last executing test programs:

7.919881188s ago: executing program 3 (id=4):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x8cff, 0x0)

7.712724719s ago: executing program 3 (id=7):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000060000001000000000e7ff02050000000e0000000000000205000000005f61306100"], &(0x7f0000001240)=""/112, 0x36, 0x70, 0x0, 0x4, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB='\x00'/20, @ANYRES64=r0, @ANYRES32, @ANYBLOB="00000700000000f8375285fa824c583f720000000000"], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000000000000000000000000000181100001079161fa79e3e05b2016f0b304e816178f7046424bd4568f8de034e544403d6e4d9704ec6225980542ec0f460780857af07b00000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$getownex(r3, 0x10, &(0x7f0000001840)={0x0, <r4=>0x0})
r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r5, 0x0, 0x58)
syz_clone3(&(0x7f00000018c0)={0x40000000, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001580), {0x40}, &(0x7f00000015c0)=""/207, 0xcf, &(0x7f00000016c0)=""/239, &(0x7f0000001880)=[0x0, r4], 0x2, {r5}}, 0x58)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000080)={0xfffc, [0x4, 0xffffffff], 0xfff}, 0x10)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r7, 0x400455c8, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r8, 0x0, 0x18, 0x0, &(0x7f00000006c0))
r9 = add_key$keyring(&(0x7f0000001400), &(0x7f0000001440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, r9)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r10}, 0x10)
socketpair(0xa, 0x1, 0x0, &(0x7f0000000000))
r11 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, 0x0, 0x0)
getsockopt$netlink(r11, 0x10e, 0x9, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000)

7.119392881s ago: executing program 4 (id=19):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x100, 0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
syz_mount_image$f2fs(&(0x7f0000000b80), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000e40)=ANY=[], 0x1, 0x550e, &(0x7f0000001e00)="$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")
r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
pwritev2(r1, &(0x7f0000000440)=[{&(0x7f0000000380)="82e5f5df44", 0x5}], 0x1, 0xfffffff9, 0x0, 0x1f)

6.851969293s ago: executing program 4 (id=22):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") (fail_nth: 25)
chdir(&(0x7f0000000080)='./file0\x00')
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000380), 0x24, 0x0)
syz_mount_image$exfat(&(0x7f0000002440), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="2c616c6c6f775f753d30303030303030a552303030303030303030303030303030372c646973636172642c00f7d4dceab5ea879b952debb95a4bd62fee1c5818ede60164889e83a588b4e8d85d0c30a28fa4ac4bf29b850e0f3403fda87be3922e7cff7f0000dd9fd4b9ef9af86ead00000000436cdb4047ce2f9fd77a67cf5b8ce94c9f9c55240d215f0cd19cbc29c929d50ee5aad4d9d5ff5709e589ccaf2f461164eb96418b01fc94850a03f75beb688e0efea28d60a7d8a7ba6f0a4eaf2caebdf1fc88d4cac84742fc33dedd39c639b1bb0f"], 0xfe, 0x1518, &(0x7f0000000d80)="$eJzs3AuYjtX6MPB1r7UehqS3SQ7Dutf98KbBIklySMghSZIkySkhSZIkJIackoYk5DhpchhCcpjGpHE+H3JOmmxNkyQhOSXru9j2tvvau/b/2/vb/tee+3dd65p1v897r/d+5n6vedfzzDXzXc9RdZvXq9WUiMS/BP78JUEIESOEGCaEuE4IEQghKsZWjL14PI+ChH/tRdi/18MpV7sCdjVx/3M27n/Oxv3P2bj/ORv3P2fj/uds3P+cjfvPWE62bXaR63nk3MH3/3My/vz/L5JddvJXG8re2Ot/kML9z9m4/zkb9z9n4/7nbNz/nI37/9+v5u8c4/7nbNx/xnKyv94LPu+9/19wP5rHf3Zc7fcfY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLGc4Yy/Qgsh/jK/2nUxxhhjjDHGGGPs38fnvtoVMMYYY4wxxhhj7P8/EFIooUUgconcIkbkEXnFNSKfuFbkF9eJiLhexIobRAFxoygoConCooiIE0VFMWEECitIhKK4KCGi4iZRUtws4kUpUVqUEU6UFeXELaK8uFVUELeJiuJ2UUncISqLKqKqqCbuFNXFXaKGqClqibtFbVFH1BX1xD2ivrhXNBD3iYbiftFIPCAaiwdFE/GQaCoeFs3EI6K5eFS0EI+JlqKVaC3aiLb/T/kvib7iZdFP9BcJYoAYKF4Rg8RgMUQMFcPEq2K4eE2MEK+LRDFSjBJviNHiTTFGvCXGinFivHhbTBATxSQxWUwRU0WSeEdME++KZPGemC5miJlilkgRs8Uc8b6YK+aJ+eIDsUB8KBaKRWKxWCJSxUciTSwV6eJjsUx8IjLEcrFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxKdiu9ghdopdYrfYI/aKz8Q+8bnYL74QmeLL/2H+6f8rvxcIECBBggYNuSAXxEAM5IW8kA/yQX7IDxGIQCzEQgEoAAWhIBSGwhAHcVAMigECAgFBcSgOUYhCSSgJ8RAPpaE0OHBQDspBebgVKkAFqAgVoRJUgspQBapANagG1aE61IAaUAtqQW2oDXWhLtwD98C90AAaQENoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraE1tIW20A7aQXtoDx2hI3SCTtAZOkMXUJff392gO3SHHtADekJP6AW9oTe8BC/By/Ay9IfacgAMhIEwCAbBEBgKQ+FVGA6vwWvwOiTCSBgFb8Ab8CaMgVMwFsbBeBgP1eVEmASTgeRUSIIkmAbTIBmSYTrMgBkwC1JgNsyBOTAX5sE8+AAWwIfwISyCRbAEUiEV0mAppEM6LIPTkAHLYQWshFWwGlbBWlgHa2EDbIQNsBk2w1bYCp/Cp7ADdsAu2AV7YA98Bp/B5/A5JEImZMIBOAAH4SBkQRZkQzYcgkNwGA7DETgCR+EoHIPjcAKOw0k4CafgNJyBM3AOzsF5eCHum2Z7Sq1PFPIiLbXMJXPJGBkj88q8Mp/MJ/PL/DIiIzJWxsoCsoAsKAvKwrKwjJNxspgsJlGiJBnK4rK4jMqoLClLyngZL0vL0tJJJ8vJcrK8LC8ryAqyorxdVpJ3yMqyiuzgqslqsrrs6GrImrKWrCVryzqyrqwn68n6sr5sIBvIhrKhbCQbycbyQdlEDoAh8LC82JnmciS0kKOgpWwlW8s28k14XLaTY6C97CA7yiflOBgLnWU710U+I7vKSdBNPicnw/Oyh5wKPeWLspfsLfvIl2Rf2d71k/3ldBggB8pZMEgOlkPkUDkX6siLHasrX5eJcqQcJd+QS+BNOUa+JcfKcXK8fFtOkBPlJDlZTpFTZZJ8R06T78pk+Z6cLmfImXKWTJGz5Rz5vpwr58n58gO5QH4oF8pFcrFcIlPlRzJNLpXp8mO5TH4iM+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVuldvkp3K73CF3yl1yt9wj98rP5D75udwvv5CZ8kt5QP5JHpRfySz5tcyW38hD8lt5WH4nj8jv5VH5gzwmj8sT8kd5Uv4kT8nT8ow8K8/Jn+V5+Yu8IL0UCpRUSmkVqFwqt4pReVRedY3Kp65V+dV1KqKuV7HqBlVA3agKqkKqsCqi4lRRVUwZhcoqUqEqrkqoqLpJlVQ3q3hVSpVWZZRTZVU5dYsqr25VFdRtqqK6XVVSd6jKqoqqqqqpO1V1dZeqoWqqWupuVVvVUXVVPXWPqq/uVQ3Ufaqhul81Ug+oxupB1UQ9pJqqh1Uz9Yhqrh5VLdRjqqVqpVqrNqqtely1U0+o9qqD6qieVJ3UU6qzelp1Uc+orupZ1U09p7qr51UP9YLqqV5UvVRv1Uf9oi4or/qp/ipBDVAD1StqkBqshqihaph6VQ1Xr6kR6nWVqEaqUeoNNVq9qcaot9RYNU6NV2+rCWqimqQmqylqqkpS76hp6l2VrN5T09UMNVPNUilqthpyeaX5/0T+u38nf8SlV9+qtqlP1Xa1Q+1Uu9RutUftVXvVPrVP7Vf7VabKVAfUAXVQHVRZKktlq2x1SB1Sh9VhdUQdUUfVUXVMHVdn1Y/qpPpJnVKn1Wl1Vp1T59T5y98DoUFLrbTWgc6lc+sYnUfn1dfofPpanV9fpyP6eh2rb9AF9I26oC6kC+siOk4X1cW00aitJh3q4rqEjuqbdEl9s47XpXRpXUY7XVaX07f8y/l/VF9b3Va30+10e91ed9QddSfdSXfWnXUX3UV31V11N91Nd9fddQ/dQ/fUPXUv3Uv30X10X91X99P9dIJO0AP1K3qQHqyH6KF6mH5VD9fD9Qg9QifqRD1Kj9Kj9Wg9Ro/RY/VYPV6P1xP0BD1JT9JT9BSdpJP0ND1NJ+tkPV1P1zP1TJ2iU/QcPUfP1XP1fD1fL9AL9EK9UC/Wi3WqTtVpOk2n63S9TC/TGXq5Xq5X6pV6tV6t1+q1er1erzfqjXqz3qwz9Da9TW/X2/VOvVPv1rv1Xr1X79P79H69X2fqTH1AH9AH9UGdpbN0ts7Wh/QhfVgf1kf0EX1UH9XH9DF9Qp/QJ/VJfUqf0mf0GX1On9Pn9Xl9QV+4uO0LZCADHeggV5AriAligrxB3iBfkC/IH+QPIkEkiA1igwLBjUHBoFBQOCgSxAVFg2KBCTCwAQVhUDwoEUSDm4KSwc1BfFAqKB2UCVxQNigX3BKUD24NKgS3BRWD24NKwR1B5aBKUDWoFtwZVA/uCmoENYNawd1B7aDOX34PFdwbNAjuCxoG9weNggeCxsGDQZPgoaBp8HDQLHgkaB48GrQIHgtaBq2C1kGboO0/u35QN6gX3BPU/931vT9V6AnXz/Q3CWaAGWheMYPMYDPEDDXDzKtmuHnNjDCvm0Qz0owyb5jR5k0zxrxlxppxZrx520wwE80kM9lMMVNNknnHTDPvmmTznpluZpiZZpZJMbPNHPO+mWvmmfnmA7PAfGgWmkVmsVliUs1HJs0sNenmY7PMfGIyzHKzwqw0q8xqs8asNevMerPBbDSbzGazxWw128ynZrvZYXaaXWa32WP2ms/MPvO52W++MJnmS3PA/MkcNF+ZLPO1yTbfmEPmW3PYfGeOmO/NUfODOWaOmxPmR3PS/GROmdPmjDlrzpmfzXnzi7lg/MXN/cWPd9SoMRfmwhiMwbyYF/NhPsyP+TGCEYzFWCyABbAgFsTCWBjjMA6LYTG8iJCwOBbHKEaxJJbEeIzH0lgaHTosh+WwPJbHClgBK2JFrISVsDJWxqpYFe/EO/EuvAtrYk28G+/GOlgH62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsjs2xBbbAltgSW2NrbIttsR22w/bYHjtiR+yEnbAzdsYu2AW7Ylfsht2wO3bHHtgDe2JP7IW9sA/2wb7YF/ud7YcJmIADcSAOwkE4BIfgMByGw3E4jsARmIiJOApH4WgcjWNwDI7FcTge38YJOBEn4WScglMxCZNwGk7DZEzG6TgdZ+JMTMEUnINzcC7Oxfk4HxfgAlyIC3ExLsZUTMU0TMN0TMdluAwzMANX4ApchatwDa7BdbgON+AG3ISbcAtuwW24DbfjdtyJO3E37sa9uBf34T7cj/sxEzPxAB7Ag3gQszALszEbD+EhPIyH8QgewaN4FI/hMTyBJ/AknsRTeArP4Bk8hz/jefwFL6DHGCtFXnuNzWevtfntdTbG5rF/Gxe2RWycLWqLWWML2kK/itFaG29L2dK2jHW2rC1nb/lNXNlWsVVtNXunrW7vsjV+E9e399oG9j7b0N5v69l7fhU3sg/YxvZR28Q+ZpvaVraZbWOb20dtC/uYbWlb2da2je1kn7Kd7dO2i33GdrXP/iZOs0vtOrvebrAb7T77uT1jz9rD9jt7zv5s+9n+dph91Q63r9kR9nWb2HDkr2M70o63b9sJdqKdZCfbKXbqb+KZdpZNsbPtHPu+nWvn/SZOtR/ZBTbdLrSL7GK75FJ8saZ0+7FdZj+xGXa5XWFX2lV2tV1j1/611pV2s91it9q99jO73e6wO+0uu9vuuRRfPI/99gubab+0h+y39qD9ymbZIzbbfnMpvnh+R+z39qj9wR6zx+0J+6M9aX+yp+zpS+d/8dx/tL/YC9ZbQUCSFGkKKBflphjKQ3npGspH11J+uo4idD3F0g1UgG6kglSIClMRiqOiVIwMIVkiCqk4laAo3UQl6WaKp1JUmsqQo7JUjm6h8nQrVaDbqCLdTpXoDqpMVagqVaM7qTrdRTWoJtWiu6k21aG6VI/uofp0LzWg+6gh3U+N6AFqTA9SE3qImtLD1Iweoeb0KLWgx6gltaLW1Iba0uPUjp6g9tSBOtKT1Imeos70NHWhZ6grPUvd6DnqTs9TD3qBetKL1It6Ux96ifrSy9SP+lMCDaCB9AoNosE0hIbSMHqVhtNrNIJep0QaSaPoDRpNb9IYeovG0jgaT2/TBJpIk2gyTaGplETv0DR6l5LpPZpOM2gmzaIUmk1z6H2aS/NoPn1AC+hDWkiLaDEtoVT6iNJoKaXTx7SMPqEMWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jb6lLbTDtpJu2g37aG99Bnto89pP31BmfQlHaA/0UH6irLoa8qmb+gQfUuH6Ts6Qt/TUfqBjtFxOkE/0kn6iU7RaTpDZ+kc/Uzn6Re6QJ5ECKEMVajDIMwV5g5jwjxh3vCaMF94bZg/vC6MhNeHseENYYHwxrBgWCgsHBYJ48KiYbHQhBjakMIwLB6WCIW4KSwZ3hzGh6XC0mGZ0IVlw3LhLWH58NawQnhbWDG8PawU3hFWDquEj95fLbwzrB7eFdYIa4a1wrvD2mGdsG5YL7wnrB/eGzYI7wsbhveHFcIHwsbhg2GT8KGwafhw2Cx8JGwePhq2CB8LW4atwtZhm7Bt+HjYLnwibB92CDuGT4adwqfCzuHTYZfwmbBr+OwfHk8IB4QDw1fCV0Lv71OLo0uiqdGPomnRpdH06MfRZdFPohnR5dEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a1R7+vlFg6cdMppF7hcLreLcXlcXneNy+eudfnddS7irnex7gZXwN3oCrpCrrAr4uJcUVfMGYfOOnKhK+5KuKi7yZV0N7t4V8qVdmWcc2VdOdfGtXVtXTv3hGvvOriO7kn3pHvKPeXyiKfdM66re9Z1c8+57u5518O94F5wL7perrfr415yfd3Lrp/r7xJcghvoBrpBbpAb4obkurwHcyPcCJfoEt0oN8qNdqPdGDfGjXVj3Xg33k1wE9wkN8lNcVNckkty09w0l+yS3XQ33c10M12KS3Fz3Bw318118918tyB+gVvoFrrFbrFLdakuzaW5dJfulrllLsNluBVuhVvlVrk1bo1b59a5DW6D2+Q2uS1ui9vmtrntbrvb6Xa63W632+v2un1un9vv9rtMl+kOuAPuoDvostzXLtt94w65b91h95074r53R90P7pg77k64H91J95M75U67M+6sO+d+dufdL+6C8y4p8k5kWuTdSHLkvcj0yIzIzMisSEpkdmRO5P3I3Mi8yPzIB5EFkQ8jCyOLIosjSyKpkY8iaZGlkfTIx5FlkU8iGZHlkRWRlZFVkdUR74tuD31xX8JH/U2+pL/Zx/tSvrQv450v68v5W3x5f6uv4G/zFf3tvpK/w1f2VXxV/5hv6Vv51r6Nb+sf9+38E7697+A7+id9J/+U7+yf9l38M76rf9Z388/57v5538O/4Hv6F30v39v38S/5vv5l38/39wl+gB/oX/GD/GA/xA/1w/yrfrh/zY/wr/tEP9KP8m/40f5NP8a/5cf6cX68f9tP8BP9JD/ZT/FTfZJ/x0/z7/pk/56f7mf4mX6WT/Gz/Rz/vp/r5/n5/gO/wH/oF/pFfrFf4lP9Rz7NL/Xp/mO/zH/iM/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8p3673+F3+l1+t9/j9/rP/D7/ud/vv/CZ/kt/wP/JH/Rf+Sz/tc/23/hD/lt/2H/nj/jv/VH/gz/mj/sT/kd/0v/kT/nT/ow/68/5n/15/4u/wH+zxhhjjDH2T0nO+v3jA/7OY/LyuGigEOLaHUWy//a4FkJsKvjn+WAZ1ykihHimf8+H/zJq105ISLj83AwlghKLhBCRK/mXLkMux8tFR/GU6CI6iPJ/t77Bsvc5+p314Zj30duFyPs3OTHiSnxl/Vv/wfqPPzk+rVJ4JvbX65+/vN+8WH90kRDxJa7k5BFX4ivrV/gH6xdq93v1ZyiR56skIdr/TU4+cSW+sn458YR4VnT51TMZY4wxxhhjjLE/Gyyrdv+D689L1+dx+lJ46eHc4q/xH16fM8YYY4wxxhhj7Op7vnefpx/v0qVDd57whCc8+evkav9kYowxxhhjjP27Xdn0/8OnZKX+RytijDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZynv/EvxO72ufIGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMXW3/JwAA///UJ0JQ")
chdir(&(0x7f0000000540)='./file0\x00')
r0 = open(&(0x7f0000000140)='./file0\x00', 0x4002, 0x30)
write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef)
llistxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0xfffffffffffffeda)

6.149743287s ago: executing program 4 (id=24):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
clock_gettime(0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='tcp_retransmit_synack\x00', r3}, 0x18)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x0, @in=@multicast2}}, 0xe8)
socket$inet_tcp(0x2, 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)

5.213759289s ago: executing program 4 (id=29):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f5"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x8cff, 0x0)

5.062199419s ago: executing program 4 (id=30):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0xfffffff8, 0x0, 0x0, 0x0, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"})
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000))
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=@newlink={0x48, 0x10, 0x439, 0x70bd27, 0xffffffe9, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80e1}, 0x4008040)

4.969772849s ago: executing program 4 (id=32):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x1}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000073e29f48a8dc3a20bd2cc4f8f2ec5fa0086c6aee24d972d9c68d448d28bf0f956d1cd8955aa672b2931ddb59bee36121435eb94329eaa5020420cf092c4adff1e34924d4d8ba14bf19c5f27bf2321b9cef", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ioctl$TCFLSH(r3, 0x400455c8, 0x40000000004)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x33)
listen(r2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x6, 0x6, 0x3, 0x0, 0x0, {0x9, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e00000004fcff", 0x58}], 0x1)
r7 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

4.89342979s ago: executing program 0 (id=34):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=<r6=>r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX=r5, @ANYBLOB="24b0cdfed102c9b9db963729914606af6c40810f52f4dc6aca26e346125583214b867f8ebda0843986807cf8dcf43005e1bf3bb6be0882965e94fc290968b85bb9e73c1e328958c34740c7bfeca1e9aaa2523eb0a0b87c23c3e703432370e094b1f4338c510a9d99c15dd3e734a191cf2387d8107447117631e994b4113dabb8c0b6730afd9fc939f585cb181f30e234a6b6ff5c10de2c283a22b069bf9b50c640ce4bd00d", @ANYRES64=0x0, @ANYRES8=r2, @ANYRESOCT=r6, @ANYRES64=r2, @ANYBLOB="f597a80b6de238380655a101bc2c25f6f4ba414f47b3c17904a7ad97235bf8ef2ddbcdcf12e19202799535ee0afcd3d7d702071645f8f312a24a36124894c18b411210eacb8899077cb4228b7e45f4efa2628e0e", @ANYRESDEC], 0x48)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRES16=r0, @ANYRESOCT=r11, @ANYRESHEX=r11, @ANYBLOB="a05f5ff5a4e8e1761131eebbad000fddf3f8de40c887215b9d", @ANYRES8=r8, @ANYRESOCT=r10, @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r12}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r11}, 0x10)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8])
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10)
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x4, 0xd, 0x4f}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x39}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x9, 0x7}}}}}]}}]}}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r16 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r16, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$inet6_udp(0xa, 0x2, 0x0)

4.300250243s ago: executing program 0 (id=38):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x4, 0x6)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f0000000140)={0x11, 0x4}, 0x14)

4.009730683s ago: executing program 0 (id=40):
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x242, &(0x7f0000000540)="$eJzs3T9oM2UcB/DvXRJf+75BX3URBBVERAvldRNcXheFgpQiIqhQEXFRWqG2uLVOLg46q3RyKeJmdZQiFBdFcKraoS6CFocWBx0il2u11oh/UnPifT5wyV3yPM/vOS7fJ1mOBGity0muJukkmU7SS1KcbnB7vV0+PtyY2llIBoNHvi+G7erj2km/S0nWk9yXZLss8lw3Wd16Yv+H3YfuenWld+fbW49PTfQkjx3s7z189NbcK+/N3rv66effzhW5mv5vzuv8FSNe6xbJjf9Gsf+Iotv0DPgr5l9694sq9zcluWOY/17K1BfvteVrtnu5580/6vv6d5/dMsm5AudvMOhV34HrA6B1yiT9FOVMknq/LGdm6t/wX3Yuls8vLb84/ezSyuIzTa9UwHnpJ3sPfnDh/Utn8v9Np84/8P9V5f/R+c2vqv2jTtOzASapyv/0U2t3R/6hdeQf2kv+ob3kH9pL/qG95B/aS/6hveQf2kv+ob3+Tv4/mtCcgMk4nX8AoF0GF5q+AxloStPrDwAAAAAAAAAAAAAAAAAA8HsbUzsLJ9ukan78RnLwQJLuqPqd4f8RJ9cOHy8eFlWzXxR1t7E8eduYA/xq8fAfdHqn4buvr/u62fqf3Nps/bXFZP3lJFe63bOfv8H1449/w5+833t6/BrjuP+xZuv/tNls/dnd5MNq/bkyav0pc/PwefT606+u35j1X/hxzAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmJ8DAAD//7lGcFk=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000df9e001000e39568", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x208}]}, 0x1c}}, 0x4000)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511})

2.919260129s ago: executing program 0 (id=45):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r3 = getpid()
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="be"], 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={<r4=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x6, r4})
bind$xdp(0xffffffffffffffff, &(0x7f0000001e80)={0x2c, 0x2, r4, 0x37}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x23108000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000001e00)={<r8=>0x0, <r9=>0x0})
recvmmsg(r7, &(0x7f0000001c40)=[{{&(0x7f0000000240)=@generic, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/78, 0x4e}], 0x1, &(0x7f00000003c0)=""/150, 0x96}, 0x4}, {{&(0x7f00000005c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000480)=""/30, 0x1e}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/192, 0xc0}, {&(0x7f00000007c0)=""/19, 0x13}], 0x2, &(0x7f0000000840)=""/213, 0xd5}, 0xfffffff7}, {{&(0x7f0000000940)=@isdn, 0x80, &(0x7f0000001200)=[{&(0x7f00000009c0)=""/174, 0xae}, {&(0x7f0000000a80)=""/178, 0xb2}, {&(0x7f0000000b40)=""/217, 0xd9}, {&(0x7f0000000c40)=""/83, 0x53}, {&(0x7f0000000cc0)=""/231, 0xe7}, {&(0x7f0000000dc0)=""/155, 0x9b}, {&(0x7f0000000e80)=""/162, 0xa2}, {&(0x7f0000000f40)=""/176, 0xb0}, {&(0x7f0000001000)=""/240, 0xf0}, {&(0x7f0000001100)=""/244, 0xf4}], 0xa}, 0x6463}, {{&(0x7f00000012c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001340)=""/75, 0x4b}, {&(0x7f00000013c0)=""/17, 0x11}, {&(0x7f0000001400)=""/131, 0x83}, {&(0x7f00000014c0)=""/75, 0x4b}, {&(0x7f0000001540)=""/211, 0xd3}], 0x5, &(0x7f00000016c0)=""/117, 0x75}, 0x2}, {{&(0x7f0000001740)=@vsock, 0x80, &(0x7f0000001880)=[{&(0x7f00000017c0)=""/129, 0x81}], 0x1, &(0x7f00000018c0)=""/181, 0xb5}, 0x6}, {{&(0x7f0000001980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001a00)=""/35, 0x23}, {&(0x7f0000001a40)=""/90, 0x5a}, {&(0x7f0000001ac0)=""/211, 0xd3}], 0x3, &(0x7f0000001c00)=""/3, 0x3}, 0x7}], 0x7, 0x40, &(0x7f0000001e40)={r8, r9+60000000})
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB])
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r10}, 0x8)
write$FUSE_INIT(r10, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}}, 0x50)
read$FUSE(r10, &(0x7f0000008bc0)={0x2020}, 0x2020)

2.918868229s ago: executing program 2 (id=46):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[], 0x240}}, 0x0)

2.902774819s ago: executing program 2 (id=47):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x4006, &(0x7f0000000580)={[{@resuid}, {@grpquota}, {@discard}, {@lazytime}, {@dax_inode}, {@quota}]}, 0x0, 0x432, &(0x7f0000000d80)="$eJzs281vG0UbAPBn7SR90483oSofTQsECiLiI2nSUnrgAgKJA0hIcCjHkKRVqNugJki0iiAgVI6oEnfEEYm/gBNcEHBC4gp3VKlCubRwMlp7N7EdO02MEwf8+0nbzuyONfN497Fnd+IAetZo+k8ScTAifo2IoWq1vsFo9b87q8szf64uzyRRLr/xR1Jpd3t1eSZvmr/uQF7piyh8ksSxJv0uXr12cbpUmruS1SeWLr07sXj12jPzl6YvzF2Yuzx19uzpU5PPnZl6tiNxpnHdHvlg4fjRV9668drMuRtv//h1ksffEEeHjG528PFyucPdddehmnLS18WBsC3FappGfyX/h6IY6ydvKF7+uKuDA3ZUuVwu39f68Ep5TZSB/5pEYkOPyr/o0/vffNulqceecOuF6g1QGvedbKse6YtC1qa/4f62k0Yj4tzKX1+kW+zMcwgAgDrfpvOfp5vN/wpR+1zo/9kaynBE3BMRhyPiTEQciYh7Iypt74+IB7bZf+Miycb5T+FmW4FtUTr/ez5b26qf/+WzvxguZrVDlfj7k/PzpbmT2XsyFv370vrkJn1899Ivn7U6Vjv/S7e0/3wumI3jZt+++tfMTi9N/5OYa936KGKkr1n8ydpKQBIRRyNipM0+5p/86nirY3ePv4Vim4NpUP4y4onq+V+JhvhzyebrkxP/i9LcyYn8qtjop5+vv96q/7bj75D0/O9vev2vxT+c1K7XLm6/j+u/fdrynqbd638gebNu3/vTS0tXJiMGklerg67dP9XQbmq9fRr/2Inm+X841t+JYxGRXsQPRsRDEfFwNvZHIuLRiDixSfw/vPjYO+3Hv7PS+Ge3df7XCwPRuKd5oXjx+2/qOh3eTvzp+T9dKY1le7by+beVcbV3NQMAAMC/TyEiDkZSGF8rFwrj49W/4T8S+wulhcWlp84vvHd5tvobgeHoL+RPuoZqnodOZrf1eX2qoX4qe278eXGwUh+fWSjNdjt46HEHWuR/6vcOPWMH9jC/14LeJf+hd8l/6F3yH3pXk/wf7MY4gN3X7Pv/wy6MA9h9Dflv2Q96iPt/6F3yH3qX/IeetDgYd/+RvILChkIU9sQwFHao0O1PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74OwAA//9Ti+XV")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7f00)

1.873624523s ago: executing program 2 (id=48):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000a40)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@grpquota}, {@noblock_validity}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x2e}}, {@resgid}, {@sysvgroups}, {@norecovery}, {@usrquota}]}, 0x1, 0x4d8, &(0x7f0000000b00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0xc, 0x10003, '\x00', [{}, {0xffffffff}]})
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000180)={0x0, 0x1, 0x9c, {0x9c, 0x2, "be7d7f5db385a1bd4056b35cfa3e174b689a01f1cf071b5b3bae5ee7feaa9dc31164f9e0101bc5997e97901260c8af488d0f5bd283e3bf5e5046b6da01b79b1732ea1ffb2c1f006cbc0d9f8a20e446556332b099a89113b52f9c0037e3c8f8386adc4bf2f4688149ca222504f1ab71e4402b5182968d018fa9b5d7e2166bb48015f298727df81bf2f9eed0b9f18cf2777bc67efc1a42ae30d255"}}, &(0x7f0000000240)={0x0, 0x3, 0x8, @string={0x8, 0x3, "9060647a9f96"}}, &(0x7f0000000280)={0x0, 0x22, 0x11, {[@local=@item_012={0x1, 0x2, 0x3, "a5"}, @local=@item_012={0x2, 0x2, 0x1, "7de1"}, @main=@item_012={0x2, 0x0, 0xc, "26fb"}, @global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x1, 0x2, 0x7, "12"}, @global=@item_012={0x2, 0x1, 0xb, "1d63"}, @local=@item_012={0x2, 0x2, 0x1, "ac2f"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff8, 0x7, 0x1, {0x22, 0x9a0}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000340)={0x20, 0xe, 0xe4, "161f343532eee74c50ea7219800ffbd3f966b01894229510135e66c03ceae60b6618339a05ae1d057529553d4d4ca83e8638cf731e96bd8d5360587dad4101febc6e07b075eff51150561e4a4c6086fbf56d68ed5f32446f58f534169c4877cb9fde7f9e9a6bbf4997b7b79f03445cf1d33bf3ba97f74a2624410d1cb143487a43943571d843def2b5c73ca17b1c01f7b5c4b5f8bd4ac2908101216a1327d4f5a04b1dd360bcb385aa2a0cb0ccc55461af6b68e6fc49028c92ea260c21a37b8e06c1852561e57f93d617eee0d5865408c6f6f5f30ce9ab5ed0d0dfc20a7ddf58e2678f69"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000004c0)={0x20, 0x1, 0xfb, "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"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x86}})
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

1.706979304s ago: executing program 0 (id=49):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f0000000380)={0x18, 0x2, {0xfffe, @empty}}, 0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x891)
r4 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r4, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}}], 0x1, 0x0)

1.555891804s ago: executing program 1 (id=50):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x80000001}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e05, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x800, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x110)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
copy_file_range(r7, 0x0, r6, 0x0, 0xffffffffa003e45b, 0x700000000000000)

741.523447ms ago: executing program 0 (id=51):
r0 = socket(0x1, 0x803, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="feff010040000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r1], 0x44}}, 0x0)
syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={<r3=>0x0}, &(0x7f0000000380)=0xc)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1008080, &(0x7f0000000100)=ANY=[], 0x3, 0x1253, &(0x7f0000002b00)="$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")
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e)
connect$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xfc, 0x17, 0x200, 0x70bd26, 0x25dfdbff, {0x18}, [@typed={0x4, 0x5}, @typed={0x5, 0x5b, 0x0, 0x0, @str='\x00'}, @nested={0xdc, 0x4f, 0x0, 0x1, [@generic="2c0e7832d16e00bac5dbe0e54bda39eeb189425d1aa70f0a4976fc2a1bf45a5dd27f9bde235f290539f2149404e0381cac05573bb5ef5c8f601031abeca6395c244ed28d2146aff1f1851cd3ec77b5f4e3d4630513eba1e5bb9af194cf04def32232d77600f05a78a77ee4187a748b9eaafd", @generic="44b686d7e7211f1115ff469855b28b90d8e300c04c5e92ea19f221ce4b1b18639844fdea4ea6084a4b7670a99fde293cbb6b8deefe984028187667b651057e273c02b9ad7dd489e8a6f8c38d550187bf7be18c816435e310b14a6e1c7c06", @typed={0x8, 0xa9, 0x0, 0x0, @pid=r3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x20000005)
pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80000)
write$P9_RFSYNC(r8, &(0x7f0000000700)={0x7, 0x33, 0x1}, 0x7)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x436, 0x519000)
ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000040)=0x5)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r9, &(0x7f0000000380), 0x20000000}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r9, &(0x7f0000000200)="fd7306889f8f7adf781e8e8a317860418b60b727580386b3685322a9796d62c4b8c39787fecf0484342f7cf92d538dd6fb5973007442cb35837ee3c93621293ccaa5b980c7adaaaabc9a0af87fc131f54a8c6dd6a7072be60addf5a6e1a2108518cf9ac488e12c06c722bff49ad2a4d0c8436984a4413ef61f6adaceb5079c9c7376e71eeaa27431be379f885de5e1a45a1ee8859fa46c1a056b5d9df8f5356fde684b3e73876497b51530d1c4addcd59344c4f67d5b3cdebd5a885bd0164f9be8ac5a69efb4fc6a71cea4e509a8d89aca8dfd9e519bd082bd0ad915155c50be6be83956795ada90"}, 0x20)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea400000000001090224"], 0x0)

671.754108ms ago: executing program 2 (id=52):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getpeername(r0, 0x0, &(0x7f00000002c0))

441.597609ms ago: executing program 1 (id=53):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000001181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
r2 = epoll_create1(0x0)
epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x7ff)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x10000001})

324.572849ms ago: executing program 2 (id=54):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x110)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45b, 0x700000000000000)

186.183279ms ago: executing program 1 (id=55):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r5 = dup(r4)
socket$nl_route(0x10, 0x3, 0x0)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}})

160.655459ms ago: executing program 2 (id=56):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = getegid()
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x4, 0xff, 0x4, 0x7fff0006}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x10000, 0x103, 0x7, 0x8, 0x1, 0x9b3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x7, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYRES16=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f00000006c0)={[{@i_version}, {@usrjquota_path}, {@acl}, {@minixdf}, {@resgid={'resgid', 0x3d, r1}}, {@grpid}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
mkdir(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5)
r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
socket$unix(0x1, 0x1, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x0, 0x0)
bind$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfffffffffffffe12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close_range(r2, 0xffffffffffffffff, 0x0)
setresgid(0x0, 0xffffffffffffffff, r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES64=r5, @ANYBLOB="09b4acac56c2fd63cb97f2779231dc4637a1978977c2aa5eb7f4f94793baf090dafe43974e0516b4d63c9aca78ff01ecceaa6aaa22bec1702c50ab1c7a93ab104781ffbc4b7b89ccd1becf43c337db551d6b24d672e0c8d8fa2bb61c7fa34d98170424ce2bfddc8acf2f530a085c6f8ddf5f8564", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00\x00\x00\x00\b\x00\x00\x00\x00', @ANYRESOCT=r6, @ANYRESDEC=r0, @ANYBLOB="00000000000000000000000000000000000000000000001100000000a09407feddb014592abcfd4724ac13c2b19147a9bb270174"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000540)='xen_mmu_release_ptpage\x00', 0xffffffffffffffff, 0x0, 0x4000000000000002}, 0xa)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000800), &(0x7f0000000280)}, 0x20)
r8 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)

81.75503ms ago: executing program 1 (id=57):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00'], 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000280), 0x20000000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001440)=@newtaction={0x850, 0x31, 0x1, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8b]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000680)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x18, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x6}}}}}}}, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2)

25.72252ms ago: executing program 1 (id=58):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xf, 0x7fff0006}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='bcache_alloc_fail\x00', r2, 0x0, 0x2}, 0x18)
socket$packet(0x11, 0x3, 0x300)
clock_gettime(0x0, &(0x7f00000001c0)={<r3=>0x0, <r4=>0x0})
utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {r3, r4/1000+60000}})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=59):
r0 = open(&(0x7f0000000180)='./file0\x00', 0x101081, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x71d9)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x90301, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r1, 0x0, 0x7, &(0x7f00000000c0)='cgroup\x00'}, 0x30)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cfe000000000000000000000900000000000000000000000900000000000000000000000a020000000000"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r6, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xd, 0x0}}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0)
openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="c11dba085a06082b0075"], 0xb)

kernel console output (not intermixed with test programs):

[    3.540644][   T24] audit: type=1400 audit(1732212433.560:9): avc:  denied  { append open } for  pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[    3.544150][   T24] audit: type=1400 audit(1732212433.560:10): avc:  denied  { getattr } for  pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[    3.865963][   T94] udevd[94]: starting version 3.2.11
[    3.899550][   T95] udevd[95]: starting eudev-3.2.11
[   12.041689][   T24] kauditd_printk_skb: 50 callbacks suppressed
[   12.041699][   T24] audit: type=1400 audit(1732212442.080:61): avc:  denied  { transition } for  pid=216 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   12.047144][   T24] audit: type=1400 audit(1732212442.080:62): avc:  denied  { noatsecure } for  pid=216 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   12.051078][   T24] audit: type=1400 audit(1732212442.080:63): avc:  denied  { write } for  pid=216 comm="sh" path="pipe:[12996]" dev="pipefs" ino=12996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   12.055277][   T24] audit: type=1400 audit(1732212442.080:64): avc:  denied  { rlimitinh } for  pid=216 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   12.058350][   T24] audit: type=1400 audit(1732212442.080:65): avc:  denied  { siginh } for  pid=216 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts.
[   18.829057][   T24] audit: type=1400 audit(1732212448.870:66): avc:  denied  { mounton } for  pid=272 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   18.830107][  T272] cgroup: Unknown subsys name 'net'
[   18.832267][   T24] audit: type=1400 audit(1732212448.870:67): avc:  denied  { mount } for  pid=272 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   18.836682][   T24] audit: type=1400 audit(1732212448.870:68): avc:  denied  { unmount } for  pid=272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   18.836826][  T272] cgroup: Unknown subsys name 'devices'
[   18.987956][  T272] cgroup: Unknown subsys name 'hugetlb'
[   18.993359][  T272] cgroup: Unknown subsys name 'rlimit'
[   19.130859][   T24] audit: type=1400 audit(1732212449.170:69): avc:  denied  { setattr } for  pid=272 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   19.153809][   T24] audit: type=1400 audit(1732212449.170:70): avc:  denied  { mounton } for  pid=272 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   19.178455][   T24] audit: type=1400 audit(1732212449.170:71): avc:  denied  { mount } for  pid=272 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   19.183924][  T275] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   19.209867][   T24] audit: type=1400 audit(1732212449.250:72): avc:  denied  { relabelto } for  pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   19.235154][   T24] audit: type=1400 audit(1732212449.250:73): avc:  denied  { write } for  pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   19.261435][   T24] audit: type=1400 audit(1732212449.300:74): avc:  denied  { read } for  pid=272 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   19.286832][  T272] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   19.286995][   T24] audit: type=1400 audit(1732212449.300:75): avc:  denied  { open } for  pid=272 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.213058][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.220065][  T284] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.227544][  T284] device bridge_slave_0 entered promiscuous mode
[   20.235354][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.242489][  T284] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.249673][  T284] device bridge_slave_1 entered promiscuous mode
[   20.267464][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.274305][  T283] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.281580][  T283] device bridge_slave_0 entered promiscuous mode
[   20.288775][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.295611][  T283] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.302886][  T283] device bridge_slave_1 entered promiscuous mode
[   20.309191][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.316019][  T282] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.323307][  T282] device bridge_slave_0 entered promiscuous mode
[   20.329990][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.336853][  T282] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.343972][  T282] device bridge_slave_1 entered promiscuous mode
[   20.369668][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.376640][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.383638][  T285] device bridge_slave_0 entered promiscuous mode
[   20.408360][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.415204][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.422591][  T285] device bridge_slave_1 entered promiscuous mode
[   20.478412][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.485262][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.492614][  T286] device bridge_slave_0 entered promiscuous mode
[   20.501121][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.508023][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.515057][  T286] device bridge_slave_1 entered promiscuous mode
[   20.590828][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.597691][  T282] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.604769][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.611589][  T282] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.637731][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.644579][  T284] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.651715][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.658495][  T284] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.666813][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.673654][  T283] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.680774][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.687563][  T283] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.697308][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.704143][  T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.711282][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.718041][  T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.735973][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.743163][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.750851][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.757884][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.764859][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.771994][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.778990][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.785925][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.793499][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   20.800710][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   20.831139][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   20.839169][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.845997][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.863142][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   20.870418][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   20.878465][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.885285][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.892981][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   20.917843][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   20.925663][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   20.933898][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.940757][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.948178][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   20.956089][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.962951][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.970198][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   20.978497][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.985318][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.992611][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.000539][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.007381][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.014586][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.022300][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.030246][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.038326][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.045144][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.052448][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.060565][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.067411][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.074538][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   21.081789][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   21.089111][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   21.113853][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.122761][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.130772][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.139300][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.147125][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.154811][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.162915][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.169766][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.177180][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.185081][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.191840][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.201340][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   21.209563][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.228258][  T284] device veth0_vlan entered promiscuous mode
[   21.240649][  T282] device veth0_vlan entered promiscuous mode
[   21.249682][  T286] device veth0_vlan entered promiscuous mode
[   21.258857][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   21.266757][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.274446][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   21.282963][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.291092][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   21.298941][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.306752][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   21.314495][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.322343][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.330058][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.337915][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   21.345940][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.354076][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.361794][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.369777][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.377601][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.385277][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.392695][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.400075][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.407389][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.414580][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.422006][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.434320][  T284] device veth1_macvtap entered promiscuous mode
[   21.444768][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.452898][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.460947][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.468635][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   21.476841][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.484871][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.493069][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.504476][  T283] device veth0_vlan entered promiscuous mode
[   21.512424][  T282] device veth1_macvtap entered promiscuous mode
[   21.520358][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.527988][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   21.536053][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.544587][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.552458][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.560628][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.567944][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.577238][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.585184][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.601052][  T285] device veth0_vlan entered promiscuous mode
[   21.607634][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.615703][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.624148][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.632791][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.641149][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.649000][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.656810][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.664921][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.673193][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.681336][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.689779][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.697154][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.708271][  T286] device veth1_macvtap entered promiscuous mode
[   21.719132][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.726977][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.735021][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.749441][  T283] device veth1_macvtap entered promiscuous mode
[   21.757036][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.764557][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.772876][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.781049][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.789033][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.809167][  T285] device veth1_macvtap entered promiscuous mode
[   21.817339][  T284] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   21.827962][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.840519][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.852963][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.861352][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.869795][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.878111][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.886116][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.916486][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.926058][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.934507][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.943251][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.987146][  T315] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   22.223419][   T48] Bluetooth: hci0: Frame reassembly failed (-84)
[   22.236387][   T54] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   22.307450][  T346] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   22.319457][  T346] EXT4-fs (loop4): first meta block group too large: 50331648 (group descriptor block count 1)
[   22.353576][  T350] FAULT_INJECTION: forcing a failure.
[   22.353576][  T350] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   22.367823][  T350] CPU: 1 PID: 350 Comm: syz.0.12 Not tainted 5.10.226-syzkaller-00031-gb14940b90491 #0
[   22.377267][  T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   22.387264][  T350] Call Trace:
[   22.390398][  T350]  dump_stack_lvl+0x1e2/0x24b
[   22.394902][  T350]  ? bfq_pos_tree_add_move+0x43b/0x43b
[   22.400192][  T350]  ? preempt_schedule_irq+0xe7/0x140
[   22.405314][  T350]  dump_stack+0x15/0x17
[   22.409306][  T350]  should_fail+0x3c6/0x510
[   22.413560][  T350]  should_fail_usercopy+0x1a/0x20
[   22.418420][  T350]  _copy_to_user+0x20/0x90
[   22.422675][  T350]  simple_read_from_buffer+0xc7/0x150
[   22.427888][  T350]  proc_fail_nth_read+0x1a3/0x210
[   22.434243][  T350]  ? proc_fault_inject_write+0x390/0x390
[   22.439676][  T350]  ? security_file_permission+0x86/0xb0
[   22.445061][  T350]  ? rw_verify_area+0x1c3/0x360
[   22.449752][  T350]  ? _raw_spin_unlock_irq+0x4e/0x70
[   22.454870][  T350]  ? proc_fault_inject_write+0x390/0x390
[   22.460341][  T350]  vfs_read+0x200/0xba0
[   22.464332][  T350]  ? __switch_to_asm+0x34/0x60
[   22.468924][  T350]  ? kernel_read+0x70/0x70
[   22.473180][  T350]  ? __kasan_check_write+0x14/0x20
[   22.478124][  T350]  ? mutex_lock+0xa5/0x110
[   22.483254][  T350]  ? mutex_trylock+0xa0/0xa0
[   22.487684][  T350]  ? __fdget_pos+0x2e7/0x3a0
[   22.492096][  T350]  ? ksys_read+0x77/0x2c0
[   22.496265][  T350]  ksys_read+0x199/0x2c0
[   22.500347][  T350]  ? vfs_write+0xe70/0xe70
[   22.504601][  T350]  ? array_map_lookup_elem+0x5e/0x140
[   22.509812][  T350]  __x64_sys_read+0x7b/0x90
[   22.514149][  T350]  do_syscall_64+0x34/0x70
[   22.518403][  T350]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   22.524127][  T350] RIP: 0033:0x7fba7d02325c
[   22.528389][  T350] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[   22.547821][  T350] RSP: 002b:00007fba7b69d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   22.556064][  T350] RAX: ffffffffffffffda RBX: 00007fba7d1dbfa0 RCX: 00007fba7d02325c
[   22.563875][  T350] RDX: 000000000000000f RSI: 00007fba7b69d0a0 RDI: 0000000000000006
[   22.571687][  T350] RBP: 00007fba7b69d090 R08: 0000000000000000 R09: 0000000000000000
[   22.579499][  T350] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002
[   22.587331][  T350] R13: 0000000000000000 R14: 00007fba7d1dbfa0 R15: 00007ffc0385a8b8
[   22.646383][   T54] usb 2-1: Using ep0 maxpacket: 8
[   22.766528][   T54] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[   22.775066][   T54] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[   22.785733][   T54] usb 2-1: config 135 has no interface number 0
[   22.791867][   T54] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   22.917326][  T372] F2FS-fs (loop4): Invalid log blocks per segment (83886089)
[   22.924685][  T372] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   22.936135][  T372] F2FS-fs (loop4): invalid crc value
[   22.943042][  T378] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   22.948892][  T372] F2FS-fs (loop4): Found nat_bits in checkpoint
[   22.966459][   T54] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[   22.975487][   T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   22.979552][  T372] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   22.983565][   T54] usb 2-1: Product: syz
[   22.990844][  T372] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   22.994389][   T54] usb 2-1: Manufacturer: syz
[   23.009366][   T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   23.009758][  T378] netlink: 48 bytes leftover after parsing attributes in process `syz.2.21'.
[   23.017171][   T54] usb 2-1: SerialNumber: syz
[   23.042655][  T285] attempt to access beyond end of device
[   23.042655][  T285] loop4: rw=2049, want=45104, limit=40427
[   23.087197][   T54] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[   23.093987][   T54] uvcvideo: No valid video chain found.
[   23.121040][  T390] FAULT_INJECTION: forcing a failure.
[   23.121040][  T390] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   23.134188][  T390] CPU: 0 PID: 390 Comm: syz.4.22 Not tainted 5.10.226-syzkaller-00031-gb14940b90491 #0
[   23.143612][  T390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   23.153506][  T390] Call Trace:
[   23.156632][  T390]  dump_stack_lvl+0x1e2/0x24b
[   23.161160][  T390]  ? bfq_pos_tree_add_move+0x43b/0x43b
[   23.166455][  T390]  dump_stack+0x15/0x17
[   23.170435][  T390]  should_fail+0x3c6/0x510
[   23.174689][  T390]  should_fail_alloc_page+0x52/0x60
[   23.179726][  T390]  __alloc_pages_nodemask+0x1b3/0xaf0
[   23.184924][  T390]  ? __kasan_check_read+0x11/0x20
[   23.189791][  T390]  ? gfp_pfmemalloc_allowed+0x120/0x120
[   23.195203][  T390]  ? __mod_node_page_state+0xac/0xf0
[   23.200300][  T390]  ? lru_cache_add+0x15e/0x380
[   23.204909][  T390]  ? __lru_cache_add_inactive_or_unevictable+0x37/0x160
[   23.211677][  T390]  handle_pte_fault+0x175a/0x3e10
[   23.216536][  T390]  ? vmf_allows_speculation+0x6f0/0x6f0
[   23.222162][  T390]  ? __handle_speculative_fault+0xd03/0x1e90
[   23.227986][  T390]  ? memcpy+0x56/0x70
[   23.231793][  T390]  __handle_speculative_fault+0x1370/0x1e90
[   23.237520][  T390]  ? finish_fault+0xaf0/0xaf0
[   23.242037][  T390]  ? __kasan_check_write+0x14/0x20
[   23.246994][  T390]  ? down_read_trylock+0x179/0x1d0
[   23.251936][  T390]  ? debug_smp_processor_id+0x17/0x20
[   23.257142][  T390]  ? fpregs_assert_state_consistent+0xb6/0xe0
[   23.263041][  T390]  exc_page_fault+0x234/0x5b0
[   23.267554][  T390]  ? asm_exc_page_fault+0x8/0x30
[   23.272328][  T390]  asm_exc_page_fault+0x1e/0x30
[   23.277010][  T390] RIP: 0033:0x7fe91e0e1900
[   23.281408][  T390] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[   23.300992][  T390] RSP: 002b:00007fe91c8964a0 EFLAGS: 00010206
[   23.307082][  T390] RAX: 0000000000019000 RBX: 00007fe91c896540 RCX: 0000000000000101
[   23.314893][  T390] RDX: 00000000000003e3 RSI: 0000000000000fe4 RDI: 00007fe91c8965e0
[   23.322707][  T390] RBP: 0000000000000102 R08: 00007fe914477000 R09: 0000000000000005
[   23.330524][  T390] R10: 0000000020000c02 R11: 00000000000005d6 R12: 0000000000000c01
[   23.338372][  T390] R13: 00007fe91e2a5fa0 R14: 0000000000000017 R15: 00007fe91c8965e0
[   23.346639][   T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   23.355303][  T390] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   23.375049][  T390] EXT4-fs (loop4): Ignoring removed orlov option
[   23.376646][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   23.393253][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   23.394579][  T390] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue
[   23.403169][   T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   23.441028][   T25] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[   23.450168][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   23.458893][   T25] usb 1-1: config 0 descriptor??
[   23.468637][  T311] usb 2-1: USB disconnect, device number 2
[   23.596680][  T390] ======================================================
[   23.596680][  T390] WARNING: the mand mount option is being deprecated and
[   23.596680][  T390]          will be removed in v5.15!
[   23.596680][  T390] ======================================================
[   23.638403][  T390] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xa7648d78, utbl_chksum : 0xe619d30d)
[   24.086357][   T24] kauditd_printk_skb: 89 callbacks suppressed
[   24.086375][   T24] audit: type=1400 audit(1732212454.120:165): avc:  denied  { bind } for  pid=402 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   24.249097][   T24] audit: type=1400 audit(1732212454.150:166): avc:  denied  { setopt } for  pid=402 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   24.273884][  T405] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   24.283741][  T405] bridge: RTM_NEWNEIGH with invalid ether address
[   24.306619][   T24] audit: type=1400 audit(1732212454.280:167): avc:  denied  { ioctl } for  pid=404 comm="syz.1.26" path="socket:[15017]" dev="sockfs" ino=15017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   24.466954][   T24] audit: type=1400 audit(1732212454.330:168): avc:  denied  { write } for  pid=404 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   24.612291][   T25] gt683r_led 0003:1770:FF00.0001: item fetching failed at offset 1/5
[   24.620232][   T20] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[   24.628311][   T20] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   24.638539][   T25] gt683r_led 0003:1770:FF00.0001: hid parsing failed
[   24.645081][   T25] gt683r_led: probe of 0003:1770:FF00.0001 failed with error -22
[   24.652621][   T20] usb 3-1: config 220 has no interface number 2
[   24.686018][   T24] audit: type=1400 audit(1732212454.460:169): avc:  denied  { create } for  pid=406 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   24.706881][   T24] audit: type=1400 audit(1732212454.460:170): avc:  denied  { create } for  pid=406 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   24.729472][   T20] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   24.737171][   T24] audit: type=1400 audit(1732212454.460:171): avc:  denied  { write } for  pid=406 comm="syz.1.27" path="socket:[15030]" dev="sockfs" ino=15030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   24.742696][   T25] usb 1-1: USB disconnect, device number 2
[   24.772352][   T20] usb 3-1: config 220 interface 0 has no altsetting 0
[   24.777273][   T24] audit: type=1400 audit(1732212454.470:172): avc:  denied  { nlmsg_read } for  pid=406 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   24.799210][   T20] usb 3-1: config 220 interface 76 has no altsetting 0
[   24.805972][   T20] usb 3-1: config 220 interface 1 has no altsetting 0
[   24.814415][  T373] Bluetooth: hci0: command 0x1003 tx timeout
[   24.820321][  T339] Bluetooth: hci0: sending frame failed (-49)
[   24.851945][   T24] audit: type=1400 audit(1732212454.890:173): avc:  denied  { create } for  pid=409 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   24.892024][  T420] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[   24.899086][  T420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1542 sclass=netlink_tcpdiag_socket pid=420 comm=syz.4.32
[   24.932625][   T24] audit: type=1400 audit(1732212454.970:174): avc:  denied  { read write } for  pid=422 comm="syz.0.33" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   24.966498][   T20] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   24.975690][   T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   24.983567][   T20] usb 3-1: Product: syz
[   24.987535][   T20] usb 3-1: Manufacturer: syz
[   24.991947][   T20] usb 3-1: SerialNumber: syz
[   25.396753][   T20] usb 3-1: selecting invalid altsetting 0
[   25.402386][   T20] uvcvideo: Found UVC 7.01 device syz (8086:0b07)
[   25.408736][   T20] uvcvideo: No valid video chain found.
[   25.489077][   T20] usb 3-1: USB disconnect, device number 2
[   25.923786][  T448] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue
[   25.934709][  T448] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038 (0x7fffffff)
[   26.654749][  T461] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[   26.675172][  T461] FAULT_INJECTION: forcing a failure.
[   26.675172][  T461] name failslab, interval 1, probability 0, space 0, times 1
[   26.691008][  T461] CPU: 1 PID: 461 Comm: syz.1.43 Not tainted 5.10.226-syzkaller-00031-gb14940b90491 #0
[   26.700458][  T461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   26.710352][  T461] Call Trace:
[   26.713485][  T461]  dump_stack_lvl+0x1e2/0x24b
[   26.717992][  T461]  ? bfq_pos_tree_add_move+0x43b/0x43b
[   26.723288][  T461]  ? mutex_lock+0xa5/0x110
[   26.727541][  T461]  dump_stack+0x15/0x17
[   26.731535][  T461]  should_fail+0x3c6/0x510
[   26.735785][  T461]  ? getname_flags+0xba/0x520
[   26.740296][  T461]  __should_failslab+0xa4/0xe0
[   26.744943][  T461]  should_failslab+0x9/0x20
[   26.749242][  T461]  kmem_cache_alloc+0x3d/0x2e0
[   26.753836][  T461]  ? __ia32_sys_read+0x90/0x90
[   26.758438][  T461]  getname_flags+0xba/0x520
[   26.762780][  T461]  __x64_sys_rename+0x5f/0x90
[   26.767375][  T461]  do_syscall_64+0x34/0x70
[   26.771632][  T461]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   26.777355][  T461] RIP: 0033:0x7f5c59e8c819
[   26.781612][  T461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   26.801063][  T461] RSP: 002b:00007f5c58505038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   26.809295][  T461] RAX: ffffffffffffffda RBX: 00007f5c5a043fa0 RCX: 00007f5c59e8c819
[   26.817107][  T461] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000020000040
[   26.824918][  T461] RBP: 00007f5c58505090 R08: 0000000000000000 R09: 0000000000000000
[   26.832729][  T461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   26.840546][  T461] R13: 0000000000000000 R14: 00007f5c5a043fa0 R15: 00007ffc4e6dd568
[   26.846474][    T5] Bluetooth: hci0: command 0x1001 tx timeout
[   26.877260][  T421] Bluetooth: hci0: sending frame failed (-49)
[   26.927362][   T25] Bluetooth: hci1: command 0x1003 tx timeout
[   26.967550][  T421] Bluetooth: hci1: sending frame failed (-49)
[   27.018348][  T466] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue
[   27.028774][  T466] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038 (0x7fffffff)
[   27.125117][  T474] EXT4-fs (loop2): dax option not supported
[   28.220549][  T484] EXT4-fs (loop2): 1 orphan inode deleted
[   28.226202][  T484] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue
[   28.283975][  T484] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff)
[   28.310999][  T484] xt_hashlimit: size too large, truncated to 1048576
[   28.926371][   T20] Bluetooth: hci0: command 0x1009 tx timeout
[   29.006366][   T20] Bluetooth: hci1: command 0x1001 tx timeout
[   29.012471][  T421] Bluetooth: hci1: sending frame failed (-49)
[   29.203233][  T498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'.
[   29.539414][   T24] kauditd_printk_skb: 26 callbacks suppressed
[   29.539425][   T24] audit: type=1326 audit(1732212459.580:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50460819 code=0x7ffc0000
[   29.569226][   T24] audit: type=1326 audit(1732212459.580:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50460819 code=0x7ffc0000
[   29.592339][   T24] audit: type=1326 audit(1732212459.580:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f8d50460819 code=0x7ffc0000
[   29.615064][   T24] audit: type=1326 audit(1732212459.580:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50460819 code=0x7ffc0000
[   29.638205][   T24] audit: type=1326 audit(1732212459.580:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50460819 code=0x7ffc0000
[   29.688584][   T24] audit: type=1400 audit(1732212459.730:206): avc:  denied  { bind } for  pid=497 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   29.710336][   T24] audit: type=1400 audit(1732212459.750:207): avc:  denied  { write } for  pid=497 comm="syz.0.51" name="ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   29.733082][   T24] audit: type=1400 audit(1732212459.750:208): avc:  denied  { open } for  pid=497 comm="syz.0.51" path="/dev/ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   29.758694][   T24] audit: type=1400 audit(1732212459.750:209): avc:  denied  { ioctl } for  pid=497 comm="syz.0.51" path="/dev/ppp" dev="devtmpfs" ino=149 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   29.863107][  T511] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.56: inode #1: comm syz.2.56: iget: illegal inode #
[   29.876573][  T511] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.56: error while reading EA inode 1 err=-117
[   29.888910][  T511] EXT4-fs (loop2): 1 orphan inode deleted
[   29.894462][  T511] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,usrjquota=,acl,minixdf,resgid=0x0000000000000000,grpid,usrjquota=,,errors=continue
[   29.917623][  T511] ==================================================================
[   29.925523][  T511] BUG: KASAN: use-after-free in ext4_insert_dentry+0x392/0x710
[   29.932885][  T511] Write of size 250 at addr ffff8881305d8f18 by task syz.2.56/511
[   29.940513][  T511] 
[   29.942700][  T511] CPU: 1 PID: 511 Comm: syz.2.56 Not tainted 5.10.226-syzkaller-00031-gb14940b90491 #0
[   29.952147][  T511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   29.962042][  T511] Call Trace:
[   29.965174][  T511]  dump_stack_lvl+0x1e2/0x24b
[   29.969685][  T511]  ? bfq_pos_tree_add_move+0x43b/0x43b
[   29.974976][  T511]  ? panic+0x812/0x812
[   29.978893][  T511]  ? __ext4_handle_dirty_metadata+0x2de/0x810
[   29.984806][  T511]  print_address_description+0x81/0x3b0
[   29.990177][  T511]  kasan_report+0x179/0x1c0
[   29.994509][  T511]  ? ext4_insert_dentry+0x392/0x710
[   29.999668][  T511]  ? ext4_insert_dentry+0x392/0x710
[   30.004678][  T511]  kasan_check_range+0x293/0x2a0
[   30.009443][  T511]  ? ext4_insert_dentry+0x392/0x710
[   30.014478][  T511]  memcpy+0x44/0x70
[   30.018121][  T511]  ext4_insert_dentry+0x392/0x710
[   30.022986][  T511]  add_dirent_to_buf+0x3ac/0x780
[   30.027764][  T511]  ? ext4_dx_add_entry+0x1600/0x1600
[   30.032890][  T511]  ? ext4_handle_dirty_dx_node+0x41c/0x580
[   30.038526][  T511]  make_indexed_dir+0xe9f/0x1500
[   30.043294][  T511]  ? add_dirent_to_buf+0x780/0x780
[   30.048238][  T511]  ? add_dirent_to_buf+0x36f/0x780
[   30.053194][  T511]  ? ext4_dx_add_entry+0x1600/0x1600
[   30.058308][  T511]  ? __kasan_check_read+0x11/0x20
[   30.063164][  T511]  ? __ext4_read_dirblock+0x4d8/0x8c0
[   30.068376][  T511]  ext4_add_entry+0xdcf/0x1280
[   30.072977][  T511]  ? ext4_inc_count+0x190/0x190
[   30.077661][  T511]  ? ext4_init_new_dir+0x7c8/0xa20
[   30.082611][  T511]  ? ext4_init_dot_dotdot+0x500/0x500
[   30.087817][  T511]  ext4_mkdir+0x4d2/0xba0
[   30.091986][  T511]  ? ext4_symlink+0xe40/0xe40
[   30.096500][  T511]  ? selinux_inode_mkdir+0x22/0x30
[   30.101447][  T511]  ? security_inode_mkdir+0xbc/0x100
[   30.106567][  T511]  vfs_mkdir+0x4cf/0x6c0
[   30.110645][  T511]  do_mkdirat+0x1a6/0x2c0
[   30.114808][  T511]  ? do_mknodat+0x450/0x450
[   30.119149][  T511]  ? fpu__clear_all+0x20/0x20
[   30.123667][  T511]  ? __kasan_check_read+0x11/0x20
[   30.128525][  T511]  __x64_sys_mkdirat+0x7b/0x90
[   30.133127][  T511]  do_syscall_64+0x34/0x70
[   30.137381][  T511]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   30.143107][  T511] RIP: 0033:0x7f8d50460819
[   30.147356][  T511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   30.166802][  T511] RSP: 002b:00007f8d4ead9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   30.175042][  T511] RAX: ffffffffffffffda RBX: 00007f8d50617fa0 RCX: 00007f8d50460819
[   30.182852][  T511] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: ffffffffffffff9c
[   30.190665][  T511] RBP: 00007f8d504d375e R08: 0000000000000000 R09: 0000000000000000
[   30.198476][  T511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   30.206283][  T511] R13: 0000000000000000 R14: 00007f8d50617fa0 R15: 00007fff385f81b8
[   30.214097][  T511] 
[   30.216262][  T511] The buggy address belongs to the page:
[   30.221761][  T511] page:ffffea0004c17600 refcount:3 mapcount:0 mapping:ffff888109197150 index:0x3f pfn:0x1305d8
[   30.231899][  T511] aops:def_blk_aops ino:0
[   30.236055][  T511] flags: 0x400000000000202a(referenced|dirty|active|private)
[   30.243268][  T511] raw: 400000000000202a dead000000000100 dead000000000122 ffff888109197150
[   30.251684][  T511] raw: 000000000000003f ffff88811ab842a0 00000003ffffffff ffff88810f558000
[   30.260096][  T511] page dumped because: kasan: bad access detected
[   30.266362][  T511] page->mem_cgroup:ffff88810f558000
[   30.271391][  T511] page_owner tracks the page as allocated
[   30.276948][  T511] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 511, ts 29917480613, free_ts 29892918471
[   30.293785][  T511]  prep_new_page+0x166/0x180
[   30.298247][  T511]  get_page_from_freelist+0x2d8c/0x2f30
[   30.303586][  T511]  __alloc_pages_nodemask+0x435/0xaf0
[   30.308792][  T511]  pagecache_get_page+0x669/0x950
[   30.313663][  T511]  __getblk_gfp+0x221/0x7e0
[   30.317997][  T511]  ext4_getblk+0x259/0x660
[   30.322268][  T511]  ext4_bread+0x2f/0x1b0
[   30.326327][  T511]  ext4_append+0x29a/0x4d0
[   30.330580][  T511]  make_indexed_dir+0x505/0x1500
[   30.335382][  T511]  ext4_add_entry+0xdcf/0x1280
[   30.339961][  T511]  ext4_mkdir+0x4d2/0xba0
[   30.344118][  T511]  vfs_mkdir+0x4cf/0x6c0
[   30.348197][  T511]  do_mkdirat+0x1a6/0x2c0
[   30.352361][  T511]  __x64_sys_mkdirat+0x7b/0x90
[   30.356961][  T511]  do_syscall_64+0x34/0x70
[   30.361306][  T511]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   30.367026][  T511] page last free stack trace:
[   30.371548][  T511]  free_unref_page_prepare+0x2ae/0x2d0
[   30.376930][  T511]  free_unref_page_list+0x122/0xb20
[   30.382053][  T511]  release_pages+0xea0/0xef0
[   30.386473][  T511]  free_pages_and_swap_cache+0x8a/0xa0
[   30.391767][  T511]  tlb_finish_mmu+0x177/0x320
[   30.396281][  T511]  exit_mmap+0x312/0x5c0
[   30.400360][  T511]  __mmput+0x95/0x2d0
[   30.404177][  T511]  mmput+0x59/0x170
[   30.407823][  T511]  do_exit+0xbda/0x2a50
[   30.411820][  T511]  do_group_exit+0x141/0x310
[   30.416245][  T511]  get_signal+0x10a0/0x1410
[   30.420599][  T511]  arch_do_signal_or_restart+0xbd/0x17c0
[   30.426059][  T511]  exit_to_user_mode_loop+0x9b/0xd0
[   30.431088][  T511]  syscall_exit_to_user_mode+0xa2/0x1a0
[   30.436465][  T511]  do_syscall_64+0x40/0x70
[   30.440724][  T511]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   30.446439][  T511] 
[   30.448608][  T511] Memory state around the buggy address:
[   30.454084][  T511]  ffff8881305d8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   30.461982][  T511]  ffff8881305d8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   30.469879][  T511] >ffff8881305d9000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   30.477775][  T511]                    ^
[   30.481687][  T511]  ffff8881305d9080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   30.489581][  T511]  ffff8881305d9100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   30.497476][  T511] ==================================================================
[   30.505374][  T511] Disabling lock debugging due to kernel taint
[   30.511539][   T24] audit: type=1400 audit(1732212459.950:210): avc:  denied  { create } for  pid=510 comm="syz.2.56" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   30.616464][  T373] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   30.906396][  T373] usb 1-1: Using ep0 maxpacket: 16
[   31.026411][  T373] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   31.036348][  T373] usb 1-1: config 0 has no interfaces?
[   31.041596][  T373] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[   31.050501][  T373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.059341][  T373] usb 1-1: config 0 descriptor??
[   31.086393][   T20] Bluetooth: hci1: command 0x1009 tx timeout
[   31.318313][   T20] usb 1-1: USB disconnect, device number 3