last executing test programs:

1.499211965s ago: executing program 2 (id=187):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "800610", 0x14, 0x6, 0x0, @remote, @local, {[], {{0xa025, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa237dc28a5360056}}}}}}}, 0x0)

1.466922125s ago: executing program 2 (id=188):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@quota}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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")
creat(&(0x7f0000000340)='./bus\x00', 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

1.288911448s ago: executing program 2 (id=194):
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_clone3(&(0x7f00000001c0)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.101288742s ago: executing program 4 (id=198):
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x2182840, 0x0, 0x0, 0x0, &(0x7f00000000c0))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)

1.061871362s ago: executing program 4 (id=200):
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0)
syz_fuse_handle_req(r0, &(0x7f000000a200)="c1fd43b601662701272af37a7deda072caa09fc23d252b6daa11b0a4ef2825e87f09fb6bc3dfd84ddd853b18203bbf08b1af6066c78b4714a789a8f3605f5920e7afc5b0a04271cebce72a797abd5b9e4a44fdcc150e6ef0e8c3d4360e74275818df26243f28cac3d84e264fd0c77d4bccbc466e7244b247d9dcee026df89aefc958d84a55d4d6922d96ce0349fe28efd6b83d15b7b08143a721c4a677b72362a49eeb15ec5b5f8569bad585e30a62ab149e7e4c7f49af9560fd52ea5730135dc3ea3f6a9a3ae628a86457843f51c3973ca6aad1adbb30b2459f90699e2ba3a6335ddcace3737ed8f5f21e027ac2b224389bf0c8c005ac8d8c3ae188679d34da0a2c20a910487d3c91b18770fa5ee483a3f09b882960f12e7d2eb9015895ce80b37f74a305a50deb146b1c3430f31d28e6f827b9c7070bc880d251ddb09e0e70a0512ed2600256332c43a5deaecb01f089333fc3b6721f6ed5b41f9971b7c63f57b5afa8042f5beb1ac1274676dc5406b5828247123bb7be795baee59d779bbde227c90d0a5d863936d434f2ce7a45f9b650600f32827b92e2d828915f0411f765ed82dd012561ed29b09950b96f8e490f1448dbd5e45bdc92a2a36aa67e5e9396b6376f82aa6915eac4144a102de786563e4482f0917698bc70776f8c7aad3346e18ee295af54f3c1658f9b124116a2fdac79353b095cf667dd941c3cba141b3ac8982eed42e7db649c9d49a59378216bf4323ff4c2f2992994d4144b74866a2426e19a2dc8dbf4643f97a214fc9c448512316d76c4116c3ae600dfb98cf85472da661745b638438dbf15d8dd87a8ba35205a65ba5bf79cf941454f8c788dc2eeccea412add734798c82e9c86122a91dff778edcd309c05fdca66176e9bc4d410b0ee4627eb889443b574ce205c7f4d6d428e909952712ec3dfc89552279b2da87b010051a451377a0c51a34ebba25c3b62ba98eb6f1549b0fee6a7c5e0c7a72835388803a0a8342bb9f2733224c92a50dd25a9b335f243f2d8c68142aa1db1de2f899a56c623a32f8a74c16db56983eb83f6469316f2fc14860c075236a3ba40e8c265909b8fc6b03c6378269f6629bab81418789cd748d8b786f47ab8f13b0caa5ecd79dbea61330be6de5804f5c211cef78f555e7b2093f4a836cdb8a2cfa261be14e0f59d075f58e97ba16cb130f062a2261df244c57d6f477d761262b2e755c96bad3898894e80b23fae71fc31b2895513a11b0cf07551ca87325592dd10549b7d92da1cb07119fe970b8cc3aacc386ab64d32b308679593256d2fcd1f9e9b15ee93ef859e7268be776053182460e83fb873711226ec9aa5c35b15fbfa12ea0abfc7465b300bd8445c831ae77d2aab7d4bc3ba5f218fda9e90eacde1ac5119eb30073a6f291727cb94fc87a3d3013f3ebb1cd259067c571bd3c57eacce716e61f86bf4041bacadd6c676e17fb3cf89c4984aec78216854a60af68533fcdff12897c3e1b2c10cec019722623f477a512c4e5eef74a6d1ab7a735905373ca3a0b18c3eaa523c86238fba77e45aa07c1b96fa1e3ceb04e5f4742536b687ebf989918f6805cda9611ab9ed10ee33cda71a95be2da0d2c21d2295fdb334dc2057942382dc7d0f70300df3df84cf9a18f042c11242a347569771f9b82404e13684324fb06d867641c87d6d70ad15e90240f901d04a8b8c7fdfb8b84aefee1606f14a2a6995e6b8aaee1b372cd586a6daf28ad7d8ef644c58fa72f0b2f847eef72e18f1a4374c4fa3d604a9bfec6a1a4fefdfaa848279693208dfbc1dbb97b44c4f034090606e0ad312cdfb6a8f68dae7312b064c68813eb41992559ca63d88a8e90711c838f220a4da5bc7d82ec0af83da059bdccdb524a59ad26e43413f131e7703eb82158293a331456ce728c28923bf9ae644a331a667c2932ae1f11a9f9b893f802796ad029c40496c9bc49cdf41a40da1000000000000000933a6012a407805e70f9a180105cd0401ed01a9f6edef4e2479e1579ea365d843c197279e3c79ae56a107dfaba6af80ed9a24d535d19827596ca2b14bf4b110fae4820fc8d0570a64ae08e315da0091f766bceb1fc990465ecb84a2d72efcb9a269816863b72f8d0869b20c14bd72f909fc3ebbf2ba2f98ce3fd7eb54b738692916eeb98ab9ea04ce3e740817dc9ac6561c71d3bc15358ebbb3027294f66eb890577f8a63ecd23beacd93c3b1498d5eefd8b68ebab3536653d5839713b07f79ebb2a6106c009cc535a2173cde3ccc65676bcae513145db5bf08546e8810fb4d193266d491fb9121935138a74c52149959a0c270cd6e244dd7cb140fcf6bf0e7536220f798bf32cda564ebde025a92617f3195e549a491a45446ff0ebfd3b047775af339e59a8da0db6223339325c6f493baa5f2c71b5710a975def3e3919a24a52351acc12e5a2ab6c171705bad0e6afd0ad2b6dd6feaedc9924fdba533fc958fab9a980b775eb4c93a499413073cf09826381b8054f9f09f4a0dfa63ac2f6cb22d001ff277ec7f493bc54d2d1d34a6dad62cd7bccab2ecd419c90087f6945311460b87daad605ff8519aba1d8311a5e565dd26655577aa13da31e01cacbb7e10e720a486e9cc450b8a21d23aeab42838d81dc05f5be0474ab81b806fe71b888323037f3262179e451f765e419bddf7b7a99b40bcc226986efbd3765b66e56a3500de4b18b676361510bd35b3a9c6b8c08222cf7a73c4cda972190f839c2d01a4c171a803c0a77d2769c892b2f0191d2fa01d7d5ca53573e47e93ca9b56b8f0d684d5458d505ad8383f22e19024da06bf6abf30ed663cfb33e202be17bb951e9ea30cfcf65675d2fc64aa51e07237fe8391549185fac5822daa92e73778e080b1304dd757f9035092a729b9a0122d1c07d60336f18a9e46ebeced1041de2e2e8a5de6f4a814d5179bddfcdeda88888cb9ce322a516af3be2b7cf371e9193cb40e66cd41dd94e37f14c6e6469e8fa6c57a4fa3125fb6819b84e276768a7354dd3e2692a77a4a60af85bec0325d0aae72a5f4f7bf9468f1d35147910a55af546e4e3634fe2d8efe116601bf84c0e9c4d442ec8f99fe6c1cc90b99a8d1e53322b26b66928fd01738fa70c0aff84b4f02946c6fa684bd617667857cd751a3ad3d324f9574af78eec6c8c51c25e01cb0ef129199f5a3b3b29e32a34c4ef14c810c2e69e06158f02033e15f1ec00419a91c1450338956a188fac918fb73692491baaf5976ca392c139ba0e551de260dfd6c733b572215f2af0aacc5709b0d4a3b36d23f5882c5644bb455075c5c48bd50492b395d14c36393019fa9eab8a211d71d173754663ea2af1ebdf9751006792609d4db47824d95d68583c922c04af3cdfb58f37b6f958a4b35cbd74a30a393be192fb46bfe4e722c3634c94fbf4829f25dc0b8b07cd16cf4c7e924eb02ae8d675539d32b5d9a54a43811eb98e2db317c67d5bc62901582cbb128542d6be3bc9a5b5b8a8827f2eab15e82b28b411edf67d786b76feed9e7d5ffbc86fbdb19ed80a4f5dcebd631719f8734c398938047011a251370e40d5929e9b4426081029b1339ccb08bb0dbcbb4eedd53792e43a046abc1d5c1dc8c1749052233e18e25593daee94f77f327de61867f1e791b797cc5ee43f8109cb0654d8742ece8512c322442f63dff88702ba047e8370a1b7304536ee7cf465a0a19d965fd03543b991449d6a1a98be5ec3867314c688c5c487e59a6bb05291fda479827172bf3db615c20ea022ff7b16020299220b7c45a7181c1eda48c9a5fa7624843d112c52d99d0b27e168eeadbcd3c60b3f366175decc8c91c64a0a16d3a2e38244dd8d2de806ad741e2256075efcb0466360acaa3f65611789a821c30a13d4b60e44173be9e288dda7d7aae2f8341d9a85104170631c942eef22c10e903bf70b0ed36831d536a0cd65c11a209e37a76f3f54deb326735bec5a532431a81f303af5e9d03717a93a3da18317c459aee8db08b9f0b3331d29770fe7fc4266c15a4294c9c435a38296cd880dcedb34f63037f2a8e3ada9ead3e52abd69e5779905f82a607f70e351d2167bf1b599cfb9314a37df876bd5f2acff82f1773c512ffd308179e47b26946ebcce112273e12895145ec88c701269c93f32a5ab2bc16acd57e997d140d18c2cbed2601a05ec33a63e7edbcca673f71eecab66af5287d7d5a1dad68771ed612d29ef8ab23ef0211b4bbed6f981cd24d652f355d94f6003b01cf3d803a6e36b470402c05816aa2cd747f293300bbe891854d932df7809c7809c2cc3d06c693981e7bc21e89aa3ea8f8829c85185e4ecfd2e293bfa2b88cae2c9e4722b9cfee01911a502d59360532528661eadf2150e26a2992871f562d6fed4a36867b2521b1778c4ce955f5980b9dd9ede42fc4a1394491ebf1c1fb0d794cb8c28b103d76b2e70b0337877a222d7f3cd61f353baf7bc9e23d80f8e5b4459937d75f869c179dd9b948a70b9ba37386532790bac12f2f342fc4f2afd8a45f109331d5daf3344ade893029e322e8b7f3bdb5a49987116b31b2bd6d5bab789ca061ea42f7647c88488f734150e161e5aea78639c5bf9c2fb88da321cbfd379b38cbe6e14af979f238685e2c0ff51629cd228602dbaceff8a214cdc66528cdea114691ef619a8c9a0f9cdb7e08c5bcfc2bfd29e39af38f5db4821c648cc3d976cc455a6e6498c92511b407f3349284901562a912c5af25ff792b9c6c5dfb73519336c7d4a87e49debce7a441b7a29706173e4e4e8dacee63a06ab85dd359b508bc8a0f7002832fae10a0a38efaa475846c4205aebe777334788c3e4652086e26dcdddad991b0ce5256e113bac692d442f524d7e292b86eaf0dd8380ccd78b1489dd2ef6beaf2eb9b08b50bb2a5ff3ba8df3b226baf79a0739d8a60cf815cb347399ac4adb2cea533d3f0ce160a563f8d401e5a6100578e4c8178a7e70663e135edc645cdec2f0588fc99a0cb60dd8788e02554ade370960ce562c210e826a1eba767a09b10f46ebbe6c9166e24286331d2ff025c57a10c7b64c506d0a68642171ad965a001700561fcac2e3f548fd58d32bab5f38b36e62f5546129cea35ce856052e3e480fc639640a5301dd700c8e8d0bd6ac790910fcf2b4f159cc1531aa1c9e37b541520450dde638942081201ae8a580f28cf50530190a45f45468753a122b364be7dad79044ec8b9977d583bc0ac3ec7b9fae192397ce8693310f301c18c2cab5208b369e63c5ac18d0266834e218bb71f308c2c2f2df4a6ccadb3788860a2c733a9252b877ea1c1e849a38a328310bafae9614a6e161170c6fcbe9bd8c4177de1fd18f56805c91fb382aad767891556ff8e1b5f3ab8c18b4fa3053c981c12fa2ea017bb7596158ca533d0dd95a95d0b392222609f6ea336711a9dc50393bc41fac0d429540ad70757b2086bf1bea0132a609ea0bdeea0cef93d8b2a0d59189bffec05281e97b4722291005e9ca7e755be9070f405ab0d6c9546a5ebda2e62adcc621c2b1f6b07cd1e617d50469ef2c71647a47ef98ffbc71505e188cef3e5c774c0987664b6989794d7ca186804ccc6296da3adf22feb351792f1a9cff77413703744bf4f21212920d6a8fa1800da7a38fef7160a50f5b895e7b76f3fd830fcb9a25f3b3ccfd082a1712237e4ca665085aa1c5aa413bce813f1b7ca66105de94babb7b4a05029cc3759d00191fd9bfa0f996cc703403dd6ed2b33f2743a788041f279b767efc373314edfae1bd33f7eaaa7418a59fff7e40d02e618172f6e0abe08c855348f3cba40c8592a0521ed1e41524f20abccb2bf0ebb933e59b7036eff5a66279d578e6b2fd6c4140b33adc67f7083110d815ac55b4833ec0504488265b3ff2bdacec17c91bea9d6bdd931bf056d6e9790e472d874a5a3946b200493c9874d057aa6be3a1ca4da6fbb88a9d853aaa7c8ccabc83582caa65078bbe7b04625d139ed9860080d185bd9798d613ca3014713eb9e36bdeb73f14ac3fc7b2f8f594404f56dd937c0a7e865fa98e858cb0af661cbe12f15c928c4c45a982e24cd322320a96ccd54656b2c7876a5d717e42d3df13189b95ddc2b5a928dbda9ee02c30352045d02cbd854af821300f198b1ce1ea8e45c969020e5c7670fbd9b7227cfd3c809fac1df2eb18c199b27e969f32052376b450003b7ff6332ee1d9fce1b5947b72575ec6541b992fbc76f0e03fc1bb9a0df5ee3de0f34125c311d2ddb67962cf9a8230efff82c25c896621082a587139e997e0532962e84ad697a1a2b80d997c2a268ecca8b7d1095530b332ef368270bf31a75b777a7cfe8c8d324a8c558d3c65f801deac6822842f85f10a641b71ad7e5fb05f64eb3033507dc3a2e9ec02d667ef36c551f69c438e8b6c3927733d83e94f035ef3da230b759df5f5d1964815b176478c4ed94402dc8265e589171df165094a2e4e75614fc6febb8484f28ec8c1252b2d933852573926837e1edf9da0da3f91697b290c3ee5a44fcab3b10095b78b5df3701431cab31750e211d442a77dbc5e2d4d0e67bf329f9103414abd4f3879511375c8800f52f8a17ae6887214bf8634bd99075ab073540f04ff675d32190a3d1152ceee32e30719cd883a82185f89f071c02df443cf7046dce8a6ddc472ed63945faef588acf57985c7ecffa438f5427fb851ebc6a4c577a33895a8fc4628286a48d3bbcda1b769aa3194869e148ba457932fa6f2e4640e2755940e2f5a6a67796b5f88ac10f389b409c0c57bd4bf0cbe0fac2fd2f58ec498d19c43952e4522b51931712eb4002b7b208c02c4e06df99fa8e93e4b9e8b0d7a57e63aacdafb19db0fd422f8e89d1275b49963bd82b490f9e4d24cfe9700e98c73b31fdcf7b7d30d73e9bf6bd86439dc8b63171d53ca7caa860c60777436099db544164d4e4a81a483ffd5ef2980110f461529c057c40f2ee63b71a8eb2d87919726bda25a8fa2f242d3ff7bf0726d8a11d141eb87d2733f1faf456f2eccbe4c3a856702a80ba7e36cd8ef8e064e16e61eedda4478d2edaf0445e2247a76e25b4b5c68720b87bba69b4171983d95a5a764f42fa6f23466096d9a097edf84952023a4541110456b93ea558c2059156c287fc6cde7c74abd90ec539a5f43c2a641b1a34cffa2538ba565d0b57513b8c1b3df541d02d6d5a0aa2f96200dbbf64ab7c0adb868cce23ca607db6d6dd18f956185c983a90c8b4a7ec630178376ac400c61c77fcbacb979e2e07115db8a034a00ffb136f91c0b16c6d796f524f9ce6a0b72c378c8939b56bb83ca0f3d09da2b82b4d3457b568878d019f54f9cddd514a601d4edfae582f1a2674892bacf6eaba66124c797e1ebf91e1b5f12e520404d213b12770966d5c5f3435169f8867faed0107d2cd4cf0638e4f1c488122da7516820cc3d12cdc9f663778455352d2be1d8d3cd611808304554bde601e4ec4c9aa50ec22648b12f45c8d84bdcfc85f9421d5aa5bcb3ab00c72bc1dea95ba0afe254df5d8b40d53adf1d4fe1dc3744bd486e3eb14775f4f4c333f751975a4a8b5bfa497850633aff3ff98deb53d1b515a08c4c474bcce46149dfd5bece51d1dfb6eaf593f8ee037404a5ce5edc2887006059cd3743448ab977899f10540b5a5eac1b9d4346654e4eb0200858b5b92525399a87859859269d3b0fa4c2159dc807548368ff701076606378b44cee2839f05ad94f659270af868cd674b44729bbb8eb2f697101bf4fb4f96d07dabaeb596a1cc884423fcac3d3805bffb3c8de3e801d641436ca6b1f50aabce4c7b3b1a24eb6977d5a8c84d6cce8ec9ee93d3062a4bd78ff916fbba7ab228838bd61f25759c6ac8650adbe2b346e65681dbafbb934358ca2b1b854bf42f42404a15caf99b785f132b9a20413b2d9d353220656ae271883ca9733430db09b5e8578e9d4fff032b0ee792f429791089d93876a33665a35c420a0686c125005242551df27673e0826a1c38bc028c104e0f958ae1ffb2d5221fd1a36e598065eed6a449567b41c027b6faa461d3aeee8dfb6285661af7fdcfa484fee654b633342eb122fe72d5d68ea4cfc988cabb0df39b8cbd064d489fcbc90bf313f3a29797d479a8fc12cf5b9ead0907a2dca568bc0f40d0fa4a9c3758f9bfd1ac3662a9f04260ef0d2b86a02d23759b210f38830c4a224649186b6e4b87c6b457217c86f502521940caf1e5b2eadb72951a790c94dd74b929232947b01cefd5a1483e127b1b6d216317b581455f9cf96876af837e5f88cc38a46eb2fb6cd7fcc6fce1a264167b86723829ffffc413bbf3b8343154944875dd6219a95418314b1e071dd59d0e96083e02cb8778069ed54137ce98bd702dead8fc74992d7743d1450faf7de44c2d59ff2dd339b80d344902bea5b3a564f01aeefe300165bf3b00d811c7ae866cb1a0a1b87400c2941841cd2d6953308f1a96d8884f4577534d3c9f3d3f3bbe8a1a3088d9b95da1fc901573e26f5b86c7a868429b9b634c9e35dfd0534563160912a43c64bacc8ea1ced7bc1b77a28716700e501905c9e81e190241e0edbf4f894aee4047c5b5fb58a3db4afaf76790690fdc1289236fbfc5f6cff540eb82de8044d17658fb054b198cc288cc43aa5d805a51cadac3e75c8fd82ad015a04932cb6f6b53aa4e8d9d84018ff8db0f756d6b5db4e06a689b52fe8471b9230c2dd14d042c1fea45c3d2452351a4222421366610d80785f7e47474d4ad58116313813d4db3176d93c4e29e5c7562806879ddc75b9cfcf38d6aed015c0f4d52302a51215187bfe254d6065bd142cc9b9e03f32ebc9686ad0d0cb3fcf0afa320a15f37cf591600636a4ef84c756c0d42ab98bc2479f0d5d230359f622447101844430a7555a4cbc702b55a4a6ed964cf399a1a493e40555f622da1643073a786a3425d95090b9b0e20521187e9e20d35f4e061e6201e67e844d88457f751e5519dd30df9251f1ce2836e0bf61eef8fc6ed22e4887186316566278bec46af3823ed53e3e18ca5741124dc53cadb5ff0846cc1c6b9c072be6dea187e8336eb6b6b7029ef79ff3b2999938cc59aafa1618fc4556ce3c81f99414d5d79538a83ee9d8a9ad0b9e57060d4be9c53266f418455d760f423a1642e9edfccede29d21891d7421ad0f1cefe472d0ef84965575419871374727bf5f1dc72057a18ed4d7e0a2ddd6d18beb2cc3718609814c2968f27465b00fb4b4a64359629722320583a05644693e6fcadde0efc12e66a0c8e48311f0550ab8fbc1556b69bb2a5a0c03f1a59d67046d7acd5beb9f7f9ae6eb18580431624d63ffe294ea5497a65ec3891f4c70b26b7b17a9f82145e5d5156d6b3355ad249bb66168bbb745d00c40d6ef42d52a032cf62caeeaec31f4c85ac403cbb0c6756953f0ddbf79da0cfa6ccc1c40de43bc4a10a700b98322e671225e80e663d30192ff5611c44c095351bb69a4e14c11a3d5b0b53e78954699760516134f3148e71a2b0bb04b24bb1a2c2b503f56249e0a2c638ff40e7c2c7d50ef7196fc9893e18c0ac3fc5a4c0d23ee08080f984dc643854b54df4a638af29dc5df79f905c4133ce263f3b2bb55fa7d56fa82795687e6ee5c68cc13d71e44367ea8670409cf2231990cc6d06e5aae2fc3af1537b33b42775b40bba3aa417016fb9dd89f90a89196c104017a68f7527b8b958e38f9646832a7790045fe394ce41bcbd1cbcbe52cd7e56cec7b2856e448fa5d7e837798b899f05a2c2fbe6d9f1a7b193bbf7c70444d6a37810d4d19d359f9cd6b8a6ef2230b735f8bebe0ccec94e44ed95234bfa4a36a2f0ee9fd5ca73d697344d28436e0fab81e73f447bb144a70aaf96acf6ff52c4737e7a4debcd285bdb54e363d842bc9a7d180c16f010fe4078b41c4c3e565c3edd64e61f995ab0086dbdc026dc1825b8c45ed96edd8d2bd9daa699e5da333274d6bee2097c004462848cd16849f95cd2252c4c87058a821ed977ed751b77b0a8fc0966bf3a30c26d49f3185782a7d314e89f039a15ede458538f1ada8eb836a36bb5d82c402e3feebd37e7b7c667a1c82edc8720072789fa5f388039daa731ce74dbd5aa8965b7ee99f6c271035239ca1c34cdc3c57bd8510dee08f74cda37095b1b098997998fa267e0be15de474b2c737936cacccb4ba44112570bbd13f870b55f3763f77724b586d6e26c3e72b20bb13272f2ee331bcabd4a79980a8d2965c20da2a3918c855215fecce95d29bec58f522d3d6d2a52c4ac080fffcb3ee7fb98591f99b7cfb7bb124cc20078030756aee8fd284df06cd5f07c13fd56e5381b19e0a3a9f412a8d27428cb6af0078e4dc8ce4836630360a5c3b98ff5e6cbac1d9d29de9838a84d4722ceea3765be3df9984cf139770f3fb986b9cc9185ab787f54be33d46c54de74d94d13f74ec70cfbe1605c00db79fa8de64cd834090a35c80759f83c8fbefcf9a276dde8a8498d084b4619578eccdda2651a475f73367bda96894bb36eb868035251694cbb745feb150555ada09909497ff1d9c8aee7a35b7c8b2fc64ff483f4fd3491ed52304e6010b9bf2af8c5b8e162a383a0bf0bf108ca78f5086132b2b1a29581f323841c2f189509898d932436e5c1e693ed91f0524da026fecaa2b7efab54aeef120be61de457171c58811e0ca8a7600e0ac249aa579d78d2e2b1d6f41a3da4676b6690ca0249251f5b48b9a3820ac5b25a52cc01bc331c24039b6f4bfab72d5838a35629259930dea936f8c60b4f1b189db1fd1b5e7e6c8a842707ad6756d098a9ab543cde3e1d1161983ea91b7322ee2a713be3bad369d8112fdc7f1ac7b5122d55dc5ae443e10db711ddd6619ffbf96068e28911b1f54388413a17958d61ca07465b54699a1351915300cb826d3bf7f4f217bba0ed3195cbd077b67167b9a03040afc237f3bb36edd9fed33d7d6e7c9493fec34be6543880b0b442d8351496f2e8d60d4d984cca743983c0afab9cdedd5a9d774a121e91230d359c27a3d7b4db38ce73db747af3ca06470901f2605c031a7c9b7d1bbb1e838d36a4d39b039e80bcddfaecca906705fe8c844e93d5aee494dc62c7b4fcb6abe09acf925ef422dc09185b53e960795c56500b43faa6e89720aeee724532f89e60e20b12cd4f832b95189bf45b96aa7af10cf8298b44278de1c67e2d71d811240a7aa2d1d6de22e5b8cef4a1f309dcdb81c5a028aabdabddc9637974c2dc19b60458f0954bc751b7ae628ac602eb7c52c7fac0c1621ee7757fc5b002ad7e8fb66fc7da0896547abf01ee091c0cfe1d0fc66e6e03599bb2aa7608a72c30203af5eac3915a0b6616b6119c4a09654de2f56e53296d1f8487cd7ec36c86894bab72ec3ce61208f848432d45a27cafcfbf2a2c56b58e017c76ac7e943aff0b4acaf84dfb343d93efb29c518a9d552c36a3e44c6ea948673bc2aa71c5a873d1d301a9c8b02f19c086f922f0b3e4f7d14e8a59c017809188e2e1b4dc6b55fb8ad82b1c04460b5ff2e9b8f47d3e833599519b79ac6313d282db4a55654f60396d2e795c41f52735dde2bf8e2ebbc8c742913359edadfcbda00", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0xffff, {0x1, 0x2000000000000, 0x0, 0xb, 0x8, 0x10000000, {0xfffffffffffffffc, 0xfffffffffffffffc, 0x8000000000000004, 0xfffffffffffffffc, 0x7, 0x4, 0x7, 0x2, 0xb8, 0x6000, 0x7fd, r2, 0x0, 0x100002, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

987.829764ms ago: executing program 4 (id=202):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close(r1)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x12)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x54, r2, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xa7, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xa7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000)

919.828054ms ago: executing program 4 (id=206):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x80003, 0x0)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
dup2(r1, r2)

895.775625ms ago: executing program 4 (id=208):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0)

852.756366ms ago: executing program 4 (id=210):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x800, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

760.326538ms ago: executing program 0 (id=213):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x26f9, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

744.252198ms ago: executing program 1 (id=214):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc)

693.360668ms ago: executing program 1 (id=215):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x1, 0x6, 0xfffa}, 0x2, [0x5, 0xc95a, 0xfffffff3, 0x80000006, 0x9, 0x2, 0x1, 0x7f, 0x6, 0xf, 0xfffffff2, 0x5f, 0xa, 0x7, 0xffff2d33, 0x8, 0x6, 0xa, 0x0, 0x80000001, 0xca, 0x7, 0x5, 0x3c5b, 0x6, 0x22, 0x2, 0xfffffffe, 0x1f461e2c, 0x2, 0x727, 0x4, 0x3, 0x0, 0x107fff, 0x4c74, 0x9, 0x0, 0xd, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x3, 0x39, 0x2, 0x6, 0x5c, 0x3, 0x5, 0x0, 0x8, 0xe1, 0x7f, 0x9, 0x5, 0x5, 0xa, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x10, 0x129432e6, 0xcb, 0x2, 0xd, 0x22d8, 0x1, 0x9, 0xfffffffc, 0x8, 0xfffffffe, 0x7, 0x5, 0x2f, 0xe, 0x8, 0x78, 0xea4, 0x7ffffffc, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x3, 0xfffffffd, 0xff, 0x1005, 0x801, 0x7, 0x4, 0x2009, 0x106, 0x2, 0x1ff, 0x27, 0x9, 0x8, 0x9, 0x8000, 0x5, 0x0, 0x2, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x74ec1f9b, 0x4, 0x2, 0x7, 0xd, 0x9, 0x48c93690, 0x802, 0xff], [0x7, 0x4, 0x0, 0x652, 0xfffffdfe, 0xd, 0x8ce, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xc, 0x4, 0x5, 0x76, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x1, 0xb7, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x7, 0x9, 0x3, 0x200, 0x80000000, 0x3, 0xb, 0x2, 0x10000, 0xa2, 0x7, 0x53cf6b7b, 0x5, 0x6, 0x54fe12d5, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x5, 0x5, 0x5, 0x6, 0xffbffffb, 0x4, 0x3, 0x8, 0x9, 0x8, 0x3], [0x10009, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0x9, 0xce5, 0x1fd, 0x7669b26d, 0x5, 0x5, 0x40000003, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x82ffff, 0x200003, 0xfffffff9, 0x7fffffff, 0x9602, 0xa, 0x8, 0x4, 0xffffffff, 0x1, 0x10002, 0x5, 0x8, 0x2b95, 0x7, 0x7, 0x9, 0x1, 0x6c1b, 0x3, 0x4, 0x5, 0xb1c, 0x1, 0x99f5, 0xffff3441, 0xfff]}, 0x45c)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x82c}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40894)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="01"], 0xc0}}, 0x0)

669.531939ms ago: executing program 3 (id=216):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

654.636589ms ago: executing program 0 (id=217):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000004c0)={0x17c04, 0xffffffffffffffff, 0x81, 0x100000001})

646.783139ms ago: executing program 3 (id=218):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)

646.161759ms ago: executing program 1 (id=219):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000200000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000200)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

623.96651ms ago: executing program 3 (id=220):
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0x7, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xc8f}]})

614.616399ms ago: executing program 1 (id=221):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)

601.73312ms ago: executing program 0 (id=222):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

601.38178ms ago: executing program 3 (id=223):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

567.575501ms ago: executing program 3 (id=224):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

566.742561ms ago: executing program 0 (id=225):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8}]}}]}, 0x38}}, 0x48040)

537.161711ms ago: executing program 0 (id=226):
r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0)
r1 = dup(r0)
write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r1, &(0x7f0000000100), 0x6c03)
prlimit64(0x0, 0x2, &(0x7f0000000000), 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000001000/0x1000)=nil)

526.451111ms ago: executing program 2 (id=227):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf5f, 0x0)

488.511162ms ago: executing program 2 (id=228):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)

488.139882ms ago: executing program 3 (id=229):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)

419.549503ms ago: executing program 2 (id=230):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)="a6", 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
sendfile(r1, r1, 0x0, 0x80000000)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1)
fallocate(r2, 0x3, 0x620c, 0x8000c62)

349.055134ms ago: executing program 0 (id=231):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
stat(&(0x7f00000004c0)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002780), &(0x7f00000027c0)='./file0\x00', 0x0, &(0x7f0000002800)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0)
getresgid(&(0x7f0000000200)=<r2=>0x0, &(0x7f0000000240), &(0x7f0000000280))
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00010000,user_id=', @ANYRESDEC=r2], 0x0, 0x0, 0x0)

183.687357ms ago: executing program 1 (id=232):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/160, 0xa0}], 0x1}, 0x2174eda0}], 0x1, 0x1, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10)

0s ago: executing program 1 (id=233):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

kernel console output (not intermixed with test programs):

[    3.869466][   T30] audit: type=1400 audit(1744032566.596:10): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[    4.129152][  T100] udevd[100]: starting version 3.2.11
[    4.181939][  T101] udevd[101]: starting eudev-3.2.11
[    4.183218][  T100] udevd (100) used greatest stack depth: 22064 bytes left
[   13.696728][   T30] kauditd_printk_skb: 50 callbacks suppressed
[   13.696741][   T30] audit: type=1400 audit(1744032576.446:61): avc:  denied  { transition } for  pid=226 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   13.703900][   T30] audit: type=1400 audit(1744032576.446:62): avc:  denied  { noatsecure } for  pid=226 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   13.707972][   T30] audit: type=1400 audit(1744032576.446:63): avc:  denied  { write } for  pid=226 comm="sh" path="pipe:[13960]" dev="pipefs" ino=13960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   13.711440][   T30] audit: type=1400 audit(1744032576.446:64): avc:  denied  { rlimitinh } for  pid=226 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   13.714715][   T30] audit: type=1400 audit(1744032576.446:65): avc:  denied  { siginh } for  pid=226 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.10.42' (ED25519) to the list of known hosts.
[   21.162744][   T30] audit: type=1400 audit(1744032583.906:66): avc:  denied  { integrity } for  pid=280 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1
[   21.186485][   T30] audit: type=1400 audit(1744032583.936:67): avc:  denied  { mounton } for  pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.187801][  T280] cgroup: Unknown subsys name 'net'
[   21.209054][   T30] audit: type=1400 audit(1744032583.936:68): avc:  denied  { mount } for  pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.235857][   T30] audit: type=1400 audit(1744032583.956:69): avc:  denied  { unmount } for  pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.236081][  T280] cgroup: Unknown subsys name 'devices'
[   21.438549][  T280] cgroup: Unknown subsys name 'hugetlb'
[   21.443962][  T280] cgroup: Unknown subsys name 'rlimit'
[   21.613681][   T30] audit: type=1400 audit(1744032584.356:70): avc:  denied  { setattr } for  pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.636675][   T30] audit: type=1400 audit(1744032584.356:71): avc:  denied  { mounton } for  pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.661182][   T30] audit: type=1400 audit(1744032584.356:72): avc:  denied  { mount } for  pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.718685][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   21.727414][   T30] audit: type=1400 audit(1744032584.476:73): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[   21.752619][   T30] audit: type=1400 audit(1744032584.476:74): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.775165][  T280] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.777983][   T30] audit: type=1400 audit(1744032584.516:75): avc:  denied  { read } for  pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.260185][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.267150][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.274194][  T291] device bridge_slave_0 entered promiscuous mode
[   22.282183][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.289086][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.296390][  T291] device bridge_slave_1 entered promiscuous mode
[   22.370918][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.377800][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.385062][  T290] device bridge_slave_0 entered promiscuous mode
[   22.392036][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.399108][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.406418][  T290] device bridge_slave_1 entered promiscuous mode
[   22.423958][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.430841][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.438100][  T293] device bridge_slave_0 entered promiscuous mode
[   22.446125][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.453011][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.460326][  T293] device bridge_slave_1 entered promiscuous mode
[   22.524198][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.531076][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.538365][  T292] device bridge_slave_0 entered promiscuous mode
[   22.556016][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.562910][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.570139][  T292] device bridge_slave_1 entered promiscuous mode
[   22.592157][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.599083][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.606307][  T294] device bridge_slave_0 entered promiscuous mode
[   22.624853][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.632109][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.639336][  T294] device bridge_slave_1 entered promiscuous mode
[   22.777975][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.784834][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.792070][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.798927][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.823720][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.830585][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.837725][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.844460][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.858998][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.865843][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.872981][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.879751][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.888301][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.895155][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.902279][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.909046][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.935176][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.942337][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.949512][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.956789][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.963936][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.971205][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.978318][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.985296][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.993333][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   23.000598][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.028315][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.035978][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   23.044243][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.052384][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.059255][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.067151][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   23.075221][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.083332][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.090178][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.097400][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.105332][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.112175][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.119385][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.127428][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.134247][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.141506][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   23.166495][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.175123][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.182427][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.190454][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.197290][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.204519][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.212554][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.219398][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.226770][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.234511][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.253897][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.261763][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.270258][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.277118][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.303809][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   23.312320][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.320711][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.327599][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.335398][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   23.342726][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.350032][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   23.358226][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.366137][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.372998][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.380435][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   23.388769][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.396920][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.403743][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.410980][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.419196][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.426996][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.434772][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.442631][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.450628][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.458572][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.466406][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.474116][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.482058][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.490733][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.498676][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.514059][  T291] device veth0_vlan entered promiscuous mode
[   23.520325][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.528503][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.537040][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.544718][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.552650][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.560883][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.573552][  T294] device veth0_vlan entered promiscuous mode
[   23.583664][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.591079][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.598409][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.606064][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.614199][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.622283][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.630192][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.637630][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.651594][  T290] device veth0_vlan entered promiscuous mode
[   23.663181][  T294] device veth1_macvtap entered promiscuous mode
[   23.670085][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.678307][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.686948][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.695019][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.702910][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.711086][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.718459][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.735193][  T292] device veth0_vlan entered promiscuous mode
[   23.744390][  T290] device veth1_macvtap entered promiscuous mode
[   23.751388][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.759572][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.768040][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.776132][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.784862][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.792621][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.800633][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.808813][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.816838][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.824202][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.831513][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.839357][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.847220][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.858856][  T291] device veth1_macvtap entered promiscuous mode
[   23.869895][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.877322][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.884503][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.892827][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.901017][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.908684][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.916820][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.928701][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.936946][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.950096][  T292] device veth1_macvtap entered promiscuous mode
[   23.959175][  T293] device veth0_vlan entered promiscuous mode
[   23.965426][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.973811][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.982204][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.990487][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.998706][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.006929][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.014959][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.023208][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.031505][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.039833][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.065630][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.074259][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.083013][  T290] request_module fs-gadgetfs succeeded, but still no fs?
[   24.111441][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.131095][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.139861][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.156661][  T293] device veth1_macvtap entered promiscuous mode
[   24.173954][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.185203][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.223099][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.248062][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.484035][  T340] syz.1.8[340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   24.484107][  T340] syz.1.8[340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   24.528426][  T318] syz.3.4 (318) used greatest stack depth: 21072 bytes left
[   24.638466][  T356] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   24.668647][  T364] loop0: detected capacity change from 0 to 2048
[   24.735066][  T364] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   24.746574][  T364] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   24.748384][  T373] loop1: detected capacity change from 0 to 256
[   24.770005][  T364] fs-verity: sha512 using implementation "sha512-avx2"
[   24.785895][  T364] syz.0.20 (364) used greatest stack depth: 19848 bytes left
[   24.816650][  T373] exfat: Unknown parameter 'zero_size_dir'
[   24.975833][  T398] loop1: detected capacity change from 0 to 2048
[   25.052434][  T405] process 'syz.0.36' launched './file1' with NULL argv: empty string added
[   25.071654][  T398] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   25.221526][  T425] SELinux: failed to load policy
[   25.231450][  T427] loop1: detected capacity change from 0 to 512
[   25.267157][  T427] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   25.280598][  T427] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   25.296416][  T427] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   25.309588][  T427] EXT4-fs (loop1): 1 truncate cleaned up
[   25.315174][  T427] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[   25.445457][  T449] loop4: detected capacity change from 0 to 128
[   25.502334][  T452] Zero length message leads to an empty skb
[   25.546056][  T330] attempt to access beyond end of device
[   25.546056][  T330] loop4: rw=1, want=1041, limit=128
[   25.696718][  T473] loop1: detected capacity change from 0 to 8192
[   25.726523][  T473] =======================================================
[   25.726523][  T473] WARNING: The mand mount option has been deprecated and
[   25.726523][  T473]          and is ignored by this kernel. Remove the mand
[   25.726523][  T473]          option from the mount to silence this warning.
[   25.726523][  T473] =======================================================
[   25.816605][  T494] loop3: detected capacity change from 0 to 128
[   25.968409][  T506] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=506 comm=syz.1.80
[   25.980812][  T506] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=506 comm=syz.1.80
[   26.070340][  T524] capability: warning: `syz.3.88' uses 32-bit capabilities (legacy support in use)
[   26.082565][  T522] netlink: 'syz.2.87': attribute type 3 has an invalid length.
[   26.105909][  T314] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   26.116432][  T314] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   26.136250][  T313] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   26.202407][   T30] kauditd_printk_skb: 181 callbacks suppressed
[   26.202424][   T30] audit: type=1400 audit(1744032588.946:257): avc:  denied  { connect } for  pid=533 comm="syz.2.92" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   26.247291][  T536] overlayfs: failed to resolve './file0': -2
[   26.272809][   T30] audit: type=1400 audit(1744032588.946:258): avc:  denied  { setopt } for  pid=533 comm="syz.2.92" laddr=::1 lport=255 faddr=::1 fport=16384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   26.304086][  T540] loop2: detected capacity change from 0 to 256
[   26.329703][   T30] audit: type=1400 audit(1744032588.976:259): avc:  denied  { write } for  pid=533 comm="syz.2.92" path="socket:[16868]" dev="sockfs" ino=16868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   26.369021][  T542] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=542 comm=syz.1.97
[   26.396366][   T30] audit: type=1400 audit(1744032588.976:260): avc:  denied  { read } for  pid=533 comm="syz.2.92" laddr=::1 lport=255 faddr=::1 fport=16384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   26.418519][  T542] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=542 comm=syz.1.97
[   26.430976][   T30] audit: type=1400 audit(1744032588.996:261): avc:  denied  { unlink } for  pid=535 comm="syz.2.93" name="#1" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   26.453596][  T546] loop3: detected capacity change from 0 to 128
[   26.467895][  T540] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   26.496244][   T30] audit: type=1400 audit(1744032589.016:262): avc:  denied  { append } for  pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   26.518366][  T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   26.531294][  T313] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   26.549206][  T552] devpts: called with bogus options
[   26.566312][  T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.586948][   T30] audit: type=1400 audit(1744032589.016:263): avc:  denied  { open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   26.613882][  T313] usb 5-1: config 0 descriptor??
[   26.622029][   T30] audit: type=1400 audit(1744032589.016:264): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   26.647527][   T30] audit: type=1400 audit(1744032589.246:265): avc:  denied  { write } for  pid=539 comm="syz.2.95" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   26.691687][   T30] audit: type=1400 audit(1744032589.246:266): avc:  denied  { add_name } for  pid=539 comm="syz.2.95" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   26.901827][  T583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=583 comm=syz.0.113
[   27.106966][  T313] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[   27.122142][  T313] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input4
[   27.209565][  T313] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[   27.339910][  T597] loop3: detected capacity change from 0 to 40427
[   27.388237][  T597] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[   27.396780][  T597] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   27.406730][  T597] F2FS-fs (loop3): invalid crc value
[   27.413882][  T597] F2FS-fs (loop3): Found nat_bits in checkpoint
[   27.459549][  T597] F2FS-fs (loop3): Start checkpoint disabled!
[   27.477299][  T597] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   27.484172][  T597] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   27.564627][  T327] attempt to access beyond end of device
[   27.564627][  T327] loop3: rw=2049, want=40992, limit=40427
[   27.740673][   T42] usb 5-1: USB disconnect, device number 2
[   27.829100][  T633] loop2: detected capacity change from 0 to 40427
[   27.841210][  T652] SELinux:  Context /usr/lib/telepathy/mission-control-5 is not valid (left unmapped).
[   27.866935][  T633] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   27.874698][  T633] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   27.889160][  T633] F2FS-fs (loop2): invalid crc value
[   27.902395][  T633] F2FS-fs (loop2): Found nat_bits in checkpoint
[   27.936673][  T633] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   27.943626][  T633] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   27.976201][  T313] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   28.040646][  T665] device ip_vti0 entered promiscuous mode
[   28.046494][  T665] device vlan2 entered promiscuous mode
[   28.056668][  T665] device ip_vti0 left promiscuous mode
[   28.336561][  T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   28.356438][  T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   28.366284][  T313] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   28.375297][  T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.384247][  T313] usb 4-1: config 0 descriptor??
[   28.473642][  T633] attempt to access beyond end of device
[   28.473642][  T633] loop2: rw=2049, want=40432, limit=40427
[   28.575721][  T327] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   28.594364][  T327] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   28.886452][  T686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.154'.
[   28.946217][  T313] usbhid 4-1:0.0: can't add hid device: -71
[   28.952446][  T313] usbhid: probe of 4-1:0.0 failed with error -71
[   28.979351][  T313] usb 4-1: USB disconnect, device number 2
[   29.125007][  T699] netlink: 104 bytes leftover after parsing attributes in process `syz.2.160'.
[   29.172563][  T703] syz.0.162[703] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   29.172612][  T703] syz.0.162[703] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   29.184733][  T703] syz.0.162[703] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   29.195914][  T703] syz.0.162[703] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   29.225486][  T707] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   29.390160][  T722] kvm: emulating exchange as write
[   29.433821][  T732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.174'.
[   29.445025][  T728] SELinux: failed to load policy
[   29.644038][  T740] loop3: detected capacity change from 0 to 40427
[   29.728022][  T740] F2FS-fs (loop3): invalid crc value
[   29.752977][  T740] F2FS-fs (loop3): Found nat_bits in checkpoint
[   29.761790][  T760] syz.2.184 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   29.824728][  T740] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   29.862151][  T769] loop2: detected capacity change from 0 to 512
[   29.882516][  T769] EXT4-fs (loop2): Ignoring removed oldalloc option
[   29.889682][  T769] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   29.900001][  T291] attempt to access beyond end of device
[   29.900001][  T291] loop3: rw=2049, want=45104, limit=40427
[   29.932200][  T774] netlink: 'syz.1.191': attribute type 1 has an invalid length.
[   29.934365][  T776] loop4: detected capacity change from 0 to 128
[   29.939692][  T774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'.
[   29.958968][  T769] EXT4-fs (loop2): 1 truncate cleaned up
[   29.964496][  T769] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,quota,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[   29.998539][  T776] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nouid32,,errors=continue. Quota mode: none.
[   30.012954][  T776] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.029627][  T294] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[   30.120855][  T786] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.127897][  T786] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.236608][  T796] overlayfs: missing 'lowerdir'
[   30.363991][  T809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.202'.
[   30.514470][  T827] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22
[   30.524401][  T827] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev tmpfs, type tmpfs) errno=-22
[   30.627842][  T838] netlink: 172 bytes leftover after parsing attributes in process `syz.1.215'.
[   30.704870][  T851] xt_hashlimit: size too large, truncated to 1048576
[   30.756208][   T26] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   31.156341][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   31.172788][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   31.192328][   T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   31.211363][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.228672][   T26] usb 5-1: config 0 descriptor??
[   31.248104][   T30] kauditd_printk_skb: 148 callbacks suppressed
[   31.248120][   T30] audit: type=1400 audit(1744032593.996:415): avc:  denied  { connect } for  pid=880 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   31.286794][   T26] hub 5-1:0.0: USB hub found
[   31.316367][    C1] ==================================================================
[   31.324263][    C1] BUG: KASAN: use-after-free in cpu_map_generic_redirect+0x1a8/0x6d0
[   31.332155][    C1] Read of size 8 at addr ffff8881114b6f18 by task kworker/1:1/42
[   31.339707][    C1] 
[   31.341875][    C1] CPU: 1 PID: 42 Comm: kworker/1:1 Not tainted 5.15.178-syzkaller-00034-g5e1b899f19c3 #0
[   31.351511][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   31.361411][    C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[   31.367317][    C1] Call Trace:
[   31.370435][    C1]  <IRQ>
[   31.373133][    C1]  dump_stack_lvl+0x151/0x1c0
[   31.377648][    C1]  ? io_uring_drop_tctx_refs+0x190/0x190
[   31.383104][    C1]  ? panic+0x760/0x760
[   31.387016][    C1]  print_address_description+0x87/0x3b0
[   31.392391][    C1]  kasan_report+0x179/0x1c0
[   31.396727][    C1]  ? kfree+0xcc/0x270
[   31.400547][    C1]  ? cpu_map_generic_redirect+0x1a8/0x6d0
[   31.406116][    C1]  ? cpu_map_generic_redirect+0x1a8/0x6d0
[   31.411703][    C1]  __asan_report_load8_noabort+0x14/0x20
[   31.417122][    C1]  cpu_map_generic_redirect+0x1a8/0x6d0
[   31.422502][    C1]  ? bpf_prog_run_generic_xdp+0x965/0x1070
[   31.428144][    C1]  ? cpu_map_enqueue+0x370/0x370
[   31.432920][    C1]  xdp_do_generic_redirect+0x3df/0xb40
[   31.438214][    C1]  do_xdp_generic+0x50b/0x7c0
[   31.442726][    C1]  ? generic_xdp_tx+0x490/0x490
[   31.447425][    C1]  ? migrate_disable+0xd9/0x190
[   31.452098][    C1]  __netif_receive_skb_core+0x1706/0x3640
[   31.457659][    C1]  ? set_rps_cpu+0x5e0/0x5e0
[   31.462086][    C1]  ? ipv6_rcv+0xeb/0x270
[   31.466160][    C1]  ? __kasan_check_write+0x14/0x20
[   31.471107][    C1]  ? ip6_rcv_finish+0x350/0x350
[   31.475793][    C1]  ? refcount_add+0x80/0x80
[   31.480136][    C1]  ? __local_bh_enable_ip+0x58/0x80
[   31.485166][    C1]  ? local_bh_enable+0x1f/0x30
[   31.489769][    C1]  ? wg_packet_send_staged_packets+0xeca/0x14c0
[   31.495848][    C1]  __netif_receive_skb+0x11c/0x530
[   31.500791][    C1]  ? deliver_ptype_list_skb+0x3b0/0x3b0
[   31.506171][    C1]  ? __kasan_check_write+0x14/0x20
[   31.511116][    C1]  ? _raw_spin_lock+0xa4/0x1b0
[   31.515726][    C1]  ? _raw_spin_trylock_bh+0x190/0x190
[   31.520936][    C1]  process_backlog+0x31c/0x650
[   31.525532][    C1]  __napi_poll+0xc4/0x5a0
[   31.529698][    C1]  net_rx_action+0x47d/0xc50
[   31.534120][    C1]  ? net_tx_action+0x550/0x550
[   31.538718][    C1]  ? __sched_clock_gtod_offset+0xa0/0x100
[   31.544277][    C1]  handle_softirqs+0x25e/0x5c0
[   31.548878][    C1]  __do_softirq+0xb/0xd
[   31.552865][    C1]  do_softirq+0xf6/0x150
[   31.557291][    C1]  </IRQ>
[   31.560071][    C1]  <TASK>
[   31.562844][    C1]  ? __local_bh_enable_ip+0x80/0x80
[   31.567882][    C1]  ? _raw_spin_unlock_irqrestore+0x5c/0x80
[   31.573521][    C1]  __local_bh_enable_ip+0x75/0x80
[   31.578394][    C1]  _raw_read_unlock_bh+0x29/0x30
[   31.583154][    C1]  wg_socket_send_skb_to_peer+0x178/0x1d0
[   31.588709][    C1]  wg_packet_tx_worker+0x1e6/0x530
[   31.593656][    C1]  process_one_work+0x6bb/0xc10
[   31.598350][    C1]  worker_thread+0xad5/0x12a0
[   31.602862][    C1]  kthread+0x421/0x510
[   31.606761][    C1]  ? worker_clr_flags+0x180/0x180
[   31.611626][    C1]  ? kthread_blkcg+0xd0/0xd0
[   31.616049][    C1]  ret_from_fork+0x1f/0x30
[   31.620308][    C1]  </TASK>
[   31.623170][    C1] 
[   31.625337][    C1] Allocated by task 834:
[   31.629420][    C1]  ____kasan_kmalloc+0xdb/0x110
[   31.634101][    C1]  __kasan_kmalloc+0x9/0x10
[   31.638444][    C1]  __kmalloc+0x13f/0x2c0
[   31.642685][    C1]  bpf_map_kmalloc_node+0xdb/0x160
[   31.647645][    C1]  cpu_map_update_elem+0x26c/0xea0
[   31.652571][    C1]  bpf_map_update_value+0x1a3/0x3c0
[   31.657606][    C1]  map_update_elem+0x644/0x770
[   31.662214][    C1]  __sys_bpf+0x405/0x760
[   31.666282][    C1]  __x64_sys_bpf+0x7c/0x90
[   31.670538][    C1]  x64_sys_call+0x87f/0x9a0
[   31.674880][    C1]  do_syscall_64+0x3b/0xb0
[   31.679136][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   31.684857][    C1] 
[   31.687028][    C1] Freed by task 835:
[   31.690762][    C1]  kasan_set_track+0x4b/0x70
[   31.695186][    C1]  kasan_set_free_info+0x23/0x40
[   31.699960][    C1]  ____kasan_slab_free+0x126/0x160
[   31.704995][    C1]  __kasan_slab_free+0x11/0x20
[   31.709600][    C1]  slab_free_freelist_hook+0xbd/0x190
[   31.714819][    C1]  kfree+0xcc/0x270
[   31.718450][    C1]  put_cpu_map_entry+0x6dd/0x750
[   31.723222][    C1]  cpu_map_kthread_run+0x22d0/0x2390
[   31.728340][    C1]  kthread+0x421/0x510
[   31.732248][    C1]  ret_from_fork+0x1f/0x30
[   31.736499][    C1] 
[   31.738669][    C1] Last potentially related work creation:
[   31.744227][    C1]  kasan_save_stack+0x3b/0x60
[   31.748738][    C1]  __kasan_record_aux_stack+0xd3/0xf0
[   31.753945][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[   31.759586][    C1]  insert_work+0x56/0x320
[   31.763751][    C1]  __queue_work+0x92a/0xcd0
[   31.768095][    C1]  queue_work_on+0x105/0x170
[   31.772517][    C1]  cpu_map_free+0x1e7/0x2c0
[   31.776875][    C1]  bpf_map_free_deferred+0x10d/0x1e0
[   31.781985][    C1]  process_one_work+0x6bb/0xc10
[   31.786670][    C1]  worker_thread+0xad5/0x12a0
[   31.791183][    C1]  kthread+0x421/0x510
[   31.795085][    C1]  ret_from_fork+0x1f/0x30
[   31.799340][    C1] 
[   31.801506][    C1] Second to last potentially related work creation:
[   31.807939][    C1]  kasan_save_stack+0x3b/0x60
[   31.812446][    C1]  __kasan_record_aux_stack+0xd3/0xf0
[   31.817651][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[   31.823294][    C1]  call_rcu+0x123/0x10b0
[   31.827370][    C1]  cpu_map_free+0x109/0x2c0
[   31.831709][    C1]  bpf_map_free_deferred+0x10d/0x1e0
[   31.836844][    C1]  process_one_work+0x6bb/0xc10
[   31.841518][    C1]  worker_thread+0xad5/0x12a0
[   31.846032][    C1]  kthread+0x421/0x510
[   31.849938][    C1]  ret_from_fork+0x1f/0x30
[   31.854192][    C1] 
[   31.856359][    C1] The buggy address belongs to the object at ffff8881114b6f00
[   31.856359][    C1]  which belongs to the cache kmalloc-192 of size 192
[   31.870245][    C1] The buggy address is located 24 bytes inside of
[   31.870245][    C1]  192-byte region [ffff8881114b6f00, ffff8881114b6fc0)
[   31.883265][    C1] The buggy address belongs to the page:
[   31.888750][    C1] page:ffffea0004452d80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1114b6
[   31.898804][    C1] flags: 0x4000000000000200(slab|zone=1)
[   31.904281][    C1] raw: 4000000000000200 ffffea00043bb880 0000000500000005 ffff888100042c00
[   31.912696][    C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   31.921110][    C1] page dumped because: kasan: bad access detected
[   31.927363][    C1] page_owner tracks the page as allocated
[   31.932928][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 103, ts 4511822494, free_ts 4510988008
[   31.948533][    C1]  post_alloc_hook+0x1a3/0x1b0
[   31.953131][    C1]  prep_new_page+0x1b/0x110
[   31.957476][    C1]  get_page_from_freelist+0x3550/0x35d0
[   31.962857][    C1]  __alloc_pages+0x27e/0x8f0
[   31.967279][    C1]  new_slab+0x9a/0x4e0
[   31.971188][    C1]  ___slab_alloc+0x39e/0x830
[   31.975616][    C1]  __slab_alloc+0x4a/0x90
[   31.979783][    C1]  kmem_cache_alloc_trace+0x147/0x270
[   31.984988][    C1]  kernfs_fop_open+0x324/0xab0
[   31.989589][    C1]  do_dentry_open+0x81c/0xfd0
[   31.994100][    C1]  vfs_open+0x73/0x80
[   31.997924][    C1]  path_openat+0x26f0/0x2f40
[   32.002344][    C1]  do_filp_open+0x21c/0x460
[   32.006687][    C1]  do_sys_openat2+0x13f/0x820
[   32.011201][    C1]  __x64_sys_openat+0x243/0x290
[   32.015886][    C1]  x64_sys_call+0x6bf/0x9a0
[   32.020227][    C1] page last free stack trace:
[   32.024739][    C1]  free_unref_page_prepare+0x7c8/0x7d0
[   32.030032][    C1]  free_unref_page+0xe8/0x750
[   32.034543][    C1]  __free_pages+0x61/0xf0
[   32.038714][    C1]  free_pages+0x7c/0x90
[   32.042706][    C1]  selinux_genfs_get_sid+0x24d/0x2a0
[   32.047824][    C1]  inode_doinit_with_dentry+0x8d2/0x1070
[   32.053380][    C1]  selinux_d_instantiate+0x27/0x40
[   32.058326][    C1]  security_d_instantiate+0x9f/0x100
[   32.063445][    C1]  d_splice_alias+0x6d/0x390
[   32.067873][    C1]  kernfs_iop_lookup+0x29e/0x2f0
[   32.072646][    C1]  __lookup_slow+0x2b9/0x400
[   32.077091][    C1]  lookup_slow+0x5a/0x80
[   32.081151][    C1]  walk_component+0x48c/0x610
[   32.085664][    C1]  path_lookupat+0x16d/0x450
[   32.090094][    C1]  filename_lookup+0x230/0x5c0
[   32.094700][    C1]  user_path_at_empty+0x43/0x1a0
[   32.099469][    C1] 
[   32.101638][    C1] Memory state around the buggy address:
[   32.107112][    C1]  ffff8881114b6e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   32.115005][    C1]  ffff8881114b6e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   32.122903][    C1] >ffff8881114b6f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   32.130809][    C1]                             ^
[   32.135488][    C1]  ffff8881114b6f80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   32.143406][    C1]  ffff8881114b7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   32.151281][    C1] ==================================================================
[   32.159178][    C1] Disabling lock debugging due to kernel taint
[   32.165256][    C1] ================================================================================
[   32.174306][    C1] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9
[   32.182393][    C1] index 16382 is out of range for type 'unsigned long[8]'
[   32.189332][    C1] CPU: 1 PID: 42 Comm: kworker/1:1 Tainted: G    B             5.15.178-syzkaller-00034-g5e1b899f19c3 #0
[   32.200333][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   32.210222][    C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[   32.216119][    C1] Call Trace:
[   32.219248][    C1]  <IRQ>
[   32.221933][    C1]  dump_stack_lvl+0x151/0x1c0
[   32.226449][    C1]  ? io_uring_drop_tctx_refs+0x190/0x190
[   32.231916][    C1]  ? kvm_sched_clock_read+0x18/0x40
[   32.236961][    C1]  ? sched_clock+0x9/0x10
[   32.241121][    C1]  dump_stack+0x15/0x20
[   32.245116][    C1]  __ubsan_handle_out_of_bounds+0x118/0x140
[   32.250843][    C1]  __pv_queued_spin_lock_slowpath+0xb9d/0xc40
[   32.256742][    C1]  ? sysvec_apic_timer_interrupt+0x64/0xc0
[   32.262382][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   32.268375][    C1]  ? __pv_queued_spin_unlock_slowpath+0x310/0x310
[   32.274622][    C1]  ? kasan_check_range+0x293/0x2a0
[   32.279568][    C1]  _raw_spin_lock+0x139/0x1b0
[   32.284079][    C1]  ? _raw_spin_trylock_bh+0x190/0x190
[   32.289404][    C1]  ? cpu_map_generic_redirect+0x1a8/0x6d0
[   32.294960][    C1]  ? cpu_map_generic_redirect+0x1a8/0x6d0
[   32.300512][    C1]  cpu_map_generic_redirect+0x1d5/0x6d0
[   32.305898][    C1]  ? bpf_prog_run_generic_xdp+0x965/0x1070
[   32.311538][    C1]  ? cpu_map_enqueue+0x370/0x370
[   32.316312][    C1]  xdp_do_generic_redirect+0x3df/0xb40
[   32.321609][    C1]  do_xdp_generic+0x50b/0x7c0
[   32.326119][    C1]  ? generic_xdp_tx+0x490/0x490
[   32.330866][    C1]  ? migrate_disable+0xd9/0x190
[   32.335488][    C1]  __netif_receive_skb_core+0x1706/0x3640
[   32.341048][    C1]  ? set_rps_cpu+0x5e0/0x5e0
[   32.345473][    C1]  ? ipv6_rcv+0xeb/0x270
[   32.349554][    C1]  ? __kasan_check_write+0x14/0x20
[   32.354496][    C1]  ? ip6_rcv_finish+0x350/0x350
[   32.359186][    C1]  ? refcount_add+0x80/0x80
[   32.363523][    C1]  ? __local_bh_enable_ip+0x58/0x80
[   32.368560][    C1]  ? local_bh_enable+0x1f/0x30
[   32.373166][    C1]  ? wg_packet_send_staged_packets+0xeca/0x14c0
[   32.379258][    C1]  __netif_receive_skb+0x11c/0x530
[   32.384188][    C1]  ? deliver_ptype_list_skb+0x3b0/0x3b0
[   32.389566][    C1]  ? __kasan_check_write+0x14/0x20
[   32.394508][    C1]  ? _raw_spin_lock+0xa4/0x1b0
[   32.399109][    C1]  ? _raw_spin_trylock_bh+0x190/0x190
[   32.404321][    C1]  process_backlog+0x31c/0x650
[   32.408920][    C1]  __napi_poll+0xc4/0x5a0
[   32.413091][    C1]  net_rx_action+0x47d/0xc50
[   32.417514][    C1]  ? net_tx_action+0x550/0x550
[   32.422112][    C1]  ? __sched_clock_gtod_offset+0xa0/0x100
[   32.427667][    C1]  handle_softirqs+0x25e/0x5c0
[   32.432267][    C1]  __do_softirq+0xb/0xd
[   32.436255][    C1]  do_softirq+0xf6/0x150
[   32.440338][    C1]  </IRQ>
[   32.443111][    C1]  <TASK>
[   32.445890][    C1]  ? __local_bh_enable_ip+0x80/0x80
[   32.450924][    C1]  ? _raw_spin_unlock_irqrestore+0x5c/0x80
[   32.456565][    C1]  __local_bh_enable_ip+0x75/0x80
[   32.461423][    C1]  _raw_read_unlock_bh+0x29/0x30
[   32.466200][    C1]  wg_socket_send_skb_to_peer+0x178/0x1d0
[   32.471754][    C1]  wg_packet_tx_worker+0x1e6/0x530
[   32.476805][    C1]  process_one_work+0x6bb/0xc10
[   32.481484][    C1]  worker_thread+0xad5/0x12a0
[   32.485997][    C1]  kthread+0x421/0x510
[   32.489897][    C1]  ? worker_clr_flags+0x180/0x180
[   32.494769][    C1]  ? kthread_blkcg+0xd0/0xd0
[   32.499180][    C1]  ret_from_fork+0x1f/0x30
[   32.503435][    C1]  </TASK>
[   32.506346][    C1] ================================================================================
[   32.515474][    C1] general protection fault, probably for non-canonical address 0xe010f1f79fab70e5: 0000 [#1] PREEMPT SMP KASAN
[   32.526954][    C1] KASAN: maybe wild-memory-access in range [0x0087afbcfd5b8728-0x0087afbcfd5b872f]
[   32.536071][    C1] CPU: 1 PID: 42 Comm: kworker/1:1 Tainted: G    B             5.15.178-syzkaller-00034-g5e1b899f19c3 #0
[   32.547093][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   32.556991][    C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[   32.562898][    C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x2f3/0xc40
[   32.569569][    C1] Code: 74 1e 48 89 4c 24 10 48 8b 7c 24 10 e8 c6 9e 5d 00 48 8b 4c 24 10 48 ba 00 00 00 00 00 fc ff df 4c 03 21 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 3f 9f 5d 00 48 ba 00 00 00 00 00 fc
[   32.589011][    C1] RSP: 0018:ffffc900001d05c0 EFLAGS: 00010203
[   32.594915][    C1] RAX: 0010f5f79fab70e5 RBX: ffff8881f7138ad4 RCX: ffffffff86286820
[   32.602727][    C1] RDX: dffffc0000000000 RSI: 0000000000000002 RDI: 00000000ffffffff
[   32.610535][    C1] RBP: ffffc900001d06b0 R08: ffffffff8141a9ab R09: 0000000000000003
[   32.618345][    C1] R10: fffffbfff0e9aa4c R11: dffffc0000000001 R12: 0087afbcfd5b872d
[   32.626159][    C1] R13: 1ffff11022296c40 R14: 1ffff1103ee27159 R15: ffff8881114b6204
[   32.633973][    C1] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   32.642734][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   32.649158][    C1] CR2: 00002000001be000 CR3: 0000000128617000 CR4: 00000000003506a0
[   32.656968][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   32.664776][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   32.672709][    C1] Call Trace:
[   32.675837][    C1]  <IRQ>
[   32.678523][    C1]  ? __die_body+0x62/0xb0
[   32.682688][    C1]  ? die_addr+0x9f/0xd0
[   32.686680][    C1]  ? exc_general_protection+0x311/0x4b0
[   32.692066][    C1]  ? asm_exc_general_protection+0x27/0x30
[   32.697618][    C1]  ? check_panic_on_warn+0x5b/0xb0
[   32.702565][    C1]  ? __pv_queued_spin_lock_slowpath+0x2f3/0xc40
[   32.708648][    C1]  ? sysvec_apic_timer_interrupt+0x64/0xc0
[   32.714281][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   32.720270][    C1]  ? __pv_queued_spin_unlock_slowpath+0x310/0x310
[   32.726520][    C1]  ? kasan_check_range+0x293/0x2a0
[   32.731468][    C1]  _raw_spin_lock+0x139/0x1b0
[   32.735981][    C1]  ? _raw_spin_trylock_bh+0x190/0x190
[   32.741188][    C1]  ? cpu_map_generic_redirect+0x1a8/0x6d0
[   32.746740][    C1]  ? cpu_map_generic_redirect+0x1a8/0x6d0
[   32.752295][    C1]  cpu_map_generic_redirect+0x1d5/0x6d0
[   32.757677][    C1]  ? bpf_prog_run_generic_xdp+0x965/0x1070
[   32.763317][    C1]  ? cpu_map_enqueue+0x370/0x370
[   32.768093][    C1]  xdp_do_generic_redirect+0x3df/0xb40
[   32.773387][    C1]  do_xdp_generic+0x50b/0x7c0
[   32.777904][    C1]  ? generic_xdp_tx+0x490/0x490
[   32.782587][    C1]  ? migrate_disable+0xd9/0x190
[   32.787273][    C1]  __netif_receive_skb_core+0x1706/0x3640
[   32.792829][    C1]  ? set_rps_cpu+0x5e0/0x5e0
[   32.797254][    C1]  ? ipv6_rcv+0xeb/0x270
[   32.801333][    C1]  ? __kasan_check_write+0x14/0x20
[   32.806300][    C1]  ? ip6_rcv_finish+0x350/0x350
[   32.810967][    C1]  ? refcount_add+0x80/0x80
[   32.815307][    C1]  ? __local_bh_enable_ip+0x58/0x80
[   32.820340][    C1]  ? local_bh_enable+0x1f/0x30
[   32.824945][    C1]  ? wg_packet_send_staged_packets+0xeca/0x14c0
[   32.831017][    C1]  __netif_receive_skb+0x11c/0x530
[   32.835967][    C1]  ? deliver_ptype_list_skb+0x3b0/0x3b0
[   32.841346][    C1]  ? __kasan_check_write+0x14/0x20
[   32.846292][    C1]  ? _raw_spin_lock+0xa4/0x1b0
[   32.850891][    C1]  ? _raw_spin_trylock_bh+0x190/0x190
[   32.856105][    C1]  process_backlog+0x31c/0x650
[   32.860704][    C1]  __napi_poll+0xc4/0x5a0
[   32.864869][    C1]  net_rx_action+0x47d/0xc50
[   32.869294][    C1]  ? net_tx_action+0x550/0x550
[   32.873890][    C1]  ? __sched_clock_gtod_offset+0xa0/0x100
[   32.879451][    C1]  handle_softirqs+0x25e/0x5c0
[   32.884049][    C1]  __do_softirq+0xb/0xd
[   32.888039][    C1]  do_softirq+0xf6/0x150
[   32.892125][    C1]  </IRQ>
[   32.894894][    C1]  <TASK>
[   32.897672][    C1]  ? __local_bh_enable_ip+0x80/0x80
[   32.902705][    C1]  ? _raw_spin_unlock_irqrestore+0x5c/0x80
[   32.908349][    C1]  __local_bh_enable_ip+0x75/0x80
[   32.913210][    C1]  _raw_read_unlock_bh+0x29/0x30
[   32.917987][    C1]  wg_socket_send_skb_to_peer+0x178/0x1d0
[   32.923538][    C1]  wg_packet_tx_worker+0x1e6/0x530
[   32.928486][    C1]  process_one_work+0x6bb/0xc10
[   32.933174][    C1]  worker_thread+0xad5/0x12a0
[   32.937693][    C1]  kthread+0x421/0x510
[   32.941589][    C1]  ? worker_clr_flags+0x180/0x180
[   32.946449][    C1]  ? kthread_blkcg+0xd0/0xd0
[   32.950876][    C1]  ret_from_fork+0x1f/0x30
[   32.955134][    C1]  </TASK>
[   32.958004][    C1] Modules linked in:
[   32.961775][    C1] ---[ end trace 91d0f414d7e19e4b ]---
[   32.967037][    C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x2f3/0xc40
[   32.973705][    C1] Code: 74 1e 48 89 4c 24 10 48 8b 7c 24 10 e8 c6 9e 5d 00 48 8b 4c 24 10 48 ba 00 00 00 00 00 fc ff df 4c 03 21 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 3f 9f 5d 00 48 ba 00 00 00 00 00 fc
[   32.993176][    C1] RSP: 0018:ffffc900001d05c0 EFLAGS: 00010203
[   32.999064][    C1] RAX: 0010f5f79fab70e5 RBX: ffff8881f7138ad4 RCX: ffffffff86286820
[   33.006881][    C1] RDX: dffffc0000000000 RSI: 0000000000000002 RDI: 00000000ffffffff
[   33.014671][    C1] RBP: ffffc900001d06b0 R08: ffffffff8141a9ab R09: 0000000000000003
[   33.022513][    C1] R10: fffffbfff0e9aa4c R11: dffffc0000000001 R12: 0087afbcfd5b872d
[   33.030308][    C1] R13: 1ffff11022296c40 R14: 1ffff1103ee27159 R15: ffff8881114b6204
[   33.038128][    C1] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   33.046885][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   33.053299][    C1] CR2: 00002000001be000 CR3: 0000000128617000 CR4: 00000000003506a0
[   33.061168][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   33.068928][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   33.076773][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[   33.084040][    C1] Kernel Offset: disabled
[   33.088179][    C1] Rebooting in 86400 seconds..