8, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x2}, {0xeeee8000, 0x5}, {0x2, 0x12}, 0x40010000, 0x0, 0x3000, 0x300, 0xd, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]})
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xdddd1000})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94)
mlockall(0x7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000a80)='./file1\x00', 0x21081e, &(0x7f0000000b80)={[{@i_version}, {@nogrpid}, {@bh}], [{@smackfshat={'smackfshat', 0x3d, 'sched_switch\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x64, 0x31, 0x33, 0x62, 0x38, 0x35], 0x2d, [0x63, 0x66, 0x33, 0x65], 0x2d, [0x34, 0x66, 0x32, 0x54], 0x2d, [0x38, 0x63, 0x33, 0x63], 0x2d, [0x64, 0x64, 0x64, 0x37, 0x36, 0x65, 0x38, 0x32]}}}, {@fowner_eq}]}, 0xfd, 0x523, &(0x7f0000001740)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x182)

5.970453221s ago: executing program 6 (id=12901):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x10000000000005)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005000000000000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2000000)

5.871625593s ago: executing program 5 (id=12902):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
sendmsg(r0, &(0x7f0000001600)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="3721de7b8a028939604b1330245506393d05cfb322466ef0189734077367e6bd398795bb3550f2535b001e5cfda437f4d6e55715fd11af2f5c88fb3e49e3efb283405fa22be28287d3394f25e64d39c111a88c38b5cf49daf5a6a538e95421cc91", 0x61}, {&(0x7f0000000100)="52e6c7afc6dbeceeb9d8e175d593d80e29b413c825908578f41c45afbb333929c147108e64ccf4cfdad34008be6ae3e4ffdb61330563df9b3d6db291fb78b1c66d3d717d63db3080a04cf7ad61495ff191bdcd42c161c55d627d8fe8e53bcd62b232ef06bd83f521ffbee81b9a6e8c04039435b09ac089a1e22c40a4d7cc751e49d7bdb1e371cdbd53df0bbee1ce83ffdb25711820e1c07993a9af0f8c4a6c0c1c4f90bbcd5c52fc433c2128aeb0ac1411b84141", 0xb4}, {&(0x7f00000001c0)="2febdee86c324d26eea515ced3ea9643d722a7faba5a5e286d47d3bc0ff5732d4e0f046c6e7a6aa17c61d1bef8541214fa804951ed05eb663e00cc2a189dd77f4dc320cfbb0dcfc9d84e79e0b36a5f", 0x4f}, {&(0x7f0000000240)="09ffd4a36a1577c785c5d1f874a864dff6cc18663088b65fc26392810ae56d87a84c3dd33be4c3488cbf4ab005884c8be359f87a131cf81292491ce78681b1f598e3fe0b64d34a12976c16fc403bf39210dcf6075f382a27162dee170105a7a3d6b52c23c32a44cc923f77d9970344b7f4014f885ebf4039c5a535c4bd8b72d2aef58698ccbc461492e8d13d15c7e433619fa96f", 0x94}], 0x4, &(0x7f0000000340)=[{0x70, 0x102, 0x0, "f5c76b48fcccce894567b465a5ecd18eced3826b7516de2954ff9b0903311a982ad76889ccb3939670828380adf86d3024a20de9331f03084d0f48cca74a09f22b694c74eb01331a8bf57d77f855adab890fe366f1418a058b63b008a3a2c959"}, {0x60, 0x6, 0x5ae8d11f, "7bc7385b39254bc8bad921d216d0a60917eaa2fdbd4685c70ef2bf1a7c492f50775ad07d33dd10a6ca139383ff2a6f9ac4a56aa0064cd1c85c6d3fc38cbe6a06166474a847182531d94732f2e92ef5cc"}, {0x1010, 0x108, 0x1ff, "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"}, {0xb0, 0x11, 0x8, "e74a2561f9fd73f50b316caebe765e0a8ec4e8040ae58cddaee0aca654c1181083784be3a510e7c9b39a5cab77cddb1741b14bfc41025d63149f4d1b29cad2939798fc89a6a7ed33ee02bd20d164e4922d0fd2f7ec5c5044559da18b8a77d0eed589f6306b5e05c8392a673d3a6250d6d815c1641bc973949cccfe54b0bb2b2b0860aa2993280711d8e74701d76acf7da2c98d805270c670b46f"}, {0x90, 0x107, 0x5df5, "584dd589331c6889f14be76dd6725c9add136faba4016cb8775ffb3b8863a308891ac2530841aaaabe488577d18ae8ecb7aace6e19b54d2ff3e1e8d8dd875fc775e23905715b2c6081d1358a6a58fc67e1a241b2db97175b4f1d8ca9d3b234cf9650e3f7dae2aa4e9890e08011dd7a900641322ac994a6cd8b47ad"}, {0x18, 0x108, 0x8, "e1"}, {0x88, 0x10e, 0x0, "6b930b759f9693ecd41e6f43f5a7f3f958e2723e3dc1211795e62647190e252ae1b5078ac74d3299897c77083fb0d1fb18f2f2eb12508ff468b72126f0f6a1feffe09a54762868d8768984a8f5546fbb4d8c80fae9b543bdb2d9274e038d4d7421bdca440b8e5081536a6e0b9e3f12040a6450"}], 0x12c0}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x4000)
mount$9p_rdma(&(0x7f0000001640), &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0), 0x800000, &(0x7f00000017c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[], [{@context={'context', 0x3d, 'root'}}, {@euid_lt={'euid<', r1}}, {@context={'context', 0x3d, 'user_u'}}]}})
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001840)=@req3={0x46c, 0x80e, 0x4, 0xb1, 0xf1e, 0xb, 0x2}, 0x1c)
r3 = accept4(r0, 0x0, &(0x7f0000001880), 0x800)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001980)={'ip6_vti0\x00', &(0x7f0000001900)={'syztnl0\x00', <r4=>0x0, 0x29, 0x7, 0x3d, 0xd, 0x48, @private1, @mcast1, 0x1, 0x20, 0x7, 0x3}})
recvfrom$packet(r3, &(0x7f00000018c0)=""/28, 0x1c, 0x40, &(0x7f00000019c0)={0x11, 0x11, r4, 0x1, 0x6, 0x6, @local}, 0x14)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001a00), 0x10001, 0x0)
quotactl_fd$Q_QUOTAON(r0, 0x0, r1, &(0x7f0000001a40)='./file0\x00')
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000001a80)={[0x38000000000000, 0xfffffffffffffffe, 0xc3da, 0x2, 0x60, 0x4, 0xfffffffffffffff9, 0x2, 0x80000001, 0x8000, 0x1f8, 0x84, 0x1, 0x1, 0x4, 0x982b], 0x8080000, 0x82000})
r6 = getpgrp(0xffffffffffffffff)
sched_setscheduler(r6, 0x6, &(0x7f0000001b40)=0x6)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000001bc0)={'sit0\x00', &(0x7f0000001b80)={@remote, @multicast2, 0xc, 0x5}})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001c40)={0x1, &(0x7f0000001c00)=[{0x401, 0xf, 0x60, 0x68}]})
ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000001c80))
eventfd2(0x8, 0x80000)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg(r7, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001cc0)="39ea9d5a9598022a6210df", 0xb}], 0x1}, 0x4000000)
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001e40)={'ip6gre0\x00', &(0x7f0000001dc0)={'ip6_vti0\x00', r4, 0x4, 0x5, 0x7, 0x2, 0x40, @mcast2, @loopback, 0x7800, 0x0, 0x7, 0x1ff}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001e80)={0x1f, <r9=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001ec0)=r9, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001f00)=r9, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000001fc0)={0x9, &(0x7f0000001f40)=[{0x9f, 0xff, 0x0, 0x400}, {0x3, 0x1, 0x7, 0x1000}, {0x8, 0x7, 0x5, 0x1}, {0x3, 0x9, 0x0, 0x6}, {0x8001, 0x0, 0xa9, 0x3190}, {0x400, 0x10, 0x2, 0x7}, {0xbb71, 0x0, 0x3, 0x1}, {0x5, 0x9, 0x3, 0x2}, {0xffff, 0x7, 0x8, 0x10000000}]})
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r10, &(0x7f0000002000)={0x2, 0x4e23, @multicast1}, 0x10)
accept$unix(r8, 0x0, &(0x7f0000002040))
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x4, &(0x7f0000002100)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}, {@max_read={'max_read', 0x3d, 0xd}}]}})
ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f00000021c0)={0x6c, "2bb23a2b7d636545d82cfb13f5e1d7bec65becfbd2577f4ff806d4c0adca0e370aa016a0cf9afaa77069186ef3907ca1c24d02f05ba76727c7bc8978d66098f927ebc00569829d12bd23a5f29b4233b5ed70f89f9b8f05eddbf490d7ec61e507254b1a45ca547c8ce926db1d"})

4.4856612s ago: executing program 9 (id=12904):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000380), &(0x7f0000000200)=r1}, 0x20)
pipe2$9p(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])

4.48521664s ago: executing program 5 (id=12905):
syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000180))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000280)={0x1f, @none}, 0x8)
r2 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x4, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x17, 0xcb}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "8ab8c8", 0x0, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}}}}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), 0x4)
listen(r1, 0xb80)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)

4.458604771s ago: executing program 9 (id=12907):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x3b6, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x58}}, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10)
poll(0x0, 0x0, 0x9)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x6020400)

4.216231496s ago: executing program 0 (id=12908):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
epoll_create1(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000800000000da16ac83f4e4629ce4c41e2800000001850000002c00000095000000000000e84395e980d4ab43a654dbda1289491f"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100001010000000000008000be7e8533", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x44}}, 0x20000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={r4}, 0xc)
mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101fb0000000000000000000000000000009500000000000000360a000000030000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x4, 0x2}, 0x10)

4.182701136s ago: executing program 6 (id=12909):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)

4.063276539s ago: executing program 6 (id=12910):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30801f", 0x1001, r4)
keyctl$search(0xa, 0x0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, r4)

2.945773211s ago: executing program 6 (id=12911):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x9800, &(0x7f0000000100)={0x1000a0, 0x100070, 0x100000}, 0x20)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x2, 0x2, 0x4, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "af45cee1"}]}}, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00')
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)

2.943602571s ago: executing program 0 (id=12912):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000600), &(0x7f00000006c0)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10)
syz_usb_disconnect(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2.941847431s ago: executing program 9 (id=12913):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x9800, &(0x7f0000000100)={0x1000a0, 0x100070, 0x100000}, 0x20)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x2, 0x2, 0x4, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "af45cee1"}]}}, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00')
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)

2.940555111s ago: executing program 7 (id=12914):
prlimit64(0x0, 0xe, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000002c0)=[{0x34, 0x1f, 0x0, 0xfffffffd}, {0x44, 0xfe, 0x5, 0x7}, {0x6}]})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r4 = socket$xdp(0x2c, 0x3, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000001440)='./file1\x00', 0x0, &(0x7f0000002880)={[0xfffffffffffffffd, &(0x7f0000002640)='udf\x00']}, 0x800)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0xdfffffff, 0x800, 0x11c, 0x1}, 0x20)
r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0)
ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000140)={r0, 0x0, 0x9})

2.932620311s ago: executing program 5 (id=12915):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x158, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000404}, 0x800)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x3b6, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x58}}, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
poll(0x0, 0x0, 0x9)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
unshare(0x6020400)

1.97772954s ago: executing program 5 (id=12916):
socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a543"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@i_version}, {@nodioread_nolock}, {@discard}, {@debug}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0xeeee0000, 0xe, 0xf0, 0x3e, 0xfd, 0xd4, 0x10, 0x0, 0x4, 0xf, 0x7}, {0x5000, 0x2, 0x3, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0x1000, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0xeeee0000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x83, 0x0, 0x1}, {0x100000, 0xf000, 0x9, 0x80, 0x3, 0x9, 0x7, 0x81, 0x52, 0x44, 0xe, 0x48}, {0x2, 0x10000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x5, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0x8, 0x98, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x8, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x2}, {0xeeee8000, 0x5}, {0x2, 0x12}, 0x40010000, 0x0, 0x3000, 0x300, 0xd, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]})
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xdddd1000})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94)
mlockall(0x7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000a80)='./file1\x00', 0x21081e, &(0x7f0000000b80)={[{@i_version}, {@nogrpid}, {@bh}], [{@smackfshat={'smackfshat', 0x3d, 'sched_switch\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x64, 0x31, 0x33, 0x62, 0x38, 0x35], 0x2d, [0x63, 0x66, 0x33, 0x65], 0x2d, [0x34, 0x66, 0x32, 0x54], 0x2d, [0x38, 0x63, 0x33, 0x63], 0x2d, [0x64, 0x64, 0x64, 0x37, 0x36, 0x65, 0x38, 0x32]}}}, {@fowner_eq}]}, 0xfd, 0x523, &(0x7f0000001740)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x182)

1.836451983s ago: executing program 7 (id=12917):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000380), &(0x7f0000000200)=r1}, 0x20)
pipe2$9p(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])

1.813997124s ago: executing program 7 (id=12918):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000))
readv(r1, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/152, 0x98}], 0xfdef)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d)
ioctl$TCXONC(r2, 0x540a, 0x2)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

1.744594465s ago: executing program 7 (id=12919):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0x80)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000640)=ANY=[@ANYRESHEX=r2, @ANYRES16, @ANYRES64=r2])
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)=r9}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, r7}, 0x14)
syz_emit_ethernet(0x32, &(0x7f0000000a00)=ANY=[], 0x0)
r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r10, 0x4068aea3, &(0x7f00000001c0)={0x80, 0x0, 0xc53f})
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
syz_usb_connect$uac1(0x4, 0xa4, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x2, 0xc0, 0x27, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x9}, [@processing_unit={0x8, 0x24, 0x7, 0x6, 0x0, 0x1, "f8"}, @extension_unit={0xc, 0x24, 0x8, 0x3, 0x4, 0xd0, "d4596f8563"}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x1000, 0x2, "ccb216"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x3, 0x9, 0x2, "c618"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x46, 0x1, 0x7, 0x1a, "1e", "eae9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xa0, 0x0, 0x6, {0x7, 0x25, 0x1, 0x2, 0xe3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0xe, 0xbe, {0x7, 0x25, 0x1, 0x2, 0x0, 0x3b}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x2, 0x6, 0x6, 0x20, 0xe}, 0x3b, &(0x7f0000000080)={0x5, 0xf, 0x3b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x6, 0x7, 0x200, 0xe}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x0, 0xb, 0x8, 0xe}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xe, 0xff00, 0x2006, [0xffc000, 0xff0000, 0x3fff, 0x0, 0xc000]}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1004}}, {0xc5, &(0x7f0000000280)=@string={0xc5, 0x3, "016b689d83b25694de84eec43ab5b62ecf1fd6e63ed0d0d28fa2e3ea5adc9ea52d615a24de34028d478e21d150108ff1ebd729a4871f644babad817a8d14e2c53317cf39f9a2ffbaa999138907cb17b3fe6fd4d978b9b46e416c2270870635f3f5c08ef42d0c6e6805afed3d117ebabf586ad8a4b75d964c2362b112a86620648dbb62507887c171d847b281e47cf5abb861161709d0432db2fa0b6a584088b8f7dd8213bc7039177ac5f8742ecae1db73448c9436afbe4820dc946cd8397c9f687acd"}}, {0x97, &(0x7f0000000380)=@string={0x97, 0x3, "c4188b477c33423730fb47e4078f10ba000755b03e5c863b923f608d7d787ef9aed8fbc8f1b79ec122cf68ceb496b9925c8a70af3379bae6e3fd0b1c86951179929e8b512ecaad894f0243c94eff8eb3068f17b43717723e9477d3755b4e21f73c02f96952cf17186879a37c540665b8b735c2fb0d9d6be7258e91556f08a11d981f345aaec06b896e019cf676e02007c85f73fc45"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x801}}, {0x6b, &(0x7f0000000480)=@string={0x6b, 0x3, "21da2eaa65b6496c6d2f9a0e332cf3019b3860acb03465cad433b3d760df5fef6f779b7f12c7fd7f9479be4843d79d17747ed02d9a2c866cfbe511de1ff3bb98a4a2ad898e1a3c47ddc8925a8971d8699e0ba547428296b9f97f8aab2b89ea9fdfe1b0a21db7638b61"}}, {0x86, &(0x7f0000000500)=@string={0x86, 0x3, "c234b94869cdc17bb0017727cfcc8c777558affb11ab3ef11d4fdcf8e1fb698f3b139f620b988916af86a00ca4d0c15bfbe7c70149c824c21c37b05cad503e7623c55042dc76879dc6d2f04a371beb9da26681eff0c192a010d380391819096c95df6b50ccb35e1fcd204ce8d8621b4eaba0b21ed729fbc72f5eef8c761f4a852c76a9ab"}}]})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[])

1.371867102s ago: executing program 0 (id=12920):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)

1.294993914s ago: executing program 0 (id=12921):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8,iocharset=iso8859-6,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x152b, &(0x7f0000000a00)="$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")
r0 = io_uring_setup(0x160f, &(0x7f0000002040)={0x0, 0x4b42, 0x8, 0x7, 0xfffffffc})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}], &(0x7f0000001540)}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4004000)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8], [0x0, 0x0, 0x2004, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x71], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeea, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x4]}, 0x45c)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x48)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000005a80)={'syz0\x00', {0x2, 0x2, 0xdb, 0x7f}, 0x49, [0x3, 0xc, 0x8, 0x75, 0x9, 0x8, 0x10001, 0x0, 0x29c, 0x58, 0x200, 0xd, 0x4, 0xffffffff, 0x7, 0x8000, 0x8, 0x9, 0x10001, 0x9, 0x1613, 0x46, 0x5, 0x5, 0x9, 0x3, 0x4, 0x1, 0x10000, 0x87, 0x2, 0xce, 0x65, 0x7, 0x400, 0xd, 0xff, 0x0, 0xffff, 0x6, 0x8, 0x7cfbdd1c, 0x9f, 0x6, 0x30, 0xf, 0x10, 0x1ff, 0x7, 0x1, 0x2, 0x2c3, 0x0, 0x80, 0x1e, 0x4, 0x8, 0x8, 0x10, 0x6, 0x0, 0x7, 0x7fff, 0x7fff], [0xf5, 0x6, 0x7fff, 0x6, 0x6, 0x7, 0xffff8001, 0x1, 0x8, 0xfffffffe, 0x6, 0x7, 0x10001, 0x4, 0x8, 0x5, 0xa, 0xe785, 0x0, 0x9, 0x130, 0x9, 0x7, 0x0, 0x6, 0x6, 0x7, 0xdaa, 0x4, 0x9, 0x1, 0x3ff, 0xfcfb, 0x0, 0x4, 0xffff, 0x0, 0x1000, 0x9, 0x8, 0x2, 0x6, 0xfffffffa, 0x2, 0x2, 0xfffff801, 0x2, 0x129, 0x1ff, 0x5, 0x9, 0x2, 0x83e, 0x0, 0x5, 0x3, 0x4, 0x8, 0x9, 0x6, 0x8, 0xd9, 0x8, 0x7], [0x9, 0x4, 0x8, 0x3, 0xf, 0x7fffffff, 0x5, 0x80, 0x100, 0x400, 0x0, 0x9, 0xf, 0x7, 0x40643b6b, 0x6, 0x6, 0x7, 0x3, 0x401, 0x5, 0x80000001, 0x2, 0xe, 0x9, 0x0, 0x3e256a15, 0x4, 0xdb90, 0x9, 0x7, 0x1, 0x80000001, 0x7fff, 0x4, 0x5, 0xfffffff0, 0xb, 0x9, 0x7fff, 0x1, 0x2, 0xa70, 0x2, 0x4, 0x5, 0x8a, 0x1e, 0x7, 0x5, 0x2, 0x1, 0x4, 0x10001, 0x4, 0x7, 0x5d4, 0xff, 0x6, 0x1ff, 0x2, 0x6, 0xffffffe2, 0xc99], [0x2, 0x524d, 0x9, 0x8, 0x9, 0x256, 0x6944, 0x1, 0x8, 0x1000, 0x6, 0x1, 0x1, 0xfffffffd, 0x4feb, 0x2, 0x80, 0x0, 0xad, 0x10, 0x4, 0x1, 0x1000, 0x1, 0x1, 0x235, 0x1, 0x9, 0x80000000, 0x1c, 0x4, 0x7, 0x6, 0x2, 0x4, 0x2, 0x6, 0xffff5058, 0xfffe00, 0xfffffff8, 0x4, 0x7148, 0x7ff, 0x0, 0x401, 0xffff0001, 0x64fc, 0x9, 0x2, 0x6de, 0x4e7, 0xff, 0x90f, 0x1ff, 0x7, 0x7ff, 0xfff, 0x401, 0xf6, 0xe, 0x81, 0x9, 0x1, 0x2]}, 0x45c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f0000000200), 0x0, 0x5ae, &(0x7f00000016c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.02351612s ago: executing program 5 (id=12922):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000600), &(0x7f00000006c0)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10)
syz_usb_disconnect(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

725.349136ms ago: executing program 9 (id=12923):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
epoll_create1(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000800000000da16ac83f4e4629ce4c41e2800000001850000002c00000095000000000000e84395e980d4ab43a654dbda1289491f"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100001010000000000008000be7e8533", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x44}}, 0x20000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={r4}, 0xc)
mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101fb0000000000000000000000000000009500000000000000360a000000030000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x4, 0x2}, 0x10)

273.543615ms ago: executing program 0 (id=12924):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x8c80, &(0x7f0000000440)={[{@fmask={'fmask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x80000002}}, {@utf8}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0x801}}, {@errors_continue}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}]}, 0x23, 0x1510, &(0x7f0000003640)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0)

0s ago: executing program 0 (id=12925):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

kernel console output (not intermixed with test programs):

ive=1
[ 2285.815050][   T28] audit: type=1400 audit(1761617662.926:2639): avc:  denied  { create } for  pid=5661 comm="syz.9.12185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2285.893072][   T28] audit: type=1400 audit(1761617663.037:2640): avc:  denied  { getopt } for  pid=5661 comm="syz.9.12185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2286.132579][   T28] audit: type=1400 audit(1761617663.259:2641): avc:  denied  { read } for  pid=5667 comm="syz.7.12187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2286.883356][   T28] audit: type=1400 audit(1761617663.951:2642): avc:  denied  { read } for  pid=5674 comm="syz.9.12190" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2286.906847][   T28] audit: type=1400 audit(1761617663.951:2643): avc:  denied  { open } for  pid=5674 comm="syz.9.12190" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2286.930884][   T28] audit: type=1400 audit(1761617663.951:2644): avc:  denied  { ioctl } for  pid=5674 comm="syz.9.12190" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2287.168558][ T5687] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12193'.
[ 2287.924287][ T5691] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2289.256238][T31077] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 2289.459588][T31077] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2289.470894][T31077] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2289.480804][T31077] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2289.494101][T31077] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2289.503345][T31077] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2289.523633][T31077] usb 10-1: config 0 descriptor??
[ 2289.964112][T31077] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving
[ 2289.973224][T31077] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 2290.256230][T30670] usb 10-1: USB disconnect, device number 19
[ 2290.348363][ T5732] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2291.981504][   T28] kauditd_printk_skb: 3 callbacks suppressed
[ 2291.981525][   T28] audit: type=1400 audit(1761617668.578:2648): avc:  denied  { unlink } for  pid=5739 comm="syz.2.12210" name="#131" dev="tmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 2292.010174][   T28] audit: type=1400 audit(1761617668.587:2649): avc:  denied  { mount } for  pid=5739 comm="syz.2.12210" name="/" dev="overlay" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 2292.758014][   T28] audit: type=1400 audit(1761617669.372:2650): avc:  denied  { mounton } for  pid=5753 comm="syz.7.12214" path="/519/file0" dev="tmpfs" ino=2802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 2292.800387][   T28] audit: type=1400 audit(1761617669.372:2651): avc:  denied  { mount } for  pid=5753 comm="syz.7.12214" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 2292.936017][ T5754] futex_wake_op: syz.7.12214 tries to shift op by 36; fix this program
[ 2293.298493][   T28] audit: type=1400 audit(1761617669.871:2652): avc:  denied  { unmount } for  pid=3695 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 2293.655001][   T28] audit: type=1400 audit(1761617670.203:2653): avc:  denied  { unmount } for  pid=29468 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 2293.716838][   T28] audit: type=1400 audit(1761617670.268:2654): avc:  denied  { read } for  pid=5764 comm="syz.9.12217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2293.793228][   T28] audit: type=1400 audit(1761617670.333:2655): avc:  denied  { write } for  pid=5764 comm="syz.9.12217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2293.828967][   T28] audit: type=1400 audit(1761617670.333:2656): avc:  denied  { create } for  pid=5764 comm="syz.9.12217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1
[ 2294.665415][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12219'.
[ 2295.362217][ T5779] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2296.565357][ T5795] overlayfs: failed to resolve './file0': -2
[ 2296.941865][ T5800] tipc: Failed to remove unknown binding: 66,1,1/0:892153777/892153779
[ 2296.952129][ T5800] tipc: Failed to remove unknown binding: 66,1,1/0:892153777/892153779
[ 2299.119434][ T5821] device pim6reg1 entered promiscuous mode
[ 2299.200041][ T5827] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2299.327006][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12234'.
[ 2300.892994][   T28] audit: type=1326 audit(1761617676.880:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5843 comm="syz.9.12238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65b258eec9 code=0x0
[ 2301.389104][   T28] audit: type=1400 audit(1761617677.342:2658): avc:  denied  { mounton } for  pid=5863 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 2301.536359][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2301.550611][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2301.576413][ T5863] device bridge_slave_0 entered promiscuous mode
[ 2301.617580][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2301.644386][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2301.677696][ T5863] device bridge_slave_1 entered promiscuous mode
[ 2301.880182][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12244'.
[ 2301.991107][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2301.998424][ T5863] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2302.006481][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2302.013615][ T5863] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2302.280873][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2302.304160][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2302.324932][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2302.332644][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2302.370506][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2302.379441][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2302.388245][ T5882] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2302.417853][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2302.433408][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2302.442214][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2302.450489][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2302.460588][ T5863] device veth0_vlan entered promiscuous mode
[ 2302.478491][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2302.488163][ T5885] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2302.506520][ T5863] device veth1_macvtap entered promiscuous mode
[ 2302.523603][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2302.646348][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2302.696639][   T28] audit: type=1400 audit(1761617678.552:2659): avc:  denied  { mounton } for  pid=5863 comm="syz-executor" path="/root/syzkaller.OaZeuP/syz-tmp" dev="sda1" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 2302.723422][   T28] audit: type=1400 audit(1761617678.552:2660): avc:  denied  { mount } for  pid=5863 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 2302.746987][   T28] audit: type=1400 audit(1761617678.552:2661): avc:  denied  { mounton } for  pid=5863 comm="syz-executor" path="/root/syzkaller.OaZeuP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 2302.775174][   T28] audit: type=1400 audit(1761617678.552:2662): avc:  denied  { mounton } for  pid=5863 comm="syz-executor" path="/root/syzkaller.OaZeuP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=184426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 2302.805417][   T28] audit: type=1400 audit(1761617678.579:2663): avc:  denied  { mounton } for  pid=5863 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 2302.835221][   T28] audit: type=1400 audit(1761617678.579:2664): avc:  denied  { mounton } for  pid=5863 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[ 2303.311641][ T5898] overlayfs: conflicting lowerdir path
[ 2303.437937][ T1696] Bluetooth: hci0: command 0x1003 tx timeout
[ 2303.444823][T29702] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 2303.449527][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12254'.
[ 2303.843796][ T5921] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2303.997258][ T5927] FAULT_INJECTION: forcing a failure.
[ 2303.997258][ T5927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2304.010589][ T5927] CPU: 0 PID: 5927 Comm: syz.4.12260 Not tainted syzkaller #0
[ 2304.018113][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2304.028206][ T5927] Call Trace:
[ 2304.031526][ T5927]  <TASK>
[ 2304.034487][ T5927]  __dump_stack+0x21/0x24
[ 2304.038859][ T5927]  dump_stack_lvl+0xee/0x150
[ 2304.043484][ T5927]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2304.048538][ T5927]  ? memcpy+0x56/0x70
[ 2304.053361][ T5927]  dump_stack+0x15/0x24
[ 2304.057591][ T5927]  should_fail_ex+0x3d4/0x520
[ 2304.062304][ T5927]  should_fail+0xb/0x10
[ 2304.067909][ T5927]  should_fail_usercopy+0x1a/0x20
[ 2304.072976][ T5927]  _copy_to_user+0x1e/0x90
[ 2304.077446][ T5927]  bpf_verifier_vlog+0x179/0x390
[ 2304.082510][ T5927]  __btf_verifier_log+0xd1/0x120
[ 2304.087657][ T5927]  ? kasan_save_alloc_info+0x25/0x30
[ 2304.093086][ T5927]  ? __kasan_kmalloc+0x95/0xb0
[ 2304.097880][ T5927]  ? btf_check_sec_info+0x330/0x330
[ 2304.103168][ T5927]  ? kvmalloc_node+0x2bf/0x480
[ 2304.107960][ T5927]  ? memcpy+0x56/0x70
[ 2304.111963][ T5927]  btf_parse_hdr+0x3e3/0x830
[ 2304.116611][ T5927]  btf_new_fd+0x38d/0x7d0
[ 2304.120979][ T5927]  bpf_btf_load+0x6f/0x90
[ 2304.125464][ T5927]  __sys_bpf+0x556/0x780
[ 2304.129735][ T5927]  ? bpf_link_show_fdinfo+0x320/0x320
[ 2304.135138][ T5927]  ? __cfi_ksys_write+0x10/0x10
[ 2304.140033][ T5927]  ? debug_smp_processor_id+0x17/0x20
[ 2304.145457][ T5927]  __x64_sys_bpf+0x7c/0x90
[ 2304.149911][ T5927]  x64_sys_call+0x488/0x9a0
[ 2304.154455][ T5927]  do_syscall_64+0x4c/0xa0
[ 2304.159278][ T5927]  ? clear_bhb_loop+0x30/0x80
[ 2304.164192][ T5927]  ? clear_bhb_loop+0x30/0x80
[ 2304.169328][ T5927]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2304.175802][ T5927] RIP: 0033:0x7f0ac398eec9
[ 2304.180439][ T5927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2304.202428][ T5927] RSP: 002b:00007f0ac4780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2304.211915][ T5927] RAX: ffffffffffffffda RBX: 00007f0ac3be5fa0 RCX: 00007f0ac398eec9
[ 2304.221847][ T5927] RDX: 0000000000000028 RSI: 0000200000000340 RDI: 0000000000000012
[ 2304.229932][ T5927] RBP: 00007f0ac4780090 R08: 0000000000000000 R09: 0000000000000000
[ 2304.238102][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2304.246105][ T5927] R13: 00007f0ac3be6038 R14: 00007f0ac3be5fa0 R15: 00007fff47e43d78
[ 2304.254749][ T5927]  </TASK>
[ 2304.264278][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12261'.
[ 2304.320544][ T5934] tmpfs: Unknown parameter ''
[ 2304.369954][ T5936] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2304.762602][   T28] audit: type=1400 audit(1761617680.463:2665): avc:  denied  { bpf } for  pid=5931 comm="syz.7.12262" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2304.787378][ T5939] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[ 2304.789191][   T28] audit: type=1400 audit(1761617680.463:2666): avc:  denied  { prog_load } for  pid=5931 comm="syz.7.12262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 2305.285939][ T5945] 9pnet_fd: Insufficient options for proto=fd
[ 2305.766003][T31819] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 2306.028168][T31819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2306.047601][T31819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2306.059984][T31819] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2306.075057][T31819] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2306.085964][T31819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2306.097967][T31819] usb 5-1: config 0 descriptor??
[ 2306.516432][   T28] kauditd_printk_skb: 40 callbacks suppressed
[ 2306.516448][   T28] audit: type=1400 audit(1761617682.080:2707): avc:  denied  { create } for  pid=5973 comm="syz.0.12276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 2306.520540][ T5974] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
[ 2306.541266][T31819] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving
[ 2306.544001][ T5974] audit: out of memory in audit_log_start
[ 2306.553959][T31819] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 2306.562418][ T5974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12276'.
[ 2306.601730][ T5976] 9pnet_fd: Insufficient options for proto=fd
[ 2306.649551][   T28] audit: type=1400 audit(1761617682.200:2708): avc:  denied  { create } for  pid=5977 comm="syz.0.12278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2306.656072][ T5978] overlayfs: missing 'workdir'
[ 2306.680182][   T28] audit: type=1400 audit(1761617682.237:2709): avc:  denied  { create } for  pid=5977 comm="syz.0.12278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 2306.701047][   T28] audit: type=1400 audit(1761617682.237:2710): avc:  denied  { write } for  pid=5977 comm="syz.0.12278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 2306.797211][ T5982] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2307.656345][   T28] audit: type=1400 audit(1761617682.421:2711): avc:  denied  { ioctl } for  pid=5957 comm="syz.4.12273" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 2307.663925][T31077] usb 5-1: USB disconnect, device number 20
[ 2307.710741][T29702] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 2307.710790][ T1696] Bluetooth: hci0: command 0x1003 tx timeout
[ 2307.737517][   T28] audit: type=1400 audit(1761617682.440:2712): avc:  denied  { create } for  pid=5977 comm="syz.0.12278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2307.761670][   T28] audit: type=1400 audit(1761617682.440:2713): avc:  denied  { bind } for  pid=5977 comm="syz.0.12278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2307.786917][   T28] audit: type=1400 audit(1761617682.440:2714): avc:  denied  { setopt } for  pid=5977 comm="syz.0.12278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2308.202434][ T5993] xt_bpf: check failed: parse error
[ 2308.732006][ T6001] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2308.875423][ T6011] 9pnet_fd: Insufficient options for proto=fd
[ 2311.727334][ T6059] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2311.927377][ T1696] Bluetooth: hci0: command 0x1003 tx timeout
[ 2311.927404][T29702] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 2312.612507][   T28] kauditd_printk_skb: 13 callbacks suppressed
[ 2312.612527][   T28] audit: type=1400 audit(1761617687.713:2728): avc:  denied  { write } for  pid=6066 comm="syz.4.12306" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2312.612589][ T6067] random: crng reseeded on system resumption
[ 2312.619242][   T28] audit: type=1400 audit(1761617687.713:2729): avc:  denied  { open } for  pid=6066 comm="syz.4.12306" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2312.707394][   T28] audit: type=1326 audit(1761617687.750:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.4.12306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ac398eec9 code=0x0
[ 2312.749927][   T28] audit: type=1400 audit(1761617687.833:2731): avc:  denied  { read } for  pid=6072 comm="syz.4.12309" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 2312.777617][   T28] audit: type=1400 audit(1761617687.833:2732): avc:  denied  { open } for  pid=6072 comm="syz.4.12309" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 2312.993957][ T6075] input: syz1 as /devices/virtual/input/input28
[ 2313.045047][   T28] audit: type=1400 audit(1761617688.036:2733): avc:  denied  { read append } for  pid=6072 comm="syz.4.12309" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 2313.070692][   T28] audit: type=1400 audit(1761617688.045:2734): avc:  denied  { open } for  pid=6072 comm="syz.4.12309" path="/14/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 2313.097129][   T28] audit: type=1400 audit(1761617688.055:2735): avc:  denied  { ioctl } for  pid=6072 comm="syz.4.12309" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 2313.125695][   T28] audit: type=1400 audit(1761617688.101:2736): avc:  denied  { read } for  pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1416 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 2313.151178][   T28] audit: type=1400 audit(1761617688.101:2737): avc:  denied  { open } for  pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1416 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 2314.959703][ T1696] Bluetooth: hci0: command 0x1003 tx timeout
[ 2314.966042][T29702] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 2315.026754][ T6101] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2315.484387][ T6117] syz.9.12323 (6117): /proc/6117/oom_adj is deprecated, please use /proc/6117/oom_score_adj instead.
[ 2315.759250][ T6121] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2316.583659][ T6124] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12320'.
[ 2317.431319][ T6142] netlink: 337 bytes leftover after parsing attributes in process `syz.0.12331'.
[ 2317.449910][T31819] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 2317.731426][T31819] usb 5-1: Using ep0 maxpacket: 8
[ 2317.750481][T31819] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2318.306994][T31819] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2318.319950][ T6149] device veth1_macvtap left promiscuous mode
[ 2318.320120][T31819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2318.326212][ T6149] device macsec0 entered promiscuous mode
[ 2318.335290][T31819] usb 5-1: Product: syz
[ 2318.345039][T31819] usb 5-1: Manufacturer: syz
[ 2318.414181][T31819] usb 5-1: SerialNumber: syz
[ 2319.327241][ T6156] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12333'.
[ 2319.348985][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12337'.
[ 2319.479579][   T28] kauditd_printk_skb: 8 callbacks suppressed
[ 2319.479597][   T28] audit: type=1400 audit(1761617694.057:2746): avc:  denied  { audit_read } for  pid=6166 comm="syz.7.12339" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2319.575550][   T28] audit: type=1400 audit(1761617694.140:2747): avc:  denied  { read write } for  pid=6166 comm="syz.7.12339" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 2319.583086][T31153] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 2319.600775][   T28] audit: type=1400 audit(1761617694.140:2748): avc:  denied  { open } for  pid=6166 comm="syz.7.12339" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 2319.630491][   T28] audit: type=1400 audit(1761617694.140:2749): avc:  denied  { map } for  pid=6166 comm="syz.7.12339" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=184881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2319.655340][   T28] audit: type=1400 audit(1761617694.140:2750): avc:  denied  { read write } for  pid=6166 comm="syz.7.12339" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=184881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2319.767066][T31153] usb 10-1: device descriptor read/64, error -71
[ 2319.843443][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2319.852126][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2319.860617][   T28] audit: type=1400 audit(1761617694.408:2751): avc:  denied  { write } for  pid=6135 comm="syz.4.12328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2320.070295][T31153] usb 10-1: device descriptor read/64, error -71
[ 2320.314588][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2320.323273][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2320.338223][T31819] cdc_ncm 5-1:1.0: bind() failure
[ 2320.344990][T31819] cdc_ncm: probe of 5-1:1.1 failed with error -71
[ 2320.352574][T31819] cdc_mbim: probe of 5-1:1.1 failed with error -71
[ 2320.361032][T31819] usb 5-1: USB disconnect, device number 21
[ 2320.367673][T31153] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 2320.535936][T31153] usb 10-1: device descriptor read/64, error -71
[ 2321.317952][T31153] usb 10-1: device descriptor read/64, error -71
[ 2321.391522][T31819] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 2321.727190][ T6196] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2321.873504][T31153] usb usb10-port1: attempt power cycle
[ 2321.991990][T31819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2322.004104][T31819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2322.015675][T31819] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2322.029592][T31819] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2322.038850][T31819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2322.064678][T31819] usb 5-1: config 0 descriptor??
[ 2322.208589][   T28] audit: type=1400 audit(1761617696.578:2752): avc:  denied  { read } for  pid=6193 comm="syz.7.12347" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2322.234015][   T28] audit: type=1400 audit(1761617696.578:2753): avc:  denied  { open } for  pid=6193 comm="syz.7.12347" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2322.259759][   T28] audit: type=1400 audit(1761617696.578:2754): avc:  denied  { ioctl } for  pid=6193 comm="syz.7.12347" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2322.554807][T31819] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving
[ 2322.616487][T31819] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 2323.196337][T31819] usb 5-1: USB disconnect, device number 22
[ 2323.268090][   T28] audit: type=1400 audit(1761617697.557:2755): avc:  denied  { ioctl } for  pid=6208 comm="syz.2.12351" path="socket:[184906]" dev="sockfs" ino=184906 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 2323.294655][ T6209] device syzkaller0 entered promiscuous mode
[ 2323.301423][ T6208] device syzkaller0 left promiscuous mode
[ 2324.741857][ T6223] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2324.914974][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12357'.
[ 2325.203256][ T6234] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2326.672562][   T28] audit: type=1400 audit(1761617700.697:2756): avc:  denied  { write } for  pid=6240 comm="syz.7.12362" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 2327.989405][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12367'.
[ 2329.152607][T29702] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 2329.276605][   T28] audit: type=1400 audit(1761617703.108:2757): avc:  denied  { mounton } for  pid=6273 comm="syz.9.12371" path="/522/file0" dev="tmpfs" ino=2827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 2329.276669][ T6274] fuse: Unknown parameter 'J'
[ 2329.492827][ T6281] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2329.745416][ T6285] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2329.895140][ T6290] 9pnet_fd: Insufficient options for proto=fd
[ 2330.050211][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12376'.
[ 2330.170892][ T6295] input: syz0 as /devices/virtual/input/input29
[ 2330.835763][   T28] audit: type=1400 audit(1761617704.548:2758): avc:  denied  { load_policy } for  pid=6302 comm="syz.0.12381" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 2330.857265][ T6305] SELinux: failed to load policy
[ 2331.014546][ T6308] overlayfs: missing 'workdir'
[ 2331.957889][   T28] audit: type=1400 audit(1761617704.678:2759): avc:  denied  { mount } for  pid=6300 comm="syz.2.12379" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 2332.028144][   T28] audit: type=1400 audit(1761617705.573:2760): avc:  denied  { unmount } for  pid=3695 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 2332.091940][ T6322] 9pnet_fd: Insufficient options for proto=fd
[ 2332.098376][   T28] audit: type=1400 audit(1761617705.703:2761): avc:  denied  { read } for  pid=6323 comm="syz.0.12387" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 2332.154758][   T28] audit: type=1400 audit(1761617705.703:2762): avc:  denied  { open } for  pid=6323 comm="syz.0.12387" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 2332.278949][   T28] audit: type=1400 audit(1761617705.703:2763): avc:  denied  { ioctl } for  pid=6323 comm="syz.0.12387" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 2332.435746][   T28] audit: type=1400 audit(1761617705.795:2764): avc:  denied  { connect } for  pid=6323 comm="syz.0.12387" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2332.474773][   T28] audit: type=1400 audit(1761617705.952:2765): avc:  denied  { name_bind } for  pid=6331 comm="syz.0.12389" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[ 2332.497433][   T28] audit: type=1400 audit(1761617706.007:2766): avc:  denied  { mount } for  pid=6331 comm="syz.0.12389" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 2332.521187][   T28] audit: type=1400 audit(1761617706.007:2767): avc:  denied  { read } for  pid=6331 comm="syz.0.12389" dev="nsfs" ino=4026532319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 2332.564694][   T28] audit: type=1400 audit(1761617706.007:2768): avc:  denied  { open } for  pid=6331 comm="syz.0.12389" path="cgroup:[4026532319]" dev="nsfs" ino=4026532319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 2333.303524][   T28] audit: type=1400 audit(1761617706.820:2769): avc:  denied  { unmount } for  pid=5312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 2333.343129][ T6342] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2333.385395][ T6346] random: crng reseeded on system resumption
[ 2333.437270][   T28] audit: type=1400 audit(1761617706.940:2770): avc:  denied  { ioctl } for  pid=6348 comm="syz.7.12394" path="socket:[186184]" dev="sockfs" ino=186184 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2333.464304][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12394'.
[ 2333.510100][ T6352] cgroup: Unknown subsys name 'smackfsdef'
[ 2334.044831][ T6362] 9pnet_fd: Insufficient options for proto=fd
[ 2335.469634][ T6380] random: crng reseeded on system resumption
[ 2335.518665][ T6382] tipc: Started in network mode
[ 2335.523705][ T6382] tipc: Node identity ee6722a6292e, cluster identity 4711
[ 2335.530972][ T6382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2335.540095][ T6382] device syzkaller0 entered promiscuous mode
[ 2335.547888][ T6382] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 2335.562959][ T6382] tipc: Resetting bearer <eth:syzkaller0>
[ 2335.569865][ T6381] tipc: Resetting bearer <eth:syzkaller0>
[ 2335.579993][ T6381] tipc: Disabling bearer <eth:syzkaller0>
[ 2335.663963][ T6389] 9pnet_fd: Insufficient options for proto=fd
[ 2335.804038][T25744] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 2335.966294][T25744] usb 5-1: device descriptor read/64, error -71
[ 2336.258737][T25744] usb 5-1: device descriptor read/64, error -71
[ 2336.871344][ T1696] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 2337.448549][T25744] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 2337.612234][T25744] usb 5-1: device descriptor read/64, error -71
[ 2337.915444][T25744] usb 5-1: device descriptor read/64, error -71
[ 2338.002402][ T6416] random: crng reseeded on system resumption
[ 2338.045489][T25744] usb usb5-port1: attempt power cycle
[ 2338.366140][ T6425] FAULT_INJECTION: forcing a failure.
[ 2338.366140][ T6425] name failslab, interval 1, probability 0, space 0, times 0
[ 2338.380840][ T6425] CPU: 0 PID: 6425 Comm: syz.2.12420 Not tainted syzkaller #0
[ 2338.389090][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2338.400671][ T6425] Call Trace:
[ 2338.404136][ T6425]  <TASK>
[ 2338.407091][ T6425]  __dump_stack+0x21/0x24
[ 2338.411451][ T6425]  dump_stack_lvl+0xee/0x150
[ 2338.416068][ T6425]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2338.421617][ T6425]  dump_stack+0x15/0x24
[ 2338.425901][ T6425]  should_fail_ex+0x3d4/0x520
[ 2338.430649][ T6425]  ? security_file_alloc+0x33/0x130
[ 2338.435890][ T6425]  __should_failslab+0xac/0xf0
[ 2338.441047][ T6425]  should_failslab+0x9/0x20
[ 2338.446675][ T6425]  kmem_cache_alloc+0x3b/0x330
[ 2338.451935][ T6425]  ? __alloc_file+0x28/0x2a0
[ 2338.456578][ T6425]  security_file_alloc+0x33/0x130
[ 2338.461646][ T6425]  __alloc_file+0xb5/0x2a0
[ 2338.466101][ T6425]  alloc_empty_file+0x97/0x180
[ 2338.471079][ T6425]  path_openat+0xf4/0x2f50
[ 2338.476290][ T6425]  ? kasan_set_track+0x4b/0x70
[ 2338.481633][ T6425]  ? kasan_save_alloc_info+0x25/0x30
[ 2338.487242][ T6425]  ? __kasan_slab_alloc+0x72/0x80
[ 2338.492585][ T6425]  ? kmem_cache_alloc+0x16e/0x330
[ 2338.497680][ T6425]  ? getname_flags+0xb9/0x500
[ 2338.502426][ T6425]  ? getname+0x19/0x20
[ 2338.506506][ T6425]  ? do_sys_openat2+0xcb/0x7e0
[ 2338.511315][ T6425]  ? __x64_sys_openat+0x136/0x160
[ 2338.516361][ T6425]  ? x64_sys_call+0x783/0x9a0
[ 2338.521082][ T6425]  ? do_syscall_64+0x4c/0xa0
[ 2338.526232][ T6425]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2338.532321][ T6425]  ? do_filp_open+0x3c0/0x3c0
[ 2338.537021][ T6425]  do_filp_open+0x1c1/0x3c0
[ 2338.541529][ T6425]  ? __cfi_do_filp_open+0x10/0x10
[ 2338.546581][ T6425]  ? alloc_fd+0x4e6/0x590
[ 2338.551074][ T6425]  do_sys_openat2+0x185/0x7e0
[ 2338.555878][ T6425]  ? __kasan_check_write+0x14/0x20
[ 2338.561010][ T6425]  ? do_sys_open+0xe0/0xe0
[ 2338.565883][ T6425]  ? ksys_write+0x1eb/0x240
[ 2338.570440][ T6425]  ? __cfi_ksys_write+0x10/0x10
[ 2338.575669][ T6425]  __x64_sys_openat+0x136/0x160
[ 2338.581232][ T6425]  x64_sys_call+0x783/0x9a0
[ 2338.585836][ T6425]  do_syscall_64+0x4c/0xa0
[ 2338.590277][ T6425]  ? clear_bhb_loop+0x30/0x80
[ 2338.594965][ T6425]  ? clear_bhb_loop+0x30/0x80
[ 2338.599654][ T6425]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2338.605557][ T6425] RIP: 0033:0x7f94f038eec9
[ 2338.610090][ T6425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2338.629708][ T6425] RSP: 002b:00007f94f11d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2338.638232][ T6425] RAX: ffffffffffffffda RBX: 00007f94f05e5fa0 RCX: 00007f94f038eec9
[ 2338.646474][ T6425] RDX: 0000000000101042 RSI: 0000200000000240 RDI: ffffffffffffff9c
[ 2338.654549][ T6425] RBP: 00007f94f11d8090 R08: 0000000000000000 R09: 0000000000000000
[ 2338.662642][ T6425] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[ 2338.670738][ T6425] R13: 00007f94f05e6038 R14: 00007f94f05e5fa0 R15: 00007ffee4e3c388
[ 2338.678731][ T6425]  </TASK>
[ 2338.682226][T25744] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 2338.728820][T25744] usb 5-1: device descriptor read/8, error -71
[ 2338.890545][T25744] usb 5-1: device descriptor read/8, error -71
[ 2339.437035][   T28] kauditd_printk_skb: 3 callbacks suppressed
[ 2339.437052][   T28] audit: type=1400 audit(1761617712.481:2774): avc:  denied  { write } for  pid=6444 comm="syz.9.12427" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 2339.468222][ T6445] usb usb8: usbfs: process 6445 (syz.9.12427) did not claim interface 0 before use
[ 2339.479485][   T28] audit: type=1400 audit(1761617712.527:2775): avc:  denied  { getopt } for  pid=6444 comm="syz.9.12427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2339.672239][ T6453] random: crng reseeded on system resumption
[ 2339.732086][ T6455] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2340.774573][ T6468] FAULT_INJECTION: forcing a failure.
[ 2340.774573][ T6468] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2340.787770][ T6468] CPU: 0 PID: 6468 Comm: syz.2.12434 Not tainted syzkaller #0
[ 2340.795254][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2340.805327][ T6468] Call Trace:
[ 2340.808627][ T6468]  <TASK>
[ 2340.811590][ T6468]  __dump_stack+0x21/0x24
[ 2340.816036][ T6468]  dump_stack_lvl+0xee/0x150
[ 2340.820652][ T6468]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2340.826273][ T6468]  dump_stack+0x15/0x24
[ 2340.830556][ T6468]  should_fail_ex+0x3d4/0x520
[ 2340.835299][ T6468]  should_fail+0xb/0x10
[ 2340.839570][ T6468]  should_fail_usercopy+0x1a/0x20
[ 2340.845439][ T6468]  _copy_to_user+0x1e/0x90
[ 2340.849982][ T6468]  simple_read_from_buffer+0xe9/0x160
[ 2340.855689][ T6468]  proc_fail_nth_read+0x19a/0x210
[ 2340.860752][ T6468]  ? __cfi_proc_fail_nth_read+0x10/0x10
[ 2340.868155][ T6468]  ? security_file_permission+0x94/0xb0
[ 2340.873770][ T6468]  ? __cfi_proc_fail_nth_read+0x10/0x10
[ 2340.880037][ T6468]  vfs_read+0x26e/0x8c0
[ 2340.884236][ T6468]  ? __cfi_vfs_read+0x10/0x10
[ 2340.889121][ T6468]  ? __kasan_check_write+0x14/0x20
[ 2340.894605][ T6468]  ? mutex_lock+0x8d/0x1a0
[ 2340.899073][ T6468]  ? __cfi_mutex_lock+0x10/0x10
[ 2340.903961][ T6468]  ? __fdget_pos+0x2cd/0x380
[ 2340.908934][ T6468]  ? ksys_read+0x71/0x240
[ 2340.913322][ T6468]  ksys_read+0x140/0x240
[ 2340.917708][ T6468]  ? __cfi_ksys_read+0x10/0x10
[ 2340.922623][ T6468]  ? fput+0x154/0x1a0
[ 2340.926749][ T6468]  ? debug_smp_processor_id+0x17/0x20
[ 2340.932529][ T6468]  __x64_sys_read+0x7b/0x90
[ 2340.937207][ T6468]  x64_sys_call+0x2f/0x9a0
[ 2340.941921][ T6468]  do_syscall_64+0x4c/0xa0
[ 2340.946781][ T6468]  ? clear_bhb_loop+0x30/0x80
[ 2340.951519][ T6468]  ? clear_bhb_loop+0x30/0x80
[ 2340.956245][ T6468]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2340.962256][ T6468] RIP: 0033:0x7f94f038d8dc
[ 2340.966734][ T6468] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2340.986552][ T6468] RSP: 002b:00007f94f1196030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2340.995017][ T6468] RAX: ffffffffffffffda RBX: 00007f94f05e6180 RCX: 00007f94f038d8dc
[ 2341.003655][ T6468] RDX: 000000000000000f RSI: 00007f94f11960a0 RDI: 000000000000000a
[ 2341.012181][ T6468] RBP: 00007f94f1196090 R08: 0000000000000000 R09: 0000000000000000
[ 2341.020433][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2341.028792][ T6468] R13: 00007f94f05e6218 R14: 00007f94f05e6180 R15: 00007ffee4e3c388
[ 2341.036893][ T6468]  </TASK>
[ 2341.334756][T29702] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 2341.334916][ T1696] Bluetooth: hci0: command 0x1003 tx timeout
[ 2341.462691][   T28] audit: type=1400 audit(1761617714.356:2776): avc:  denied  { create } for  pid=6471 comm="syz.2.12436" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 2341.507116][   T28] audit: type=1400 audit(1761617714.393:2777): avc:  denied  { remount } for  pid=6471 comm="syz.2.12436" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 2341.542957][   T28] audit: type=1400 audit(1761617714.411:2778): avc:  denied  { setattr } for  pid=6471 comm="syz.2.12436" name="#13d" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 2341.578550][   T28] audit: type=1400 audit(1761617714.411:2779): avc:  denied  { rename } for  pid=6471 comm="syz.2.12436" name="#13d" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 2341.604694][   T28] audit: type=1400 audit(1761617714.411:2780): avc:  denied  { link } for  pid=6471 comm="syz.2.12436" name="00fb210001eea54bfe24ad4fc08968e1098c2c203005ac11013b04000000000000" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 2341.716912][ T6489] tipc: Invalid UDP bearer configuration
[ 2341.716938][ T6489] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 2341.759681][   T28] audit: type=1400 audit(1761617714.624:2781): avc:  denied  { create } for  pid=6490 comm="syz.7.12444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2341.793751][   T28] audit: type=1400 audit(1761617714.624:2782): avc:  denied  { connect } for  pid=6490 comm="syz.7.12444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2341.836533][   T28] audit: type=1400 audit(1761617714.624:2783): avc:  denied  { setopt } for  pid=6490 comm="syz.7.12444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2342.005192][ T6498] FAULT_INJECTION: forcing a failure.
[ 2342.005192][ T6498] name failslab, interval 1, probability 0, space 0, times 0
[ 2342.019701][ T6498] CPU: 1 PID: 6498 Comm: syz.0.12448 Not tainted syzkaller #0
[ 2342.029120][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2342.040080][ T6498] Call Trace:
[ 2342.043964][ T6498]  <TASK>
[ 2342.047098][ T6498]  __dump_stack+0x21/0x24
[ 2342.051762][ T6498]  dump_stack_lvl+0xee/0x150
[ 2342.057480][ T6498]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2342.062828][ T6498]  dump_stack+0x15/0x24
[ 2342.067203][ T6498]  should_fail_ex+0x3d4/0x520
[ 2342.072638][ T6498]  __should_failslab+0xac/0xf0
[ 2342.078229][ T6498]  ? tipc_udp_enable+0x181/0xfd0
[ 2342.083844][ T6498]  should_failslab+0x9/0x20
[ 2342.089172][ T6498]  __kmem_cache_alloc_node+0x3d/0x2c0
[ 2342.094699][ T6498]  ? unwind_get_return_address+0x4d/0x90
[ 2342.100977][ T6498]  ? tipc_udp_enable+0x181/0xfd0
[ 2342.106655][ T6498]  kmalloc_trace+0x29/0xb0
[ 2342.111402][ T6498]  tipc_udp_enable+0x181/0xfd0
[ 2342.116298][ T6498]  ? __cfi_tipc_udp_enable+0x10/0x10
[ 2342.121879][ T6498]  ? __stack_depot_save+0x36/0x480
[ 2342.128077][ T6498]  ? kasan_set_track+0x60/0x70
[ 2342.133134][ T6498]  ? kasan_set_track+0x4b/0x70
[ 2342.139639][ T6498]  ? kasan_save_alloc_info+0x25/0x30
[ 2342.146473][ T6498]  ? __kasan_kmalloc+0x95/0xb0
[ 2342.151812][ T6498]  ? kmalloc_trace+0x40/0xb0
[ 2342.156723][ T6498]  ? __tipc_nl_bearer_enable+0x9e0/0x12e0
[ 2342.163023][ T6498]  ? tipc_nl_bearer_enable+0x22/0x30
[ 2342.168447][ T6498]  ? genl_family_rcv_msg_doit+0x250/0x350
[ 2342.174475][ T6498]  ? genl_rcv_msg+0x5ea/0x770
[ 2342.179201][ T6498]  ? netlink_rcv_skb+0x1f2/0x440
[ 2342.184916][ T6498]  ? genl_rcv+0x28/0x40
[ 2342.190786][ T6498]  ? netlink_unicast+0x8ab/0xa30
[ 2342.196805][ T6498]  ? netlink_sendmsg+0x8aa/0xbc0
[ 2342.202803][ T6498]  ? ____sys_sendmsg+0x5a9/0x990
[ 2342.209202][ T6498]  ? ___sys_sendmsg+0x21c/0x290
[ 2342.214620][ T6498]  ? __x64_sys_sendmsg+0x1f0/0x2c0
[ 2342.220516][ T6498]  ? x64_sys_call+0x171/0x9a0
[ 2342.225953][ T6498]  ? do_syscall_64+0x4c/0xa0
[ 2342.231624][ T6498]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2342.238586][ T6498]  ? kasan_save_alloc_info+0x25/0x30
[ 2342.244882][ T6498]  ? __kasan_kmalloc+0x95/0xb0
[ 2342.249803][ T6498]  ? memcpy+0x56/0x70
[ 2342.253898][ T6498]  __tipc_nl_bearer_enable+0xb4a/0x12e0
[ 2342.259865][ T6498]  ? __cfi___tipc_nl_bearer_enable+0x10/0x10
[ 2342.266500][ T6498]  ? __nla_validate+0x60/0x60
[ 2342.271675][ T6498]  ? __kasan_check_write+0x14/0x20
[ 2342.277217][ T6498]  ? mutex_lock+0x8d/0x1a0
[ 2342.282128][ T6498]  ? __cfi_mutex_lock+0x10/0x10
[ 2342.287547][ T6498]  tipc_nl_bearer_enable+0x22/0x30
[ 2342.293415][ T6498]  genl_family_rcv_msg_doit+0x250/0x350
[ 2342.299238][ T6498]  ? arch_stack_walk+0xfc/0x150
[ 2342.304412][ T6498]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[ 2342.311337][ T6498]  ? memcpy+0x56/0x70
[ 2342.315484][ T6498]  genl_rcv_msg+0x5ea/0x770
[ 2342.320390][ T6498]  ? kasan_set_track+0x4b/0x70
[ 2342.325721][ T6498]  ? kasan_save_alloc_info+0x25/0x30
[ 2342.332879][ T6498]  ? __kasan_kmalloc+0x95/0xb0
[ 2342.338955][ T6498]  ? __cfi_genl_rcv_msg+0x10/0x10
[ 2342.344736][ T6498]  ? __cfi_tipc_nl_bearer_enable+0x10/0x10
[ 2342.350814][ T6498]  ? selinux_nlmsg_lookup+0x33c/0x4c0
[ 2342.356418][ T6498]  netlink_rcv_skb+0x1f2/0x440
[ 2342.361693][ T6498]  ? __cfi_genl_rcv_msg+0x10/0x10
[ 2342.366746][ T6498]  ? __cfi_netlink_rcv_skb+0x10/0x10
[ 2342.372065][ T6498]  ? down_read+0xa0/0xf0
[ 2342.376343][ T6498]  ? __cfi_down_read+0x10/0x10
[ 2342.381138][ T6498]  ? __netlink_lookup+0x387/0x3b0
[ 2342.386191][ T6498]  genl_rcv+0x28/0x40
[ 2342.390325][ T6498]  netlink_unicast+0x8ab/0xa30
[ 2342.395127][ T6498]  netlink_sendmsg+0x8aa/0xbc0
[ 2342.399916][ T6498]  ? __cfi_netlink_sendmsg+0x10/0x10
[ 2342.405409][ T6498]  ? kasan_record_aux_stack_noalloc+0xb/0x10
[ 2342.411645][ T6498]  ? security_socket_sendmsg+0x93/0xb0
[ 2342.417419][ T6498]  ? __cfi_netlink_sendmsg+0x10/0x10
[ 2342.423008][ T6498]  ____sys_sendmsg+0x5a9/0x990
[ 2342.427828][ T6498]  ? __sys_sendmsg_sock+0x40/0x40
[ 2342.433232][ T6498]  ? import_iovec+0x7c/0xb0
[ 2342.437967][ T6498]  ___sys_sendmsg+0x21c/0x290
[ 2342.443121][ T6498]  ? __sys_sendmsg+0x270/0x270
[ 2342.448709][ T6498]  ? __kasan_check_write+0x14/0x20
[ 2342.454219][ T6498]  ? proc_fail_nth_write+0x17a/0x1f0
[ 2342.459725][ T6498]  ? vfs_write+0x9d6/0xca0
[ 2342.464367][ T6498]  ? __fdget+0x19c/0x220
[ 2342.468809][ T6498]  __x64_sys_sendmsg+0x1f0/0x2c0
[ 2342.473767][ T6498]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 2342.479285][ T6498]  ? fpregs_assert_state_consistent+0xb1/0xe0
[ 2342.486351][ T6498]  x64_sys_call+0x171/0x9a0
[ 2342.490973][ T6498]  do_syscall_64+0x4c/0xa0
[ 2342.495533][ T6498]  ? clear_bhb_loop+0x30/0x80
[ 2342.500537][ T6498]  ? clear_bhb_loop+0x30/0x80
[ 2342.505232][ T6498]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2342.511229][ T6498] RIP: 0033:0x7f01b558eec9
[ 2342.515675][ T6498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2342.535462][ T6498] RSP: 002b:00007f01b6500038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2342.543980][ T6498] RAX: ffffffffffffffda RBX: 00007f01b57e5fa0 RCX: 00007f01b558eec9
[ 2342.551976][ T6498] RDX: 0000000020000054 RSI: 0000200000000100 RDI: 0000000000000003
[ 2342.560210][ T6498] RBP: 00007f01b6500090 R08: 0000000000000000 R09: 0000000000000000
[ 2342.568186][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2342.576179][ T6498] R13: 00007f01b57e6038 R14: 00007f01b57e5fa0 R15: 00007ffddad57188
[ 2342.584199][ T6498]  </TASK>
[ 2342.588850][ T6498] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 2342.666825][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2342.674079][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2342.681965][ T6499] device bridge_slave_0 entered promiscuous mode
[ 2342.689412][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2342.697066][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2342.705365][ T6499] device bridge_slave_1 entered promiscuous mode
[ 2342.776956][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2342.784375][ T6499] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2342.791832][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2342.799526][ T6499] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2342.809039][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2342.816855][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2342.853971][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2342.862219][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2342.877880][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2342.886943][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2342.895304][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2342.902508][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2342.925352][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2342.937361][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2342.946908][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2342.955258][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2342.973686][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12451'.
[ 2342.984438][ T6518] device bridge_slave_1 left promiscuous mode
[ 2342.991028][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2342.999321][ T6518] device bridge_slave_0 left promiscuous mode
[ 2343.007368][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2343.074256][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2343.083509][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2343.092143][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2343.101121][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2343.118718][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2343.128384][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2343.141608][ T6499] device veth0_vlan entered promiscuous mode
[ 2343.152836][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2343.162077][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2343.185306][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2343.198220][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2343.326622][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2343.338749][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2343.405302][ T6499] device veth1_macvtap entered promiscuous mode
[ 2343.500301][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2343.516029][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2343.524704][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2343.542657][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2343.552133][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2343.587686][ T6539] netlink: 76 bytes leftover after parsing attributes in process `syz.6.12454'.
[ 2343.599822][ T6539] FAULT_INJECTION: forcing a failure.
[ 2343.599822][ T6539] name failslab, interval 1, probability 0, space 0, times 0
[ 2343.612848][ T6539] CPU: 1 PID: 6539 Comm: syz.6.12454 Not tainted syzkaller #0
[ 2343.620696][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2343.630885][ T6539] Call Trace:
[ 2343.634870][ T6539]  <TASK>
[ 2343.638187][ T6539]  __dump_stack+0x21/0x24
[ 2343.643162][ T6539]  dump_stack_lvl+0xee/0x150
[ 2343.647971][ T6539]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2343.653136][ T6539]  dump_stack+0x15/0x24
[ 2343.657632][ T6539]  should_fail_ex+0x3d4/0x520
[ 2343.663068][ T6539]  __should_failslab+0xac/0xf0
[ 2343.668866][ T6539]  ? cls_bpf_init+0x51/0x150
[ 2343.673506][ T6539]  should_failslab+0x9/0x20
[ 2343.678067][ T6539]  __kmem_cache_alloc_node+0x3d/0x2c0
[ 2343.686186][ T6539]  ? tcf_proto_create+0x66/0x310
[ 2343.691880][ T6539]  ? cls_bpf_init+0x51/0x150
[ 2343.696888][ T6539]  kmalloc_trace+0x29/0xb0
[ 2343.701356][ T6539]  cls_bpf_init+0x51/0x150
[ 2343.706305][ T6539]  tcf_proto_create+0x213/0x310
[ 2343.711205][ T6539]  tc_new_tfilter+0xe0e/0x1900
[ 2343.716025][ T6539]  ? __cfi_tc_new_tfilter+0x10/0x10
[ 2343.721885][ T6539]  ? security_capable+0x99/0xc0
[ 2343.726972][ T6539]  ? ns_capable+0x8c/0xf0
[ 2343.731867][ T6539]  ? netlink_net_capable+0x125/0x160
[ 2343.737203][ T6539]  ? __cfi_tc_new_tfilter+0x10/0x10
[ 2343.742797][ T6539]  rtnetlink_rcv_msg+0x973/0xcf0
[ 2343.748563][ T6539]  ? __cfi_rtnetlink_rcv_msg+0x10/0x10
[ 2343.754654][ T6539]  ? kernel_text_address+0xa0/0xd0
[ 2343.759924][ T6539]  ? __kernel_text_address+0xd/0x30
[ 2343.765419][ T6539]  ? unwind_get_return_address+0x4d/0x90
[ 2343.771870][ T6539]  ? memcpy+0x56/0x70
[ 2343.776083][ T6539]  ? avc_has_perm_noaudit+0x2f4/0x460
[ 2343.781486][ T6539]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[ 2343.788118][ T6539]  ? slab_post_alloc_hook+0x4f/0x2d0
[ 2343.794789][ T6539]  ? kmem_cache_alloc_node+0x181/0x340
[ 2343.800720][ T6539]  ? __alloc_skb+0xea/0x4b0
[ 2343.805339][ T6539]  ? avc_has_perm+0x158/0x240
[ 2343.810078][ T6539]  ? __alloc_skb+0x236/0x4b0
[ 2343.814896][ T6539]  ? netlink_sendmsg+0x626/0xbc0
[ 2343.819939][ T6539]  ? __cfi_avc_has_perm+0x10/0x10
[ 2343.824981][ T6539]  ? selinux_nlmsg_lookup+0x416/0x4c0
[ 2343.830468][ T6539]  netlink_rcv_skb+0x1f2/0x440
[ 2343.835609][ T6539]  ? __cfi_rtnetlink_rcv_msg+0x10/0x10
[ 2343.841711][ T6539]  ? __cfi_netlink_rcv_skb+0x10/0x10
[ 2343.847991][ T6539]  ? __netlink_lookup+0x387/0x3b0
[ 2343.853844][ T6539]  rtnetlink_rcv+0x1c/0x20
[ 2343.859278][ T6539]  netlink_unicast+0x8ab/0xa30
[ 2343.864288][ T6539]  netlink_sendmsg+0x8aa/0xbc0
[ 2343.869428][ T6539]  ? __cfi_netlink_sendmsg+0x10/0x10
[ 2343.874734][ T6539]  ? security_socket_sendmsg+0x93/0xb0
[ 2343.880380][ T6539]  ? __cfi_netlink_sendmsg+0x10/0x10
[ 2343.885673][ T6539]  ____sys_sendmsg+0x5a9/0x990
[ 2343.890451][ T6539]  ? __sys_sendmsg_sock+0x40/0x40
[ 2343.896192][ T6539]  ? import_iovec+0x7c/0xb0
[ 2343.900812][ T6539]  ___sys_sendmsg+0x21c/0x290
[ 2343.905509][ T6539]  ? __sys_sendmsg+0x270/0x270
[ 2343.910526][ T6539]  ? __kasan_check_write+0x14/0x20
[ 2343.915737][ T6539]  ? proc_fail_nth_write+0x17a/0x1f0
[ 2343.921554][ T6539]  ? vfs_write+0x9d6/0xca0
[ 2343.926025][ T6539]  ? __fdget+0x19c/0x220
[ 2343.930378][ T6539]  __x64_sys_sendmsg+0x1f0/0x2c0
[ 2343.935527][ T6539]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 2343.941397][ T6539]  ? fpregs_assert_state_consistent+0xb1/0xe0
[ 2343.947760][ T6539]  x64_sys_call+0x171/0x9a0
[ 2343.952374][ T6539]  do_syscall_64+0x4c/0xa0
[ 2343.956989][ T6539]  ? clear_bhb_loop+0x30/0x80
[ 2343.962054][ T6539]  ? clear_bhb_loop+0x30/0x80
[ 2343.966765][ T6539]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2343.972696][ T6539] RIP: 0033:0x7efc9d78eec9
[ 2343.977116][ T6539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2343.997002][ T6539] RSP: 002b:00007efc9e657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2344.005610][ T6539] RAX: ffffffffffffffda RBX: 00007efc9d9e5fa0 RCX: 00007efc9d78eec9
[ 2344.013770][ T6539] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000004
[ 2344.021757][ T6539] RBP: 00007efc9e657090 R08: 0000000000000000 R09: 0000000000000000
[ 2344.030351][ T6539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2344.038530][ T6539] R13: 00007efc9d9e6038 R14: 00007efc9d9e5fa0 R15: 00007ffd5cc08c18
[ 2344.046809][ T6539]  </TASK>
[ 2344.057749][T29702] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 2344.771328][ T5136] device veth1_macvtap left promiscuous mode
[ 2344.777461][ T5136] device veth0_vlan left promiscuous mode
[ 2346.053660][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12465'.
[ 2346.065230][ T6566] device bridge_slave_1 left promiscuous mode
[ 2346.072352][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2346.081218][ T6566] device bridge_slave_0 left promiscuous mode
[ 2346.088331][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2346.627089][   T28] kauditd_printk_skb: 9 callbacks suppressed
[ 2346.627363][   T28] audit: type=1400 audit(1761617718.890:2793): avc:  denied  { read } for  pid=6569 comm="syz.9.12467" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 2346.657502][   T28] audit: type=1400 audit(1761617718.890:2794): avc:  denied  { open } for  pid=6569 comm="syz.9.12467" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 2346.697997][   T28] audit: type=1400 audit(1761617719.195:2795): avc:  denied  { unmount } for  pid=5312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 2346.756655][   T28] audit: type=1400 audit(1761617719.241:2796): avc:  denied  { bind } for  pid=6575 comm="syz.0.12468" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2346.781811][   T28] audit: type=1400 audit(1761617719.250:2797): avc:  denied  { name_bind } for  pid=6575 comm="syz.0.12468" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[ 2346.804210][   T28] audit: type=1400 audit(1761617719.250:2798): avc:  denied  { node_bind } for  pid=6575 comm="syz.0.12468" saddr=172.20.20.187 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 2346.808873][ T6578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12469'.
[ 2347.410086][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12471'.
[ 2348.068665][T31077] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 2349.489535][T31077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2349.501239][T31077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2349.511107][T31077] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2349.524599][T31077] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2349.533812][T31077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2349.542650][T31077] usb 5-1: config 0 descriptor??
[ 2349.805780][   T28] audit: type=1400 audit(1761617721.994:2799): avc:  denied  { mount } for  pid=6624 comm="syz.7.12483" name="/" dev="configfs" ino=12791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 2350.285284][T31077] usbhid 5-1:0.0: can't add hid device: -71
[ 2350.292196][T31077] usbhid: probe of 5-1:0.0 failed with error -71
[ 2350.300809][T31077] usb 5-1: USB disconnect, device number 27
[ 2350.413557][ T6635] 9pnet: Could not find request transport: fd0x0000000000000006
[ 2350.607942][   T28] audit: type=1400 audit(1761617722.904:2800): avc:  denied  { ioctl } for  pid=6642 comm="syz.9.12488" path="socket:[188037]" dev="sockfs" ino=188037 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2350.641042][   T28] audit: type=1400 audit(1761617722.904:2801): avc:  denied  { bind } for  pid=6642 comm="syz.9.12488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2350.664376][   T28] audit: type=1400 audit(1761617722.904:2802): avc:  denied  { setopt } for  pid=6642 comm="syz.9.12488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2350.730656][ T6650] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[ 2350.744512][ T6650] SELinux: failed to load policy
[ 2351.844148][ T6676] incfs: Options parsing error. -22
[ 2351.877030][ T6676] incfs: mount failed -22
[ 2353.531312][ T6701] FAULT_INJECTION: forcing a failure.
[ 2353.531312][ T6701] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2353.547213][ T6701] CPU: 0 PID: 6701 Comm: syz.6.12505 Not tainted syzkaller #0
[ 2353.554778][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2353.564948][ T6701] Call Trace:
[ 2353.568264][ T6701]  <TASK>
[ 2353.571232][ T6701]  __dump_stack+0x21/0x24
[ 2353.575768][ T6701]  dump_stack_lvl+0xee/0x150
[ 2353.580915][ T6701]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2353.586166][ T6701]  dump_stack+0x15/0x24
[ 2353.590556][ T6701]  should_fail_ex+0x3d4/0x520
[ 2353.595285][ T6701]  should_fail+0xb/0x10
[ 2353.599506][ T6701]  should_fail_usercopy+0x1a/0x20
[ 2353.604648][ T6701]  _copy_to_user+0x1e/0x90
[ 2353.609119][ T6701]  simple_read_from_buffer+0xe9/0x160
[ 2353.614525][ T6701]  proc_fail_nth_read+0x19a/0x210
[ 2353.619589][ T6701]  ? __cfi_proc_fail_nth_read+0x10/0x10
[ 2353.625167][ T6701]  ? security_file_permission+0x94/0xb0
[ 2353.630767][ T6701]  ? __cfi_proc_fail_nth_read+0x10/0x10
[ 2353.636437][ T6701]  vfs_read+0x26e/0x8c0
[ 2353.640640][ T6701]  ? __cfi_vfs_read+0x10/0x10
[ 2353.645374][ T6701]  ? __kasan_check_write+0x14/0x20
[ 2353.650606][ T6701]  ? mutex_lock+0x8d/0x1a0
[ 2353.655078][ T6701]  ? __cfi_mutex_lock+0x10/0x10
[ 2353.660112][ T6701]  ? __fdget_pos+0x2cd/0x380
[ 2353.664825][ T6701]  ? ksys_read+0x71/0x240
[ 2353.669198][ T6701]  ksys_read+0x140/0x240
[ 2353.673488][ T6701]  ? __cfi_ksys_read+0x10/0x10
[ 2353.678297][ T6701]  ? fput+0x154/0x1a0
[ 2353.682318][ T6701]  ? debug_smp_processor_id+0x17/0x20
[ 2353.686732][   T28] kauditd_printk_skb: 1 callbacks suppressed
[ 2353.686753][   T28] audit: type=1400 audit(1761617725.974:2804): avc:  denied  { bind } for  pid=6689 comm="syz.7.12501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 2353.687821][ T6701]  __x64_sys_read+0x7b/0x90
[ 2353.697167][   T28] audit: type=1400 audit(1761617725.974:2805): avc:  denied  { name_bind } for  pid=6689 comm="syz.7.12501" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[ 2353.713193][ T6701]  x64_sys_call+0x2f/0x9a0
[ 2353.713227][ T6701]  do_syscall_64+0x4c/0xa0
[ 2353.713247][ T6701]  ? clear_bhb_loop+0x30/0x80
[ 2353.713273][ T6701]  ? clear_bhb_loop+0x30/0x80
[ 2353.713299][ T6701]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2353.745834][   T28] audit: type=1400 audit(1761617725.974:2806): avc:  denied  { node_bind } for  pid=6689 comm="syz.7.12501" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[ 2353.747717][ T6701] RIP: 0033:0x7efc9d78d8dc
[ 2353.747742][ T6701] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2353.747761][ T6701] RSP: 002b:00007efc9e657030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2353.818009][ T6701] RAX: ffffffffffffffda RBX: 00007efc9d9e5fa0 RCX: 00007efc9d78d8dc
[ 2353.826541][ T6701] RDX: 000000000000000f RSI: 00007efc9e6570a0 RDI: 0000000000000004
[ 2353.834584][ T6701] RBP: 00007efc9e657090 R08: 0000000000000000 R09: 0000000000000000
[ 2353.842948][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2353.851039][ T6701] R13: 00007efc9d9e6038 R14: 00007efc9d9e5fa0 R15: 00007ffd5cc08c18
[ 2353.859238][ T6701]  </TASK>
[ 2355.391648][T31153] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 2355.599698][T31153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2355.628922][T31153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2355.679643][T31153] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2355.731918][T31153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2355.746350][T31153] usb 5-1: config 0 descriptor??
[ 2356.227249][   T28] audit: type=1400 audit(1761617728.402:2807): avc:  denied  { read } for  pid=6727 comm="syz.0.12515" lport=20 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 2356.294851][   T28] audit: type=1400 audit(1761617728.468:2808): avc:  denied  { bind } for  pid=6730 comm="syz.6.12514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2356.318312][ T6729] user requested TSC rate below hardware speed
[ 2356.330719][   T28] audit: type=1400 audit(1761617728.468:2809): avc:  denied  { listen } for  pid=6730 comm="syz.6.12514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2357.317298][T31153] uclogic 0003:256C:006D.002A: failed retrieving Huion firmware version: -71
[ 2357.326459][T31153] uclogic 0003:256C:006D.002A: failed probing parameters: -71
[ 2357.334704][T31153] uclogic: probe of 0003:256C:006D.002A failed with error -71
[ 2357.344328][T31153] usb 5-1: USB disconnect, device number 28
[ 2357.408695][ T6745] device syz_tun entered promiscuous mode
[ 2357.416149][ T6745] device syz_tun left promiscuous mode
[ 2359.079197][ T6781] netlink: 260 bytes leftover after parsing attributes in process `syz.9.12531'.
[ 2359.972480][ T6790] FAULT_INJECTION: forcing a failure.
[ 2359.972480][ T6790] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2359.990509][ T6790] CPU: 0 PID: 6790 Comm: syz.7.12535 Not tainted syzkaller #0
[ 2360.000163][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2360.013171][ T6790] Call Trace:
[ 2360.017018][ T6790]  <TASK>
[ 2360.020476][ T6790]  __dump_stack+0x21/0x24
[ 2360.025912][ T6790]  dump_stack_lvl+0xee/0x150
[ 2360.031403][ T6790]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2360.036898][ T6790]  dump_stack+0x15/0x24
[ 2360.041292][ T6790]  should_fail_ex+0x3d4/0x520
[ 2360.047325][ T6790]  should_fail+0xb/0x10
[ 2360.051610][ T6790]  should_fail_usercopy+0x1a/0x20
[ 2360.057146][ T6790]  strncpy_from_user+0x24/0x2d0
[ 2360.062047][ T6790]  ? asm_exc_page_fault+0x27/0x30
[ 2360.067879][ T6790]  ? getname_flags+0xb9/0x500
[ 2360.072855][ T6790]  getname_flags+0xf4/0x500
[ 2360.077685][ T6790]  ? _copy_from_user+0x51/0xc0
[ 2360.082843][ T6790]  user_path_at_empty+0x30/0x1c0
[ 2360.087988][ T6790]  __se_sys_mount+0x2e3/0x380
[ 2360.092705][ T6790]  ? __x64_sys_mount+0xd0/0xd0
[ 2360.098169][ T6790]  ? __cfi_ksys_write+0x10/0x10
[ 2360.103323][ T6790]  __x64_sys_mount+0xbf/0xd0
[ 2360.108132][ T6790]  x64_sys_call+0x65d/0x9a0
[ 2360.112704][ T6790]  do_syscall_64+0x4c/0xa0
[ 2360.117924][ T6790]  ? clear_bhb_loop+0x30/0x80
[ 2360.122768][ T6790]  ? clear_bhb_loop+0x30/0x80
[ 2360.127852][ T6790]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2360.133897][ T6790] RIP: 0033:0x7fcf7b98eec9
[ 2360.138900][ T6790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2360.159753][ T6790] RSP: 002b:00007fcf7c8b0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2360.168603][ T6790] RAX: ffffffffffffffda RBX: 00007fcf7bbe5fa0 RCX: 00007fcf7b98eec9
[ 2360.177321][ T6790] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000
[ 2360.186469][ T6790] RBP: 00007fcf7c8b0090 R08: 00002000000003c0 R09: 0000000000000000
[ 2360.194647][ T6790] R10: 000000000000400c R11: 0000000000000246 R12: 0000000000000001
[ 2360.204037][ T6790] R13: 00007fcf7bbe6038 R14: 00007fcf7bbe5fa0 R15: 00007ffe0d6023a8
[ 2360.212052][ T6790]  </TASK>
[ 2360.653966][   T28] audit: type=1400 audit(1761617732.550:2810): avc:  denied  { mount } for  pid=6806 comm="syz.9.12541" name="/" dev="ramfs" ino=188406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 2361.209271][ T6821] netlink: 'syz.6.12545': attribute type 4 has an invalid length.
[ 2361.331206][   T28] audit: type=1400 audit(1761617733.062:2811): avc:  denied  { name_bind } for  pid=6817 comm="syz.6.12545" src=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 2361.662492][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12549'.
[ 2363.051064][ T6842] netlink: 'syz.7.12551': attribute type 3 has an invalid length.
[ 2363.059233][ T6842] netlink: 'syz.7.12551': attribute type 3 has an invalid length.
[ 2363.447521][   T28] audit: type=1400 audit(1761617735.139:2812): avc:  denied  { write } for  pid=6872 comm="syz.9.12563" name="usbmon1" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 2363.487273][T18449] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 2363.692494][T18449] usb 5-1: Using ep0 maxpacket: 32
[ 2363.700239][T18449] usb 5-1: config 5 has an invalid interface number: 63 but max is 3
[ 2363.708465][T18449] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[ 2363.718637][T18449] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 4
[ 2363.727835][T18449] usb 5-1: config 5 has no interface number 0
[ 2363.734017][T18449] usb 5-1: config 5 interface 63 altsetting 212 endpoint 0x3 has an invalid bInterval 105, changing to 7
[ 2363.745292][T18449] usb 5-1: config 5 interface 63 altsetting 212 endpoint 0x3 has invalid maxpacket 58929, setting to 1024
[ 2363.756876][T18449] usb 5-1: config 5 interface 63 altsetting 212 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2363.770220][T18449] usb 5-1: config 5 interface 63 has no altsetting 0
[ 2363.778676][T18449] usb 5-1: New USB device found, idVendor=04f2, idProduct=aff1, bcdDevice=b7.15
[ 2363.788558][T18449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2363.799230][T18449] usb 5-1: Product: 蛪᤬擕蚼뾨￈ዚ럖紑⍃檺㛅쫷闛⧅憄톇扭쌘覨⣆賎튶⒀幼훭芚讳⡿偽ך幺䡍뷽᫛졶눀碄抦ᑹﲾ싅㯌¤⑙等γ鶖㝀䠀擹皒턯塘婀ⴱ헗ꋵ☷銽팈幄퉐㖆書擲쨿℟푗橖짣䎬
[ 2363.824137][T18449] usb 5-1: Manufacturer: 㰁
[ 2363.829128][T18449] usb 5-1: SerialNumber: ш
[ 2364.024196][ T6883] syz.6.12566[6883] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2364.024260][ T6883] syz.6.12566[6883] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2364.095177][ T6886] fuse: Invalid rootmode
[ 2364.120031][ T6886] 9pnet_fd: Insufficient options for proto=fd
[ 2364.177955][ T6889] device ip6tnl1 entered promiscuous mode
[ 2364.545543][T18449] usb 5-1: USB disconnect, device number 29
[ 2365.530605][   T28] audit: type=1400 audit(1761617737.074:2813): avc:  denied  { validate_trans } for  pid=6908 comm="syz.0.12577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 2365.561706][ T6910] FAULT_INJECTION: forcing a failure.
[ 2365.561706][ T6910] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2365.590110][ T6910] CPU: 0 PID: 6910 Comm: syz.0.12577 Not tainted syzkaller #0
[ 2365.597688][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2365.607945][ T6910] Call Trace:
[ 2365.611289][ T6910]  <TASK>
[ 2365.614277][ T6910]  __dump_stack+0x21/0x24
[ 2365.618731][ T6910]  dump_stack_lvl+0xee/0x150
[ 2365.623565][ T6910]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2365.628751][ T6910]  dump_stack+0x15/0x24
[ 2365.633132][ T6910]  should_fail_ex+0x3d4/0x520
[ 2365.638381][ T6910]  should_fail+0xb/0x10
[ 2365.642700][ T6910]  should_fail_usercopy+0x1a/0x20
[ 2365.648031][ T6910]  _copy_from_user+0x1e/0xc0
[ 2365.652946][ T6910]  memdup_user_nul+0x68/0xf0
[ 2365.657758][ T6910]  sel_write_validatetrans+0x240/0x520
[ 2365.663718][ T6910]  ? avc_policy_seqno+0x1b/0x70
[ 2365.668770][ T6910]  ? __cfi_sel_write_validatetrans+0x10/0x10
[ 2365.676099][ T6910]  ? security_file_permission+0x8a/0xb0
[ 2365.682283][ T6910]  ? security_file_permission+0x94/0xb0
[ 2365.688293][ T6910]  ? __cfi_sel_write_validatetrans+0x10/0x10
[ 2365.694789][ T6910]  vfs_write+0x40c/0xca0
[ 2365.699425][ T6910]  ? slab_free_freelist_hook+0xc2/0x190
[ 2365.705338][ T6910]  ? __cfi_vfs_write+0x10/0x10
[ 2365.711225][ T6910]  ? __kasan_check_write+0x14/0x20
[ 2365.716543][ T6910]  ? mutex_lock+0x8d/0x1a0
[ 2365.721262][ T6910]  ? __cfi_mutex_lock+0x10/0x10
[ 2365.726351][ T6910]  ? __fdget_pos+0x2cd/0x380
[ 2365.730955][ T6910]  ? ksys_write+0x71/0x240
[ 2365.735681][ T6910]  ksys_write+0x140/0x240
[ 2365.740061][ T6910]  ? __cfi_ksys_write+0x10/0x10
[ 2365.744930][ T6910]  ? debug_smp_processor_id+0x17/0x20
[ 2365.750518][ T6910]  __x64_sys_write+0x7b/0x90
[ 2365.755380][ T6910]  x64_sys_call+0x27b/0x9a0
[ 2365.759895][ T6910]  do_syscall_64+0x4c/0xa0
[ 2365.764585][ T6910]  ? clear_bhb_loop+0x30/0x80
[ 2365.769284][ T6910]  ? clear_bhb_loop+0x30/0x80
[ 2365.773974][ T6910]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2365.779911][ T6910] RIP: 0033:0x7f01b558eec9
[ 2365.784428][ T6910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2365.804487][ T6910] RSP: 002b:00007f01b6500038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2365.813185][ T6910] RAX: ffffffffffffffda RBX: 00007f01b57e5fa0 RCX: 00007f01b558eec9
[ 2365.821218][ T6910] RDX: 0000000000000079 RSI: 0000200000001cc0 RDI: 0000000000000006
[ 2365.829199][ T6910] RBP: 00007f01b6500090 R08: 0000000000000000 R09: 0000000000000000
[ 2365.837274][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2365.845683][ T6910] R13: 00007f01b57e6038 R14: 00007f01b57e5fa0 R15: 00007ffddad57188
[ 2365.854380][ T6910]  </TASK>
[ 2366.022344][   T28] audit: type=1400 audit(1761617737.527:2814): avc:  denied  { create } for  pid=6920 comm="syz.6.12576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2366.059460][   T28] audit: type=1400 audit(1761617737.527:2815): avc:  denied  { ioctl } for  pid=6920 comm="syz.6.12576" path="socket:[187329]" dev="sockfs" ino=187329 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2367.714074][ T6948] FAULT_INJECTION: forcing a failure.
[ 2367.714074][ T6948] name failslab, interval 1, probability 0, space 0, times 0
[ 2367.727473][ T6948] CPU: 0 PID: 6948 Comm: syz.9.12588 Not tainted syzkaller #0
[ 2367.734982][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2367.745715][ T6948] Call Trace:
[ 2367.749116][ T6948]  <TASK>
[ 2367.752186][ T6948]  __dump_stack+0x21/0x24
[ 2367.756729][ T6948]  dump_stack_lvl+0xee/0x150
[ 2367.761538][ T6948]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2367.766796][ T6948]  dump_stack+0x15/0x24
[ 2367.771947][ T6948]  should_fail_ex+0x3d4/0x520
[ 2367.776860][ T6948]  __should_failslab+0xac/0xf0
[ 2367.782016][ T6948]  should_failslab+0x9/0x20
[ 2367.786668][ T6948]  kmem_cache_alloc_node+0x42/0x340
[ 2367.792003][ T6948]  ? __alloc_skb+0xea/0x4b0
[ 2367.796648][ T6948]  __alloc_skb+0xea/0x4b0
[ 2367.801461][ T6948]  rtmsg_fib+0x60a/0xe20
[ 2367.805914][ T6948]  fib_table_delete+0xeb1/0x1140
[ 2367.811069][ T6948]  ? arch_stack_walk+0xfc/0x150
[ 2367.816075][ T6948]  ? __cfi_fib_table_delete+0x10/0x10
[ 2367.821674][ T6948]  ? kasan_save_free_info+0x31/0x50
[ 2367.827543][ T6948]  ? ____kasan_slab_free+0x132/0x180
[ 2367.832873][ T6948]  ? __kasan_slab_free+0x11/0x20
[ 2367.838909][ T6948]  ? slab_free_freelist_hook+0xc2/0x190
[ 2367.841179][   T28] audit: type=1400 audit(1761617739.191:2816): avc:  denied  { create } for  pid=6950 comm="syz.4.12589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2367.845771][ T6948]  ? kmem_cache_free+0x12d/0x300
[ 2367.845810][ T6948]  ? kfree_skbmem+0x10c/0x180
[ 2367.845827][ T6948]  ? consume_skb+0xb3/0x1f0
[ 2367.845847][ T6948]  ? fib_new_table+0x10d/0x2b0
[ 2367.866937][   T28] audit: type=1400 audit(1761617739.191:2817): avc:  denied  { connect } for  pid=6950 comm="syz.4.12589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2367.872154][ T6948]  fib_del_ifaddr+0x15dd/0x1b90
[ 2367.872193][ T6948]  ? __cfi_fib_del_ifaddr+0x10/0x10
[ 2367.877188][   T28] audit: type=1400 audit(1761617739.191:2818): avc:  denied  { write } for  pid=6950 comm="syz.4.12589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2367.881776][ T6948]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[ 2367.881808][ T6948]  ? debug_smp_processor_id+0x17/0x20
[ 2367.953920][ T6948]  ? __wake_up+0x11b/0x190
[ 2367.958826][ T6948]  ? __kasan_check_write+0x14/0x20
[ 2367.964758][ T6948]  ? rwsem_read_trylock+0x29a/0x620
[ 2367.970078][ T6948]  ? down_read+0xa0/0xf0
[ 2367.974705][ T6948]  fib_inetaddr_event+0xc9/0x310
[ 2367.981082][ T6948]  blocking_notifier_call_chain+0xcb/0x150
[ 2367.987907][ T6948]  __inet_del_ifa+0x81f/0xd90
[ 2367.992958][ T6948]  ? __cfi_mutex_lock+0x10/0x10
[ 2367.998033][ T6948]  ? full_name_hash+0x9d/0xf0
[ 2368.002819][ T6948]  devinet_ioctl+0x860/0x1ac0
[ 2368.007618][ T6948]  inet_ioctl+0x2db/0x410
[ 2368.012365][ T6948]  ? __cfi_inet_ioctl+0x10/0x10
[ 2368.017431][ T6948]  ? ioctl_has_perm+0x391/0x4c0
[ 2368.022539][ T6948]  sock_do_ioctl+0x101/0x310
[ 2368.027795][ T6948]  ? sock_show_fdinfo+0xb0/0xb0
[ 2368.032863][ T6948]  ? selinux_file_ioctl+0x377/0x480
[ 2368.038277][ T6948]  sock_ioctl+0x4d8/0x6e0
[ 2368.042937][ T6948]  ? __cfi_sock_ioctl+0x10/0x10
[ 2368.048107][ T6948]  ? __fget_files+0x2d5/0x330
[ 2368.053616][ T6948]  ? security_file_ioctl+0x95/0xc0
[ 2368.059192][ T6948]  ? __cfi_sock_ioctl+0x10/0x10
[ 2368.065826][ T6948]  __se_sys_ioctl+0x12f/0x1b0
[ 2368.071373][ T6948]  __x64_sys_ioctl+0x7b/0x90
[ 2368.076661][ T6948]  x64_sys_call+0x58b/0x9a0
[ 2368.081948][ T6948]  do_syscall_64+0x4c/0xa0
[ 2368.087181][ T6948]  ? clear_bhb_loop+0x30/0x80
[ 2368.092002][ T6948]  ? clear_bhb_loop+0x30/0x80
[ 2368.096883][ T6948]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2368.102903][ T6948] RIP: 0033:0x7f65b258eec9
[ 2368.107498][ T6948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2368.129781][ T6948] RSP: 002b:00007f65b34b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2368.139339][ T6948] RAX: ffffffffffffffda RBX: 00007f65b27e5fa0 RCX: 00007f65b258eec9
[ 2368.148088][ T6948] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000006
[ 2368.157202][ T6948] RBP: 00007f65b34b3090 R08: 0000000000000000 R09: 0000000000000000
[ 2368.166189][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2368.175153][ T6948] R13: 00007f65b27e6038 R14: 00007f65b27e5fa0 R15: 00007ffc3dd4a5d8
[ 2368.184381][ T6948]  </TASK>
[ 2368.214174][ T5136] tipc: Left network mode
[ 2368.248798][   T28] audit: type=1400 audit(1761617739.588:2819): avc:  denied  { mounton } for  pid=6953 comm="syz.0.12590" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[ 2368.249181][ T6955] incfs: Can't find or create .index dir in ./bus
[ 2368.287115][ T6955] incfs: mount failed -1
[ 2368.429705][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2368.450252][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2368.467158][ T6949] device bridge_slave_0 entered promiscuous mode
[ 2368.478056][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2368.487225][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2368.509198][ T6949] device bridge_slave_1 entered promiscuous mode
[ 2368.684058][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2368.691199][ T6949] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2368.698621][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2368.705677][ T6949] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2369.211525][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2369.249965][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2369.345866][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2369.419284][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2369.428701][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2369.457878][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2369.474551][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2369.497947][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2369.515151][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2369.526279][   T28] audit: type=1400 audit(1761617740.761:2820): avc:  denied  { wake_alarm } for  pid=7000 comm="syz.9.12603" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2369.536100][ T6949] device veth0_vlan entered promiscuous mode
[ 2369.556856][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2369.566323][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2369.575922][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2369.606713][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2369.617754][ T5136] device veth1_macvtap left promiscuous mode
[ 2369.625351][ T5136] device veth0_vlan left promiscuous mode
[ 2369.778224][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2369.787317][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2369.796072][ T7009] netlink: 'syz.9.12607': attribute type 27 has an invalid length.
[ 2370.514119][ T7009] device bridge1 left promiscuous mode
[ 2370.982574][ T6949] device veth1_macvtap entered promiscuous mode
[ 2370.989799][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2371.017514][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2371.026995][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2371.035585][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2371.045446][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2371.174771][   T28] audit: type=1400 audit(1761617742.285:2821): avc:  denied  { getopt } for  pid=7020 comm="syz.4.12610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2371.227417][   T28] audit: type=1400 audit(1761617742.331:2822): avc:  denied  { listen } for  pid=7017 comm="syz.7.12587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2371.641767][ T7025] device wireguard0 entered promiscuous mode
[ 2372.311223][   T28] audit: type=1400 audit(1761617743.338:2823): avc:  denied  { read } for  pid=7031 comm="syz.7.12612" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2372.395699][   T28] audit: type=1400 audit(1761617743.412:2824): avc:  denied  { ioctl } for  pid=7031 comm="syz.7.12612" path="socket:[189608]" dev="sockfs" ino=189608 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2372.488569][ T7041] FAULT_INJECTION: forcing a failure.
[ 2372.488569][ T7041] name failslab, interval 1, probability 0, space 0, times 0
[ 2372.502388][ T7041] CPU: 1 PID: 7041 Comm: syz.6.12614 Not tainted syzkaller #0
[ 2372.510499][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2372.521017][ T7041] Call Trace:
[ 2372.524459][ T7041]  <TASK>
[ 2372.527461][ T7041]  __dump_stack+0x21/0x24
[ 2372.531901][ T7041]  dump_stack_lvl+0xee/0x150
[ 2372.536722][ T7041]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2372.541945][ T7041]  ? preempt_schedule_irq+0xbb/0x110
[ 2372.547354][ T7041]  ? __cfi_preempt_schedule_irq+0x10/0x10
[ 2372.553215][ T7041]  dump_stack+0x15/0x24
[ 2372.559254][ T7041]  should_fail_ex+0x3d4/0x520
[ 2372.564673][ T7041]  ? vm_area_alloc+0xe9/0x1a0
[ 2372.569468][ T7041]  __should_failslab+0xac/0xf0
[ 2372.574468][ T7041]  should_failslab+0x9/0x20
[ 2372.579357][ T7041]  kmem_cache_alloc+0x3b/0x330
[ 2372.584329][ T7041]  vm_area_alloc+0xe9/0x1a0
[ 2372.588951][ T7041]  alloc_bprm+0x2d3/0x750
[ 2372.593656][ T7041]  ? __check_object_size+0x45a/0x600
[ 2372.600901][ T7041]  do_execveat_common+0x1ab/0xa70
[ 2372.607880][ T7041]  ? getname_flags+0x206/0x500
[ 2372.613299][ T7041]  __x64_sys_execveat+0xce/0xf0
[ 2372.618543][ T7041]  x64_sys_call+0x5d8/0x9a0
[ 2372.623866][ T7041]  do_syscall_64+0x4c/0xa0
[ 2372.628303][ T7041]  ? clear_bhb_loop+0x30/0x80
[ 2372.633089][ T7041]  ? clear_bhb_loop+0x30/0x80
[ 2372.638475][ T7041]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2372.645452][ T7041] RIP: 0033:0x7efc9d78eec9
[ 2372.650936][ T7041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2372.677268][ T7041] RSP: 002b:00007efc9e615038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[ 2372.686947][ T7041] RAX: ffffffffffffffda RBX: 00007efc9d9e6180 RCX: 00007efc9d78eec9
[ 2372.697650][ T7041] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 2372.707910][ T7041] RBP: 00007efc9e615090 R08: 0000000000001000 R09: 0000000000000000
[ 2372.716699][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2372.726031][ T7041] R13: 00007efc9d9e6218 R14: 00007efc9d9e6180 R15: 00007ffd5cc08c18
[ 2372.734944][ T7041]  </TASK>
[ 2374.017587][   T28] audit: type=1400 audit(1761617744.843:2825): avc:  denied  { connect } for  pid=7070 comm="syz.4.12625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 2376.777771][ T7111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12636'.
[ 2378.156171][T31077] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 2378.196546][   T28] audit: type=1400 audit(1761617748.766:2826): avc:  denied  { setopt } for  pid=7122 comm="syz.9.12640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2378.197332][ T7124] incfs: Options parsing error. -22
[ 2378.227347][ T7124] incfs: mount failed -22
[ 2378.274637][   T28] audit: type=1400 audit(1761617748.766:2827): avc:  denied  { listen } for  pid=7122 comm="syz.9.12640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2378.360416][T31077] usb 5-1: Using ep0 maxpacket: 32
[ 2378.366949][T31077] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2378.414584][T31077] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2378.467980][T31077] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2378.490633][   T28] audit: type=1400 audit(1761617749.043:2828): avc:  denied  { bind } for  pid=7148 comm="syz.7.12650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 2378.515047][T31077] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2378.526182][T31077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2378.534288][T31077] usb 5-1: Product: syz
[ 2378.538621][T31077] usb 5-1: Manufacturer: syz
[ 2378.543245][T31077] usb 5-1: SerialNumber: syz
[ 2378.549972][T31077] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[ 2378.557526][T31077] cdc_ncm 5-1:1.0: bind() failure
[ 2378.783016][ T2527] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 2378.851334][T31819] usb 5-1: USB disconnect, device number 30
[ 2378.991348][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2379.038541][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2379.048298][ T7156] overlayfs: failed to resolve './file2': -2
[ 2379.049366][ T2527] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2379.067962][ T2527] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2379.068556][ T7156] fuse: Bad value for 'fd'
[ 2379.077278][ T2527] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2379.090619][ T2527] usb 10-1: config 0 descriptor??
[ 2379.531680][ T2527] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving
[ 2379.601250][ T2527] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 2379.776020][  T299] usb 10-1: USB disconnect, device number 23
[ 2380.971731][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12662'.
[ 2381.286626][ T7197] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2382.401134][ T7216] netlink: 112 bytes leftover after parsing attributes in process `syz.4.12671'.
[ 2382.410863][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12671'.
[ 2382.457311][   T28] audit: type=1400 audit(1761617752.707:2829): avc:  denied  { execute } for  pid=7213 comm="syz.0.12670" path="/129/file1" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 2383.738587][   T28] audit: type=1400 audit(1761617753.880:2830): avc:  denied  { remount } for  pid=7232 comm="syz.0.12676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 2384.682065][ T7247] syz.7.12678[7247] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2384.682211][ T7247] syz.7.12678[7247] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2386.154191][ T7255] binder: 7253:7255 ioctl c0306201 200000000640 returned -22
[ 2386.382942][ T7244] 9pnet_fd: Insufficient options for proto=fd
[ 2387.561391][ T7290] syz.7.12692[7290] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2387.561484][ T7290] syz.7.12692[7290] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2388.106709][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2388.135010][   T28] audit: type=1400 audit(1761617757.941:2831): avc:  denied  { mounton } for  pid=7298 comm="syz.0.12694" path="/syzcgroup/unified/file0" dev="cgroup2" ino=407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 2388.164573][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2388.172820][ T7278] device bridge_slave_0 entered promiscuous mode
[ 2388.181166][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2388.189406][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2388.198954][ T7278] device bridge_slave_1 entered promiscuous mode
[ 2388.208068][ T7300] netlink: 'syz.4.12695': attribute type 3 has an invalid length.
[ 2388.289604][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2388.298557][ T7278] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2388.307826][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2388.318747][ T7278] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2388.567773][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2388.584085][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2388.596311][   T28] audit: type=1400 audit(1761617758.365:2832): avc:  denied  { connect } for  pid=7298 comm="syz.0.12694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2388.621002][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2388.708983][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2388.720412][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2388.729924][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2388.744517][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2388.753061][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2388.761097][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2388.790217][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2388.803975][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2388.824656][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2388.836854][   T28] audit: type=1400 audit(1761617758.587:2833): avc:  denied  { mount } for  pid=7315 comm="syz.7.12698" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 2388.844811][ T7278] device veth0_vlan entered promiscuous mode
[ 2388.872469][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2388.881841][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2388.890863][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2388.909984][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2388.921265][ T7278] device veth1_macvtap entered promiscuous mode
[ 2388.935064][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2388.947343][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2389.678737][   T28] audit: type=1400 audit(1761617759.362:2834): avc:  denied  { unmount } for  pid=6949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 2390.550487][ T7361] FAULT_INJECTION: forcing a failure.
[ 2390.550487][ T7361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2390.565318][ T7361] CPU: 0 PID: 7361 Comm: syz.9.12712 Not tainted syzkaller #0
[ 2390.573539][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2390.587389][ T7361] Call Trace:
[ 2390.591401][ T7361]  <TASK>
[ 2390.595918][ T7361]  __dump_stack+0x21/0x24
[ 2390.600926][ T7361]  dump_stack_lvl+0xee/0x150
[ 2390.607572][ T7361]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2390.613522][ T7361]  ? stack_trace_save+0x98/0xe0
[ 2390.620440][ T7361]  dump_stack+0x15/0x24
[ 2390.625500][ T7361]  should_fail_ex+0x3d4/0x520
[ 2390.630986][ T7361]  should_fail+0xb/0x10
[ 2390.635483][ T7361]  should_fail_usercopy+0x1a/0x20
[ 2390.641840][ T7361]  _copy_from_user+0x1e/0xc0
[ 2390.648241][ T7361]  ___sys_recvmsg+0x12b/0x510
[ 2390.654889][ T7361]  ? kstrtoull+0x137/0x1d0
[ 2390.660245][ T7361]  ? __sys_recvmsg+0x270/0x270
[ 2390.666259][ T7361]  ? kstrtouint_from_user+0xf7/0x150
[ 2390.673138][ T7361]  ? __fget_files+0x2d5/0x330
[ 2390.678116][ T7361]  ? __fdget+0x19c/0x220
[ 2390.682939][ T7361]  ? do_recvmmsg+0x176/0x7a0
[ 2390.689252][ T7361]  do_recvmmsg+0x359/0x7a0
[ 2390.695230][ T7361]  ? __sys_recvmmsg+0x280/0x280
[ 2390.701714][ T7361]  ? __cfi_mutex_unlock+0x10/0x10
[ 2390.708121][ T7361]  ? __kasan_check_write+0x14/0x20
[ 2390.713639][ T7361]  ? fput+0x154/0x1a0
[ 2390.719013][ T7361]  __x64_sys_recvmmsg+0x18d/0x240
[ 2390.725373][ T7361]  ? __cfi___x64_sys_recvmmsg+0x10/0x10
[ 2390.732284][ T7361]  ? fpregs_assert_state_consistent+0xb1/0xe0
[ 2390.739816][ T7361]  x64_sys_call+0x3e7/0x9a0
[ 2390.746029][ T7361]  do_syscall_64+0x4c/0xa0
[ 2390.751196][ T7361]  ? clear_bhb_loop+0x30/0x80
[ 2390.757737][ T7361]  ? clear_bhb_loop+0x30/0x80
[ 2390.765340][ T7361]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2390.774789][ T7361] RIP: 0033:0x7f828e98eec9
[ 2390.779610][ T7361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2390.803625][ T7361] RSP: 002b:00007f828f8db038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 2390.814959][ T7361] RAX: ffffffffffffffda RBX: 00007f828ebe5fa0 RCX: 00007f828e98eec9
[ 2390.825429][ T7361] RDX: 0000000000000001 RSI: 0000200000008940 RDI: 0000000000000003
[ 2390.834656][ T7361] RBP: 00007f828f8db090 R08: 0000000000000000 R09: 0000000000000000
[ 2390.843798][ T7361] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001
[ 2390.854825][ T7361] R13: 00007f828ebe6038 R14: 00007f828ebe5fa0 R15: 00007fff897bc498
[ 2390.865637][ T7361]  </TASK>
[ 2390.977621][ T7370] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12716'.
[ 2391.057958][ T6192] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 2391.264679][ T6192] usb 5-1: no configurations
[ 2391.269777][ T6192] usb 5-1: can't read configurations, error -22
[ 2391.450521][ T6192] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 2391.556725][ T7376] syz.9.12717 (7376) used greatest stack depth: 19008 bytes left
[ 2391.665175][ T6192] usb 5-1: no configurations
[ 2391.670762][ T6192] usb 5-1: can't read configurations, error -22
[ 2391.692678][ T6192] usb usb5-port1: attempt power cycle
[ 2392.655046][ T7410] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2392.921394][ T6192] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 2392.965471][ T6192] usb 5-1: no configurations
[ 2392.971532][ T6192] usb 5-1: can't read configurations, error -22
[ 2393.148910][ T6192] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 2393.182515][ T6192] usb 5-1: no configurations
[ 2393.189013][ T6192] usb 5-1: can't read configurations, error -22
[ 2393.197011][ T6192] usb usb5-port1: unable to enumerate USB device
[ 2393.365692][ T6192] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 2393.572589][ T6192] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2393.593248][ T6192] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2393.621594][ T6192] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2393.658103][ T6192] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2393.679921][ T6192] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2393.711551][ T6192] usb 10-1: config 0 descriptor??
[ 2393.866128][ T7428] 9pnet_fd: Insufficient options for proto=fd
[ 2394.158383][ T6192] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving
[ 2394.189599][ T6192] plantronics 0003:047F:FFFF.002C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 2394.379142][ T6192] usb 10-1: USB disconnect, device number 24
[ 2394.522640][   T28] audit: type=1400 audit(1761617763.830:2835): avc:  denied  { unmount } for  pid=6949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 2394.757986][   T28] audit: type=1400 audit(1761617764.051:2836): avc:  denied  { getopt } for  pid=7479 comm="syz.4.12748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 2394.961045][   T28] audit: type=1400 audit(1761617764.245:2837): avc:  denied  { compute_member } for  pid=7487 comm="syz.9.12751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 2395.089426][ T7495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2395.110150][ T2527] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[ 2395.239958][ T7484] 9pnet_fd: Insufficient options for proto=fd
[ 2395.460894][ T2527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2395.560792][ T2527] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00
[ 2395.578564][ T2527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2395.592928][ T2527] usb 5-1: config 0 descriptor??
[ 2396.177293][ T2527] wacom 0003:056A:00C6.002D: unbalanced delimiter at end of report description
[ 2396.188724][ T2527] wacom 0003:056A:00C6.002D: parse failed
[ 2396.195433][ T2527] wacom: probe of 0003:056A:00C6.002D failed with error -22
[ 2396.441009][ T2527] usb 5-1: USB disconnect, device number 35
[ 2398.837211][ T2527] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 2400.128540][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2400.141970][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2400.233115][ T2527] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2400.468409][ T2527] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2400.498942][ T2527] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2400.524390][ T2527] usb 10-1: config 0 descriptor??
[ 2400.536741][ T2527] usb 10-1: can't set config #0, error -71
[ 2400.544765][ T2527] usb 10-1: USB disconnect, device number 25
[ 2400.731415][ T7564] tipc: Started in network mode
[ 2400.739193][ T7564] tipc: Node identity 6a2a7d441c3a, cluster identity 4711
[ 2400.755717][ T7564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2400.779015][ T7564] device syzkaller0 entered promiscuous mode
[ 2400.908223][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12775'.
[ 2401.057360][ T7564] tipc: Resetting bearer <eth:syzkaller0>
[ 2401.069069][ T7564] tipc: Disabling bearer <eth:syzkaller0>
[ 2402.802471][T29702] Bluetooth: hci0: command 0x1003 tx timeout
[ 2402.811694][ T1696] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 2403.383774][ T7607] FAULT_INJECTION: forcing a failure.
[ 2403.383774][ T7607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2403.398787][ T7607] CPU: 1 PID: 7607 Comm: syz.9.12789 Not tainted syzkaller #0
[ 2403.407887][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2403.418787][ T7607] Call Trace:
[ 2403.422410][ T7607]  <TASK>
[ 2403.426515][ T7607]  __dump_stack+0x21/0x24
[ 2403.431912][ T7607]  dump_stack_lvl+0xee/0x150
[ 2403.437538][ T7607]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2403.443939][ T7607]  ? memcpy+0x56/0x70
[ 2403.448419][ T7607]  dump_stack+0x15/0x24
[ 2403.453938][ T7607]  should_fail_ex+0x3d4/0x520
[ 2403.459609][ T7607]  should_fail+0xb/0x10
[ 2403.467198][ T7607]  should_fail_usercopy+0x1a/0x20
[ 2403.472712][ T7607]  _copy_to_user+0x1e/0x90
[ 2403.479082][ T7607]  bpf_verifier_vlog+0x179/0x390
[ 2403.484773][ T7607]  __btf_verifier_log+0xd1/0x120
[ 2403.491539][ T7607]  ? kasan_save_alloc_info+0x25/0x30
[ 2403.498637][ T7607]  ? __kasan_kmalloc+0x95/0xb0
[ 2403.504230][ T7607]  ? btf_check_sec_info+0x330/0x330
[ 2403.512212][ T7607]  ? kvmalloc_node+0x2bf/0x480
[ 2403.518683][ T7607]  ? memcpy+0x56/0x70
[ 2403.524704][ T7607]  btf_parse_hdr+0x3e3/0x830
[ 2403.530970][ T7607]  btf_new_fd+0x38d/0x7d0
[ 2403.535906][ T7607]  bpf_btf_load+0x6f/0x90
[ 2403.540668][ T7607]  __sys_bpf+0x556/0x780
[ 2403.547499][ T7607]  ? bpf_link_show_fdinfo+0x320/0x320
[ 2403.554688][ T7607]  ? __cfi_ksys_write+0x10/0x10
[ 2403.560115][ T7607]  ? debug_smp_processor_id+0x17/0x20
[ 2403.566432][ T7607]  __x64_sys_bpf+0x7c/0x90
[ 2403.571961][ T7607]  x64_sys_call+0x488/0x9a0
[ 2403.576833][ T7607]  do_syscall_64+0x4c/0xa0
[ 2403.582088][ T7607]  ? clear_bhb_loop+0x30/0x80
[ 2403.589200][ T7607]  ? clear_bhb_loop+0x30/0x80
[ 2403.594408][ T7607]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2403.600470][ T7607] RIP: 0033:0x7f828e98eec9
[ 2403.605771][ T7607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2403.627606][ T7607] RSP: 002b:00007f828f8db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2403.636502][ T7607] RAX: ffffffffffffffda RBX: 00007f828ebe5fa0 RCX: 00007f828e98eec9
[ 2403.646566][ T7607] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012
[ 2403.656937][ T7607] RBP: 00007f828f8db090 R08: 0000000000000000 R09: 0000000000000000
[ 2403.665405][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2403.676069][ T7607] R13: 00007f828ebe6038 R14: 00007f828ebe5fa0 R15: 00007fff897bc498
[ 2403.687302][ T7607]  </TASK>
[ 2405.692952][ T6192] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 2405.728995][ T7644] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12801'.
[ 2405.878743][ T7649] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2405.962443][ T6192] usb 10-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 2405.978975][ T6192] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2406.000258][ T6192] usb 10-1: config 0 descriptor??
[ 2406.013809][ T6192] usb 10-1: selecting invalid altsetting 1
[ 2406.034207][ T6192] snd-usb-audio: probe of 10-1:0.0 failed with error -22
[ 2406.231473][T31153] usb 10-1: USB disconnect, device number 26
[ 2407.426063][   T28] audit: type=1400 audit(1762142063.748:2838): avc:  denied  { write } for  pid=7657 comm="syz.9.12805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2407.472879][   T28] audit: type=1400 audit(1762142063.776:2839): avc:  denied  { read } for  pid=7657 comm="syz.9.12805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2407.935676][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2408.804800][   T28] audit: type=1400 audit(1762142065.054:2840): avc:  denied  { associate } for  pid=7682 comm="syz.0.12811" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 2408.940147][ T7689] syz.0.12811[7689] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2408.941412][ T7689] syz.0.12811[7689] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2411.573898][   T28] audit: type=1400 audit(1762142065.054:2841): avc:  denied  { append } for  pid=7682 comm="syz.0.12811" name="pfkey" dev="proc" ino=4026533551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[ 2411.585122][ T7695] FAULT_INJECTION: forcing a failure.
[ 2411.585122][ T7695] name failslab, interval 1, probability 0, space 0, times 0
[ 2411.654822][   T28] audit: type=1400 audit(1762142065.430:2842): avc:  denied  { bind } for  pid=7682 comm="syz.0.12811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2411.687654][ T7695] CPU: 0 PID: 7695 Comm: syz.9.12813 Not tainted syzkaller #0
[ 2411.695636][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2411.706899][ T7695] Call Trace:
[ 2411.710308][ T7695]  <TASK>
[ 2411.713461][ T7695]  __dump_stack+0x21/0x24
[ 2411.718093][ T7695]  dump_stack_lvl+0xee/0x150
[ 2411.724547][ T7695]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2411.730054][ T7695]  dump_stack+0x15/0x24
[ 2411.735083][ T7695]  should_fail_ex+0x3d4/0x520
[ 2411.741091][ T7695]  __should_failslab+0xac/0xf0
[ 2411.747224][ T7695]  ? __xdp_reg_mem_model+0x1d3/0x590
[ 2411.753096][ T7695]  should_failslab+0x9/0x20
[ 2411.758005][ T7695]  __kmem_cache_alloc_node+0x3d/0x2c0
[ 2411.763672][ T7695]  ? __kasan_kmalloc+0x95/0xb0
[ 2411.769118][ T7695]  ? __xdp_reg_mem_model+0x1d3/0x590
[ 2411.775867][ T7695]  kmalloc_trace+0x29/0xb0
[ 2411.781881][ T7695]  __xdp_reg_mem_model+0x1d3/0x590
[ 2411.788528][ T7695]  ? page_pool_create+0x70/0x620
[ 2411.793866][ T7695]  ? kasan_save_alloc_info+0x25/0x30
[ 2411.799628][ T7695]  ? xdp_reg_mem_model+0x40/0x40
[ 2411.805221][ T7695]  ? page_pool_create+0x70/0x620
[ 2411.810604][ T7695]  xdp_reg_mem_model+0x25/0x40
[ 2411.816721][ T7695]  bpf_test_run_xdp_live+0x20e/0x19e0
[ 2411.823788][ T7695]  ? kasan_set_track+0x60/0x70
[ 2411.828974][ T7695]  ? kasan_set_track+0x4b/0x70
[ 2411.834433][ T7695]  ? kasan_save_alloc_info+0x25/0x30
[ 2411.840714][ T7695]  ? __kasan_kmalloc+0x95/0xb0
[ 2411.846128][ T7695]  ? __kmalloc+0xb1/0x1e0
[ 2411.850690][ T7695]  ? bpf_test_init+0xce/0x160
[ 2411.855852][ T7695]  ? bpf_prog_test_run+0x3e3/0x630
[ 2411.861901][ T7695]  ? __sys_bpf+0x56d/0x780
[ 2411.867005][ T7695]  ? __x64_sys_bpf+0x7c/0x90
[ 2411.872080][ T7695]  ? do_syscall_64+0x4c/0xa0
[ 2411.877025][ T7695]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2411.884391][ T7695]  ? xdp_convert_md_to_buff+0x370/0x370
[ 2411.890878][ T7695]  ? __cfi_xdp_test_run_init_page+0x10/0x10
[ 2411.897441][ T7695]  ? __kasan_check_write+0x14/0x20
[ 2411.903103][ T7695]  ? _copy_from_user+0x8f/0xc0
[ 2411.908823][ T7695]  ? bpf_test_init+0x141/0x160
[ 2411.913877][ T7695]  ? xdp_convert_md_to_buff+0x60/0x370
[ 2411.919537][ T7695]  bpf_prog_test_run_xdp+0x6f1/0xe50
[ 2411.925821][ T7695]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[ 2411.933101][ T7695]  ? __kasan_check_write+0x14/0x20
[ 2411.939184][ T7695]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[ 2411.945910][ T7695]  bpf_prog_test_run+0x3e3/0x630
[ 2411.951756][ T7695]  ? slab_free_freelist_hook+0xc2/0x190
[ 2411.958526][ T7695]  ? bpf_prog_query+0x270/0x270
[ 2411.963855][ T7695]  ? selinux_bpf+0xce/0xf0
[ 2411.969845][ T7695]  ? security_bpf+0x93/0xb0
[ 2411.974386][ T7695]  __sys_bpf+0x56d/0x780
[ 2411.979267][ T7695]  ? bpf_link_show_fdinfo+0x320/0x320
[ 2411.985242][ T7695]  ? __cfi_ksys_write+0x10/0x10
[ 2411.990583][ T7695]  ? debug_smp_processor_id+0x17/0x20
[ 2411.996172][ T7695]  __x64_sys_bpf+0x7c/0x90
[ 2412.001470][ T7695]  x64_sys_call+0x488/0x9a0
[ 2412.006848][ T7695]  do_syscall_64+0x4c/0xa0
[ 2412.011998][ T7695]  ? clear_bhb_loop+0x30/0x80
[ 2412.017156][ T7695]  ? clear_bhb_loop+0x30/0x80
[ 2412.024416][ T7695]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2412.032202][ T7695] RIP: 0033:0x7f828e98eec9
[ 2412.037574][ T7695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2412.061788][ T7695] RSP: 002b:00007f828f8db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2412.070767][ T7695] RAX: ffffffffffffffda RBX: 00007f828ebe5fa0 RCX: 00007f828e98eec9
[ 2412.079106][ T7695] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 2412.090043][ T7695] RBP: 00007f828f8db090 R08: 0000000000000000 R09: 0000000000000000
[ 2412.099672][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2412.108117][ T7695] R13: 00007f828ebe6038 R14: 00007f828ebe5fa0 R15: 00007fff897bc498
[ 2412.117840][ T7695]  </TASK>
[ 2412.163555][ T7706] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2412.236281][ T7707] FAULT_INJECTION: forcing a failure.
[ 2412.236281][ T7707] name failslab, interval 1, probability 0, space 0, times 0
[ 2412.249842][ T7707] CPU: 0 PID: 7707 Comm: syz.6.12812 Not tainted syzkaller #0
[ 2412.258593][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2412.271651][ T7707] Call Trace:
[ 2412.275049][ T7707]  <TASK>
[ 2412.278184][ T7707]  __dump_stack+0x21/0x24
[ 2412.282739][ T7707]  dump_stack_lvl+0xee/0x150
[ 2412.288467][ T7707]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2412.295145][ T7707]  ? netlink_sendmsg+0x8aa/0xbc0
[ 2412.301708][ T7707]  ? ___sys_sendmsg+0x21c/0x290
[ 2412.308247][ T7707]  ? __x64_sys_sendmsg+0x1f0/0x2c0
[ 2412.314096][ T7707]  ? x64_sys_call+0x171/0x9a0
[ 2412.319218][ T7707]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2412.327620][ T7707]  dump_stack+0x15/0x24
[ 2412.332563][ T7707]  should_fail_ex+0x3d4/0x520
[ 2412.337839][ T7707]  __should_failslab+0xac/0xf0
[ 2412.342933][ T7707]  ? alloc_lookup_fw_priv+0x1a7/0x580
[ 2412.350349][ T7707]  should_failslab+0x9/0x20
[ 2412.354898][ T7707]  __kmem_cache_alloc_node+0x3d/0x2c0
[ 2412.360579][ T7707]  ? __cfi__raw_spin_lock+0x10/0x10
[ 2412.366169][ T7707]  ? alloc_lookup_fw_priv+0x1a7/0x580
[ 2412.371583][ T7707]  kmalloc_trace+0x29/0xb0
[ 2412.376295][ T7707]  alloc_lookup_fw_priv+0x1a7/0x580
[ 2412.382853][ T7707]  ? kasan_save_alloc_info+0x25/0x30
[ 2412.388535][ T7707]  _request_firmware+0x33d/0x11f0
[ 2412.394585][ T7707]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2412.402023][ T7707]  ? __kasan_check_write+0x14/0x20
[ 2412.407713][ T7707]  ? mutex_unlock+0x89/0x220
[ 2412.412864][ T7707]  ? __cfi_mutex_unlock+0x10/0x10
[ 2412.418024][ T7707]  ? request_firmware+0x50/0x50
[ 2412.423606][ T7707]  ? __rtnl_unlock+0xae/0xc0
[ 2412.428396][ T7707]  ? netdev_run_todo+0xba2/0xc00
[ 2412.434984][ T7707]  request_firmware+0x36/0x50
[ 2412.440248][ T7707]  reg_reload_regdb+0x90/0x3d0
[ 2412.445749][ T7707]  ? __cfi_reg_reload_regdb+0x10/0x10
[ 2412.452318][ T7707]  ? rtnl_unlock+0xe/0x10
[ 2412.457318][ T7707]  ? nl80211_pre_doit+0x4f0/0x910
[ 2412.462791][ T7707]  ? genl_family_rcv_msg_attrs_parse+0x214/0x2a0
[ 2412.469658][ T7707]  nl80211_reload_regdb+0xe/0x10
[ 2412.475428][ T7707]  genl_family_rcv_msg_doit+0x250/0x350
[ 2412.481460][ T7707]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[ 2412.488058][ T7707]  ? ns_capable+0x8c/0xf0
[ 2412.492811][ T7707]  genl_rcv_msg+0x5ea/0x770
[ 2412.497704][ T7707]  ? kasan_set_track+0x4b/0x70
[ 2412.503055][ T7707]  ? kasan_save_alloc_info+0x25/0x30
[ 2412.509805][ T7707]  ? __kasan_kmalloc+0x95/0xb0
[ 2412.515179][ T7707]  ? __cfi_genl_rcv_msg+0x10/0x10
[ 2412.520848][ T7707]  ? __cfi_nl80211_reload_regdb+0x10/0x10
[ 2412.528170][ T7707]  ? selinux_nlmsg_lookup+0x33c/0x4c0
[ 2412.535355][ T7707]  netlink_rcv_skb+0x1f2/0x440
[ 2412.541040][ T7707]  ? __cfi_genl_rcv_msg+0x10/0x10
[ 2412.546971][ T7707]  ? __cfi_netlink_rcv_skb+0x10/0x10
[ 2412.553093][ T7707]  ? down_read+0xa0/0xf0
[ 2412.557665][ T7707]  ? __cfi_down_read+0x10/0x10
[ 2412.563009][ T7707]  ? __netlink_lookup+0x387/0x3b0
[ 2412.568583][ T7707]  genl_rcv+0x28/0x40
[ 2412.573216][ T7707]  netlink_unicast+0x8ab/0xa30
[ 2412.578390][ T7707]  netlink_sendmsg+0x8aa/0xbc0
[ 2412.583374][ T7707]  ? __cfi_netlink_sendmsg+0x10/0x10
[ 2412.590553][ T7707]  ? security_socket_sendmsg+0x93/0xb0
[ 2412.597121][ T7707]  ? __cfi_netlink_sendmsg+0x10/0x10
[ 2412.603760][ T7707]  ____sys_sendmsg+0x5a9/0x990
[ 2412.610437][ T7707]  ? __sys_sendmsg_sock+0x40/0x40
[ 2412.616377][ T7707]  ? import_iovec+0x7c/0xb0
[ 2412.621029][ T7707]  ___sys_sendmsg+0x21c/0x290
[ 2412.626142][ T7707]  ? __sys_sendmsg+0x270/0x270
[ 2412.631807][ T7707]  ? __kasan_check_write+0x14/0x20
[ 2412.638921][ T7707]  ? proc_fail_nth_write+0x17a/0x1f0
[ 2412.645057][ T7707]  ? vfs_write+0x9d6/0xca0
[ 2412.650811][ T7707]  ? __fdget+0x19c/0x220
[ 2412.655448][ T7707]  __x64_sys_sendmsg+0x1f0/0x2c0
[ 2412.661669][ T7707]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 2412.667206][ T7707]  ? fpregs_assert_state_consistent+0xb1/0xe0
[ 2412.673418][ T7707]  x64_sys_call+0x171/0x9a0
[ 2412.678239][ T7707]  do_syscall_64+0x4c/0xa0
[ 2412.683254][ T7707]  ? clear_bhb_loop+0x30/0x80
[ 2412.689843][ T7707]  ? clear_bhb_loop+0x30/0x80
[ 2412.695453][ T7707]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2412.702003][ T7707] RIP: 0033:0x7efc9d78eec9
[ 2412.707947][ T7707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2412.731706][ T7707] RSP: 002b:00007efc9e615038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2412.740583][ T7707] RAX: ffffffffffffffda RBX: 00007efc9d9e6180 RCX: 00007efc9d78eec9
[ 2412.748964][ T7707] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000009
[ 2412.758396][ T7707] RBP: 00007efc9e615090 R08: 0000000000000000 R09: 0000000000000000
[ 2412.768040][ T7707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2412.776290][ T7707] R13: 00007efc9d9e6218 R14: 00007efc9d9e6180 R15: 00007ffd5cc08c18
[ 2412.784827][ T7707]  </TASK>
[ 2413.105071][ T7713] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2415.154646][   T28] audit: type=1400 audit(1762666359.460:2843): avc:  denied  { map } for  pid=7737 comm="syz.9.12826" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 2416.935132][ T7763] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2416.948404][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2416.959666][ T7763] device bridge_slave_0 entered promiscuous mode
[ 2416.992088][ T7763] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2417.000819][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2417.012109][ T7763] device bridge_slave_1 entered promiscuous mode
[ 2417.094956][ T7763] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2417.104426][ T7763] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2417.114677][ T7763] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2417.123236][ T7763] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2417.159080][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2417.167985][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2417.178349][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2417.187532][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2417.199917][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2417.210820][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2417.218183][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2417.229168][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2417.240235][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2417.250305][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2417.274817][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2417.284384][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2417.309081][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2417.324150][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2417.333354][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2417.342277][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2417.352117][ T7763] device veth0_vlan entered promiscuous mode
[ 2417.366627][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2417.378660][ T7763] device veth1_macvtap entered promiscuous mode
[ 2417.392241][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2417.410411][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2417.517606][ T7793] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2417.764727][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2417.775767][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2417.837894][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2417.979290][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2418.139705][ T4938] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 2421.033444][ T7833] input input30: cannot allocate more than FF_MAX_EFFECTS effects
[ 2422.325982][   T28] audit: type=1400 audit(1762666366.332:2844): avc:  denied  { accept } for  pid=7861 comm="syz.5.12855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2422.348520][   T28] audit: type=1400 audit(1762666366.332:2845): avc:  denied  { read } for  pid=7861 comm="syz.5.12855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2422.461962][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12856'.
[ 2422.487387][ T7869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48423 sclass=netlink_route_socket pid=7869 comm=syz.5.12855
[ 2422.513785][ T7863] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12856'.
[ 2422.670841][ T7863] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12856'.
[ 2422.880737][ T7871] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2424.153518][ T7888] 9pnet_fd: Insufficient options for proto=fd
[ 2425.608992][ T7918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2425.770003][   T28] audit: type=1400 audit(1762666369.531:2846): avc:  denied  { read } for  pid=7924 comm="syz.7.12874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2429.231452][ T7931] overlayfs: unrecognized mount option "verity=require" or missing value
[ 2432.215687][   T28] audit: type=1400 audit(1762666375.500:2847): avc:  denied  { block_suspend } for  pid=7966 comm="syz.9.12887" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2432.785858][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2433.070525][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12894'.
[ 2433.608344][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12896'.
[ 2433.630680][ T7999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12896'.
[ 2433.690273][ T7999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12896'.
[ 2434.704916][   T28] audit: type=1400 audit(1762666377.801:2848): avc:  denied  { create } for  pid=8016 comm="syz.5.12902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 2434.756005][   T28] audit: type=1400 audit(1762666377.829:2849): avc:  denied  { write } for  pid=8016 comm="syz.5.12902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 2434.780448][   T28] audit: type=1400 audit(1762666377.829:2850): avc:  denied  { accept } for  pid=8016 comm="syz.5.12902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 2434.804393][   T28] audit: type=1326 audit(1762666377.838:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.5.12902" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78e6d8eec9 code=0x0
[ 2434.832817][   T28] audit: type=1400 audit(1762666377.912:2852): avc:  denied  { write } for  pid=8016 comm="syz.5.12902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2436.113325][ T1696] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 2436.209302][ T8037] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2436.213358][   T28] audit: type=1400 audit(1762666379.196:2853): avc:  denied  { setopt } for  pid=8026 comm="syz.5.12905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2436.391324][ T8039] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2437.679334][   T28] audit: type=1326 audit(1762666380.544:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.7.12914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f4698eec9 code=0x0
[ 2437.733727][ T8056] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 2438.027544][T30670] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 2438.245405][T30670] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2438.259502][T30670] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2438.595996][T30670] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2438.610567][T30670] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2438.621130][T30670] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2438.636215][T30670] usb 10-1: config 0 descriptor??
[ 2439.079960][T30670] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving
[ 2439.090424][T30670] plantronics 0003:047F:FFFF.002E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 2439.308580][T30670] usb 10-1: USB disconnect, device number 27
[ 2439.341895][ T8080] input: syz1 as /devices/virtual/input/input31
[ 2439.881466][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2440.722886][T18449] ==================================================================
[ 2440.734390][T18449] BUG: KASAN: use-after-free in hci_uart_write_work+0x4ad/0x7b0
[ 2440.743116][T18449] Read of size 8 at addr ffff88816df97728 by task kworker/1:8/18449
[ 2440.752312][T18449] 
[ 2440.754802][T18449] CPU: 1 PID: 18449 Comm: kworker/1:8 Not tainted syzkaller #0
[ 2440.763339][T18449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2440.776062][T18449] Workqueue: events hci_uart_write_work
[ 2440.783738][T18449] Call Trace:
[ 2440.787138][T18449]  <TASK>
[ 2440.790284][T18449]  __dump_stack+0x21/0x24
[ 2440.794803][T18449]  dump_stack_lvl+0xee/0x150
[ 2440.799996][T18449]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2440.806100][T18449]  ? hci_uart_write_work+0x4ad/0x7b0
[ 2440.812704][T18449]  ? hci_uart_write_work+0x4ad/0x7b0
[ 2440.820572][T18449]  print_address_description+0x71/0x200
[ 2440.827727][T18449]  print_report+0x4a/0x60
[ 2440.833754][T18449]  kasan_report+0x122/0x150
[ 2440.839800][T18449]  ? hci_uart_write_work+0x4ad/0x7b0
[ 2440.845929][T18449]  ? __cfi_pty_write+0x10/0x10
[ 2440.851569][T18449]  __asan_report_load8_noabort+0x14/0x20
[ 2440.857629][T18449]  hci_uart_write_work+0x4ad/0x7b0
[ 2440.863389][T18449]  process_one_work+0x71f/0xc40
[ 2440.868816][T18449]  worker_thread+0xa29/0x11f0
[ 2440.874162][T18449]  ? _raw_spin_lock_irqsave+0xb0/0x110
[ 2440.880826][T18449]  kthread+0x281/0x320
[ 2440.887127][T18449]  ? __cfi_worker_thread+0x10/0x10
[ 2440.894493][T18449]  ? __cfi_kthread+0x10/0x10
[ 2440.900634][T18449]  ret_from_fork+0x1f/0x30
[ 2440.907322][T18449]  </TASK>
[ 2440.912328][T18449] 
[ 2440.915710][T18449] Allocated by task 29702:
[ 2440.921046][T18449]  kasan_set_track+0x4b/0x70
[ 2440.929254][T18449]  kasan_save_alloc_info+0x25/0x30
[ 2440.936619][T18449]  __kasan_slab_alloc+0x72/0x80
[ 2440.943723][T18449]  slab_post_alloc_hook+0x4f/0x2d0
[ 2440.949745][T18449]  kmem_cache_alloc_node+0x181/0x340
[ 2440.957853][T18449]  __alloc_skb+0xea/0x4b0
[ 2440.963197][T18449]  __hci_cmd_sync_sk+0x1d1/0xcf0
[ 2440.969971][T18449]  hci_dev_open_sync+0x13a7/0x3260
[ 2440.976164][T18449]  hci_power_on+0x195/0x5c0
[ 2440.982398][T18449]  process_one_work+0x71f/0xc40
[ 2440.989223][T18449]  worker_thread+0xa29/0x11f0
[ 2440.997700][T18449]  kthread+0x281/0x320
[ 2441.002525][T18449]  ret_from_fork+0x1f/0x30
[ 2441.008110][T18449] 
[ 2441.011808][T18449] Freed by task 8096:
[ 2441.016737][T18449]  kasan_set_track+0x4b/0x70
[ 2441.023997][T18449]  kasan_save_free_info+0x31/0x50
[ 2441.030630][T18449]  ____kasan_slab_free+0x132/0x180
[ 2441.037011][T18449]  __kasan_slab_free+0x11/0x20
[ 2441.043305][T18449]  slab_free_freelist_hook+0xc2/0x190
[ 2441.049543][T18449]  kmem_cache_free+0x12d/0x300
[ 2441.055676][T18449]  kfree_skbmem+0x10c/0x180
[ 2441.061021][T18449]  kfree_skb_reason+0xdc/0x230
[ 2441.067240][T18449]  hci_uart_flush+0x90/0x3f0
[ 2441.073085][T18449]  hci_uart_tty_close+0x7a/0x230
[ 2441.078894][T18449]  tty_ldisc_kill+0x10f/0x1f0
[ 2441.084572][T18449]  tty_ldisc_hangup+0x409/0x520
[ 2441.091507][T18449]  __tty_hangup+0x58b/0x7c0
[ 2441.097802][T18449]  tty_ioctl+0x49a/0xc60
[ 2441.103509][T18449]  __se_sys_ioctl+0x12f/0x1b0
[ 2441.109776][T18449]  __x64_sys_ioctl+0x7b/0x90
[ 2441.114676][T18449]  x64_sys_call+0x58b/0x9a0
[ 2441.121003][T18449]  do_syscall_64+0x4c/0xa0
[ 2441.126087][T18449]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2441.133220][T18449] 
[ 2441.135893][T18449] The buggy address belongs to the object at ffff88816df97640
[ 2441.135893][T18449]  which belongs to the cache skbuff_head_cache of size 256
[ 2441.153643][T18449] The buggy address is located 232 bytes inside of
[ 2441.153643][T18449]  256-byte region [ffff88816df97640, ffff88816df97740)
[ 2441.169402][T18449] 
[ 2441.172531][T18449] The buggy address belongs to the physical page:
[ 2441.181309][T18449] page:ffffea0005b7e5c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16df97
[ 2441.192562][T18449] flags: 0x4000000000000200(slab|zone=1)
[ 2441.198857][T18449] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100ba0000
[ 2441.210169][T18449] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000
[ 2441.220189][T18449] page dumped because: kasan: bad access detected
[ 2441.229462][T18449] page_owner tracks the page as allocated
[ 2441.237796][T18449] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 274, tgid 274 (syz-executor), ts 2440574737575, free_ts 2440574407483
[ 2441.264232][T18449]  post_alloc_hook+0x1f5/0x210
[ 2441.269589][T18449]  prep_new_page+0x1c/0x110
[ 2441.275620][T18449]  get_page_from_freelist+0x2c7b/0x2cf0
[ 2441.281421][T18449]  __alloc_pages+0x1c3/0x450
[ 2441.286753][T18449]  alloc_slab_page+0x6e/0xf0
[ 2441.292855][T18449]  new_slab+0x98/0x3d0
[ 2441.299996][T18449]  ___slab_alloc+0x6bd/0xb20
[ 2441.305941][T18449]  __slab_alloc+0x5e/0xa0
[ 2441.310842][T18449]  kmem_cache_alloc+0x1b0/0x330
[ 2441.316686][T18449]  skb_clone+0x1f5/0x380
[ 2441.321757][T18449]  dev_queue_xmit_nit+0x1a5/0xab0
[ 2441.327868][T18449]  dev_hard_start_xmit+0x16a/0x750
[ 2441.334070][T18449]  sch_direct_xmit+0x267/0x8d0
[ 2441.339955][T18449]  __dev_queue_xmit+0x15f9/0x3420
[ 2441.346435][T18449]  ip_finish_output2+0xb09/0xef0
[ 2441.352109][T18449]  __ip_finish_output+0x172/0x370
[ 2441.359688][T18449] page last free stack trace:
[ 2441.365365][T18449]  free_unref_page_prepare+0x742/0x750
[ 2441.372536][T18449]  free_unref_page+0x8f/0x530
[ 2441.378813][T18449]  __free_pages+0x67/0x100
[ 2441.383708][T18449]  free_pages+0x82/0x90
[ 2441.390495][T18449]  poll_freewait+0x1ba/0x220
[ 2441.396005][T18449]  do_select+0x1532/0x1610
[ 2441.403031][T18449]  core_sys_select+0x4eb/0x650
[ 2441.409076][T18449]  __se_sys_pselect6+0x287/0x310
[ 2441.416698][T18449]  __x64_sys_pselect6+0xe5/0x100
[ 2441.422439][T18449]  x64_sys_call+0x1b0/0x9a0
[ 2441.428592][T18449]  do_syscall_64+0x4c/0xa0
[ 2441.435435][T18449]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2441.443210][T18449] 
[ 2441.445899][T18449] Memory state around the buggy address:
[ 2441.452461][T18449]  ffff88816df97600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 2441.462365][T18449]  ffff88816df97680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2441.471433][T18449] >ffff88816df97700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 2441.482044][T18449]                                   ^
[ 2441.488513][T18449]  ffff88816df97780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2441.497930][T18449]  ffff88816df97800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2441.507777][T18449] ==================================================================
[ 2441.726908][T18449] Disabling lock debugging due to kernel taint
[ 2442.845824][ T1696] Bluetooth: hci0: command 0x1003 tx timeout
[ 2442.856528][T29702] Bluetooth: hci0: Opcode 0x1003 failed: -110