last executing test programs:

4m16.185064731s ago: executing program 32 (id=80):
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x560c, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x401, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x3ae4c21, &(0x7f0000000140)={[], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0xa4, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1c, 0xd808, 0xd, 0x120000, 0x4, 0x1, 0x2, '\x00', r3, r4, 0x3, 0x5}, 0x50)

3m14.547856964s ago: executing program 33 (id=394):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x5, 0x2, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3966, 0x2, 0x4000, 0x0, r2, r3, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x18)
write$binfmt_register(r4, 0x0, 0x0)
fstat(r4, &(0x7f0000000200))

2m16.846638428s ago: executing program 34 (id=681):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
clock_gettime(0x0, &(0x7f00000003c0)={<r5=>0x0, <r6=>0x0})
futimesat(r0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000400)={{r5, r6/1000+10000}, {0x0, 0x2710}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x18)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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")

2m13.519656249s ago: executing program 35 (id=703):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1)

1m41.471545024s ago: executing program 36 (id=880):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="47010000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x154}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48004000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01082cbd7000fedbdf250c00000020000580080001006574680014000280080003000c1800ed070004"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000)

1m41.324777586s ago: executing program 37 (id=883):
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x4000044)
r1 = socket$inet(0x2, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x7f000001}}, 0x1c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x54}}, 0x8810)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278)

1m39.11036902s ago: executing program 38 (id=892):
getpriority(0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x88)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x4)
r8 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
pipe(&(0x7f0000000380))

1m21.831137451s ago: executing program 5 (id=987):
chdir(&(0x7f0000000000)='./file0\x00')
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x41)
getdents(r0, 0x0, 0x0)

1m21.707994013s ago: executing program 5 (id=989):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000002600)={[], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsmagic}]}, 0x1, 0x1f0, &(0x7f0000000300)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000002600)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x60)
recvmmsg(r4, &(0x7f00000023c0)=[{{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/84, 0x54}, {&(0x7f0000001500)=""/172, 0xac}, {&(0x7f00000015c0)=""/92, 0x5c}], 0x8, &(0x7f00000016c0)=""/47, 0x2f}, 0xe0e}, {{&(0x7f0000001700)=@nfc_llcp, 0x80, &(0x7f0000001780), 0x0, &(0x7f00000017c0)=""/232, 0xe8}, 0x1}, {{&(0x7f00000018c0)=@alg, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001940)}, {&(0x7f0000001980)=""/68, 0x44}, {&(0x7f0000001a00)=""/190, 0xbe}], 0x3, &(0x7f0000001b00)=""/238, 0xee}, 0xc84}, {{&(0x7f0000001c00)=@nl, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c80)=""/234, 0xea}], 0x1, &(0x7f0000001dc0)=""/180, 0xb4}, 0x9}, {{&(0x7f0000001e80)=@qipcrtr, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f00)=""/156, 0x9c}, {&(0x7f0000001fc0)=""/91, 0x5b}, {&(0x7f0000002080)=""/124, 0x7c}, {&(0x7f0000002100)=""/194, 0xc2}, {&(0x7f0000002200)=""/51, 0x33}], 0x5, &(0x7f00000022c0)=""/197, 0xc5}, 0xc}], 0x5, 0x10000, &(0x7f0000002500)={0x77359400})
chdir(&(0x7f00000000c0)='./bus\x00')
rename(&(0x7f0000001780)='./file0\x00', &(0x7f0000001940)='./bus\x00')
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)

1m21.508503876s ago: executing program 5 (id=992):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x20000050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]})
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m20.686390799s ago: executing program 5 (id=993):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
clock_gettime(0x0, &(0x7f00000003c0)={<r4=>0x0, <r5=>0x0})
futimesat(r0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000400)={{r4, r5/1000+10000}, {0x0, 0x2710}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00'}, 0x18)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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")

1m19.417563777s ago: executing program 5 (id=996):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000002600)={[], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsmagic}]}, 0x1, 0x1f0, &(0x7f0000000300)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10)
socket$packet(0x11, 0xa, 0x300)
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x60)
recvmmsg(r5, &(0x7f00000023c0)=[{{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/84, 0x54}, {&(0x7f0000001500)=""/172, 0xac}, {&(0x7f00000015c0)=""/92, 0x5c}], 0x8, &(0x7f00000016c0)=""/47, 0x2f}, 0xe0e}, {{&(0x7f0000001700)=@nfc_llcp, 0x80, &(0x7f0000001780), 0x0, &(0x7f00000017c0)=""/232, 0xe8}, 0x1}, {{&(0x7f00000018c0)=@alg, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001940)}, {&(0x7f0000001980)=""/68, 0x44}, {&(0x7f0000001a00)=""/190, 0xbe}], 0x3, &(0x7f0000001b00)=""/238, 0xee}, 0xc84}, {{&(0x7f0000001c00)=@nl, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c80)=""/234, 0xea}], 0x1, &(0x7f0000001dc0)=""/180, 0xb4}, 0x9}, {{&(0x7f0000001e80)=@qipcrtr, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f00)=""/156, 0x9c}, {&(0x7f0000001fc0)=""/91, 0x5b}, {&(0x7f0000002080)=""/124, 0x7c}, {&(0x7f0000002100)=""/194, 0xc2}, {&(0x7f0000002200)=""/51, 0x33}], 0x5, &(0x7f00000022c0)=""/197, 0xc5}, 0xc}], 0x5, 0x10000, &(0x7f0000002500)={0x77359400})
chdir(&(0x7f00000000c0)='./bus\x00')
rename(&(0x7f0000001780)='./file0\x00', &(0x7f0000001940)='./bus\x00')
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)

1m19.24781713s ago: executing program 5 (id=999):
chdir(&(0x7f0000000000)='./file0\x00')
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x41)
getdents(r0, 0x0, 0x0)

1m19.23605445s ago: executing program 39 (id=999):
chdir(&(0x7f0000000000)='./file0\x00')
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x41)
getdents(r0, 0x0, 0x0)

1m10.888586477s ago: executing program 6 (id=1045):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79)

1m10.832038608s ago: executing program 6 (id=1046):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffde8, 0x0}}, 0x1f)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})

1m10.809158858s ago: executing program 6 (id=1047):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

1m10.787630399s ago: executing program 6 (id=1048):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
futimesat(r0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000400)={{}, {0x0, 0x2710}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x18)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==")

1m8.736425949s ago: executing program 6 (id=1057):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000003c40)={0x14, r2, 0x103, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004880)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000003c40)={0x14, r2, 0x103, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004880) (async)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)

1m8.275741857s ago: executing program 6 (id=1060):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000013c0)=ANY=[@ANYBLOB="fc0000001a0001000000000000000000fe80000000000000000000000000003bffffffff0000000000000000000000004e2000000000b4120000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe880000000000000000000000000301000004d33c00000000000000000000000000ffffe0000001fdffffffffffffff00000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000400000000000000ffffffffffffffff766300000000000000000000000000000000000000000000ffffffff3d9aa25d0000000023bd7000000000000a00000080000000000000000c0008000800080020090000"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x40)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6", 0xb6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
process_mrelease(0xffffffffffffffff, 0x700000000000000)
r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000080)=r4, 0x12)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x8010)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
readv(r10, &(0x7f0000001280)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1)
ioctl$TCSETS(r10, 0x40045431, &(0x7f0000001240)={0x0, 0x4, 0x6dc3, 0xffffffff, 0x9, "001bf1c677b4dd6448cdc00100000000002000"})
r11 = syz_open_pts(r10, 0x101)
r12 = dup3(r11, r10, 0x0)
ioctl$TCSETSW(r11, 0x5403, &(0x7f0000000040)={0x5, 0x3, 0x6aeb, 0x8, 0x4, "b4f5ad7e54a179de93ec537b2ea1f63c50781d"})
write$UHID_INPUT(r12, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x20008000)

1m8.268956817s ago: executing program 40 (id=1060):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000013c0)=ANY=[@ANYBLOB="fc0000001a0001000000000000000000fe80000000000000000000000000003bffffffff0000000000000000000000004e2000000000b4120000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe880000000000000000000000000301000004d33c00000000000000000000000000ffffe0000001fdffffffffffffff00000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000400000000000000ffffffffffffffff766300000000000000000000000000000000000000000000ffffffff3d9aa25d0000000023bd7000000000000a00000080000000000000000c0008000800080020090000"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x40)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6", 0xb6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
process_mrelease(0xffffffffffffffff, 0x700000000000000)
r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000080)=r4, 0x12)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x8010)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
readv(r10, &(0x7f0000001280)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1)
ioctl$TCSETS(r10, 0x40045431, &(0x7f0000001240)={0x0, 0x4, 0x6dc3, 0xffffffff, 0x9, "001bf1c677b4dd6448cdc00100000000002000"})
r11 = syz_open_pts(r10, 0x101)
r12 = dup3(r11, r10, 0x0)
ioctl$TCSETSW(r11, 0x5403, &(0x7f0000000040)={0x5, 0x3, 0x6aeb, 0x8, 0x4, "b4f5ad7e54a179de93ec537b2ea1f63c50781d"})
write$UHID_INPUT(r12, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x20008000)

1m2.659783462s ago: executing program 2 (id=1095):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@usrjquota}, {@nomblk_io_submit}]}, 0x0, 0x4fa, &(0x7f00000005c0)="$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")
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
fcntl$setpipe(r2, 0x407, 0x5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x18)
listen(r7, 0x3)
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r2, 0x407, 0x2000000)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
r10 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x103881, 0x0)

1m1.152905955s ago: executing program 2 (id=1100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000280), &(0x7f0000000840)=r1}, 0x20)
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x2, @broadcast, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff}, {@remote}, {@loopback}]}, @lsrr={0x83, 0x23, 0x33, [@multicast2, @empty, @remote, @local, @loopback, @empty, @empty, @multicast1]}]}}}}}}}, 0x0)

1m0.988455157s ago: executing program 2 (id=1103):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x38, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}}, "cb8a11df2cf0491422cdff93ed2b6ccd8f49aa04a159"}}}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000180)={[{@grpquota}, {@inode_readahead_blks}, {@quota}, {@oldalloc}]}, 0x1, 0x504, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep07W3gSS2FH8+UijeW/erL/vbXbei7/Z+AUwtu5ExEFETEbEuxExl19P8iPe6hzpfZ8cPl49Ony8mkS7/c7fk6w9vRY9fyZ1O3/NUkR871sRP0yejNvc299cqdWqO3l9oVXfXmju7d/fqK+sV9erW5XK8tLy4hsPXq9c2lhfqk/mpS9+/LuDr/047dZsfqV3HJepM/TicZzURER85yqCjcCtfDyTo+4I/5dCRDwfES9nz/9c3Mq+mgDATdZuz0V7rrd+LDlZBQBuikKWA0sK5TwXMBuFQrncyeG9EDOFWqPZuveosbu11smVzUex8GijVl3Mc4XzUUzS+lJW/rReOVV/EBHPRcTPpqazenm1UVsb5Tc+ADDGbp9a//811Vn/AYAbrjTqDgAAQ2f9B4DxY/0HgPFj/QeA8dNZ/6dH3Q0AYIi8/weA8WP9B4Cx8t23306P9lH++ddr7+3tbjbeu79WbW6W67ur5dXGznZ5vdFYzz6zp37W69Uaje2l12L3/fmvbzdbC829/Yf1xu5W62H2ud4Pq8XsroMhjAwAGOS5lz76Y5KuyG9OZ0f07OVQHGnPgKtWGHUHgJG5NeoOACNjty8YXxd4j1+M+KkUAdwAfbboPaHU7xeE2u12++q6BFyxu5+T/4dx1ZP/97+AYczI/8P4kv+H8dVuJ+fd5D/OeyMAcL3J8QMDfv7/fH7+df7DgR+snb7jw6vsFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxv3f1/y/le4LNRKJTLEc9ExHwUk0cbtepiRDwbEX+YKk6l9aUR9xkAuKjCX5J8/6+7c6/Onmh68fZxcTIifvSLd37+/kqrtfP7iMnkH1Pd660P8+uV4fceADhbd53Ozj1v5D85fLzaPYbZn79+MyJKnfhHh5NxdBx/IiaycymKETHzzySvdyQ9uYuLOPggIj7bb/xJzGY5kM7Op6fjp7GfGWr8won4haytc07/Lj5zCX2BcfNROv+81e/5K8Sd7Nz/+S9lM9TF5fNf+lKrR9kc+Gn87vx3a8D8d+e8MV777bc7pekn2z6I+PxERDf2Uc/8042fDIj/6jnj/+kLL748qK39y4i70T9+b6yFVn17obm3f3+jvrJeXa9uVSrLS8uLbzx4vbKQ5agXBq8Gf3vz3rOD2tLxzwyIXzpj/F8+5/h/9Z93v/+lp8T/6iv94hfihafET9fEr5wz/srMb0qD2tL4awPGf9bX/94543/85/0ntg0HAEanube/uVKrVXcUFK5/If0new260bfwjWHFmoz+TT95pfNMn2rqfu//P8YaNGNcRtYNuA6OH/qI+PeoOwMAAAAAAAAAAAAAAPQ1jN9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLn+GwAA//+hm8cd")
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={<r1=>0x0}, &(0x7f0000000380)=0xc)
ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000000c5, 0x400)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r4, 0x3000000, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0)
gettid()
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000022c0)={'vlan1\x00', &(0x7f0000002340)=@ethtool_ts_info})

59.479295109s ago: executing program 2 (id=1109):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
futimesat(r0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000400)={{}, {0x0, 0x2710}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x18)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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")

58.13773647s ago: executing program 2 (id=1112):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x2000000, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0)

56.923581339s ago: executing program 2 (id=1117):
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x8, 0x20a, &(0x7f0000000640)="$eJzslb9rFEEUx78zu7e5BAlaaGFzFgEjmL3dPZU0FrEXhETU8jBjiE5y4XJFEhASbGysxX/EIpWFnVbWFioIFqa0EhyZ2dnb2dzuheX8UeR9IJPvzOybee/tu7cgCOLU8uXzj08vbi2uXAVwBnOYsuvfvPwZ7jz/8ZXXsPLt5uzTw+PnMQBK5XP/hPsDAG+WPGA/PVYp1xqYA3AWwAq40Zq74Lhi9T0whJmvKrcWYHhglx9vqWE0vWkrpGAPe3L10boUkR5iPSR66ACq4P/RAcMqgKa9gjn+be/uPelKoJ8KKTLRUNk9I1t1xbj8Gf+WOG46KdDv6/7zZwd6Htr1yMlfDI7Y6g4Ylq1exBTCMGzZqYid+C/6+fle+tpS9utE0pwsEXXFuYWSLV3h482npdDR/jE3fqm/EmBQKMF/l9Uyof2ob8Vbo1bBCeeIyX1mx1eYWxIXjg7fjVp9/a/pnUyYxgXA3Xqpy+bDjJS3S63OF1YuVfxksgqsLIm0fzAfuOz0J9/5KrQHG1vt7d29hfWN7ppYE5tJ0rkRXYui60nb9OZ0HNP/mqY/zTjnNyqeDViAne5g0I93gEE/Hs6TdHQ67vLr3ndjw03/45j/qVT2eTFhZx9KVryD2T9u/ms171U6TxAEQRAEQRAEQRAEQRAEUYsWGN7PDqeqHD+5Y7Z/BwAA//81gVqd")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x8, 0xd}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="cc033354389be3bfce251b7318000000820000000000000004000000850000200500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f00000003c0)={0x1f, 0x4, 0x2}, 0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000180100002800c0001800800010003000000"], 0x28}}, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x123000, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r10, 0xc008ae05, &(0x7f0000000240)=""/73)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r12}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1a, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

56.923363908s ago: executing program 41 (id=1117):
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x8, 0x20a, &(0x7f0000000640)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x8, 0xd}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="cc033354389be3bfce251b7318000000820000000000000004000000850000200500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f00000003c0)={0x1f, 0x4, 0x2}, 0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000180100002800c0001800800010003000000"], 0x28}}, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x123000, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r10, 0xc008ae05, &(0x7f0000000240)=""/73)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r12}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1a, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

54.423958056s ago: executing program 0 (id=1128):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xa844}, 0x20000050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]})
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

53.889668984s ago: executing program 0 (id=1132):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket(0x8000000010, 0x2, 0x0)
write(r2, &(0x7f00000002c0)="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", 0xfc)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000240)={&(0x7f0000000100)=@can={{}, 0xfc, 0x0, 0x0, 0x0, "5d5901d3284a3d58"}, 0x10}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={<r5=>0x0, @multicast2, @multicast2}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@dellink={0x74, 0x11, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0xa0040}, [@IFLA_PHYS_SWITCH_ID={0x24, 0x24, "5fd5237a1394a632186185475117abe8c820d2913d3d6ced7ef224764274a2a1"}, @IFLA_GROUP={0x8, 0x1b, 0x80000001}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20024044}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x9, 0xf8, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x240020d4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0)
write$binfmt_elf64(r9, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x2b0)

51.855876465s ago: executing program 0 (id=1145):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000079c28000004b4d3dc5466e5939a7a00"/37], 0x48)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000000c0)=""/125)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000001fe00e0bea2d68baeb0fa39820f11ad758e0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r4, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xfffffff8, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
ioctl$TCFLSH(r7, 0x400455c8, 0x4)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r6}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

42.512443707s ago: executing program 1 (id=1187):
creat(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000f5ff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
syncfs(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0)

40.835857922s ago: executing program 1 (id=1192):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fdatasync(r1)
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r2, 0x0, 0x0)
fchdir(r7)
open(&(0x7f0000000280)='.\x00', 0x0, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

40.032114214s ago: executing program 1 (id=1197):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x10000060, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x4c, 0x8, @vifc_lcl_addr=@local, @loopback}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
getpgrp(0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx  \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x18)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @a})

39.909624676s ago: executing program 0 (id=1198):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
futimesat(r0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000400)={{}, {0x0, 0x2710}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x18)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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")

39.691860719s ago: executing program 1 (id=1201):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x15)
lseek(0xffffffffffffffff, 0x10001, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file2\x00', 0x410, &(0x7f0000000b00)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9d0000000094bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0xf, 0x2a0, &(0x7f00000001c0)="$eJzs3T9rA2UYAPDnkjSNOqSIiyJ4oINTaV1dGqWC2EmJoA4abAuShEILASsYO/UTOPo9/AguLn4DwVVwa4fKyeXumtSmf2hjCvb3m57ee8/zPrkX0inPffX6sL97kMTJ2e/RaiVR24qtOE9iLWpR+SEaAQD8f5xnWfyVPSSzUVt8NwDAMhT//wtP3QsAsByffPb5R52dne2P07QVr7ZPR90kIoano26x3tmPb2IQe7ER7biIyC4V8Qcf7mxHI82txVvD8aibZw6//LWs3/kzYpK/Ge1Ym5+/mRYu81+sukujs79S/dGOV+bnv/Pv/BiOo9uMt9+c6X892vHb13EQg9iNPHea//1mmr6f/Xj23Rf5Nnl+Uovu6uS+qay+pCMBAAAAAAAAAAAAAAAAAAAAAOAZWE/TpBjfM5nfk1+azM8ZdesXk/X1tDI732dczQdKqkLFfKAsyhE94yx+qubrbKRpmpU3TvMb8VrDiwUAAAAAAAAAAAAAAAAAAAAgd/Ttcb83GOwdLiSopgFUP+t/aJ2tmStvxHG/V7+54Or995qdNpD3euvN0WjEgh7LXcELeT8Lr7w6PdxPowiqg1noXi+/VxQ97vfScql6yP1ectderergfp5dasYjG2uWHWRXz7R12erVrOaCnkbzpblLf2dZdr867/5RnFF5JZmM2Ljf7itlMPcD5kHr+ln8cnPBG78y6o/+0gEAAAAAAAAAAAAAAAAAAOaa/uh3zuLJram1/6wpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFiy6fv/q6AVEVevXAvGZfJt95RBMw6PnvgjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Az8EwAA//9I2EsX")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x1, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r7, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',privport,access=', @ANYRESDEC=r7])
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r8, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x1c, r9, 0x1, 0x1, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0)

38.928646791s ago: executing program 0 (id=1207):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
socket$pptp(0x18, 0x1, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})

38.771888573s ago: executing program 0 (id=1208):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000003c0)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff)
getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=<r5=>0x0)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, r5, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x800)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
sched_setscheduler(0x0, 0x1, 0x0)
r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10)
pwrite64(r7, 0x0, 0x0, 0xa13)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/schedstat\x00', 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x185300, 0x0)
write$cgroup_int(r11, &(0x7f0000000040)=0x8000000000000000, 0x12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r10}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)=r10}, 0x20)
set_robust_list(&(0x7f0000000280)={0x0, 0xc8ac}, 0x18)

38.742384273s ago: executing program 42 (id=1208):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000003c0)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff)
getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=<r5=>0x0)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, r5, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x800)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
sched_setscheduler(0x0, 0x1, 0x0)
r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10)
pwrite64(r7, 0x0, 0x0, 0xa13)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/schedstat\x00', 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x185300, 0x0)
write$cgroup_int(r11, &(0x7f0000000040)=0x8000000000000000, 0x12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r10}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)=r10}, 0x20)
set_robust_list(&(0x7f0000000280)={0x0, 0xc8ac}, 0x18)

38.655870215s ago: executing program 1 (id=1210):
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@nojournal_checksum}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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")
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x190}}, 0x4054014)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
unlink(&(0x7f0000000180)='./file0\x00')
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80000, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

38.487700917s ago: executing program 1 (id=1211):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
ioctl$KVM_CAP_X86_GUEST_MODE(r1, 0x4068aea3, &(0x7f00000001c0))
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x3, 0x400, 0x84b}) (fail_nth: 2)

38.425976068s ago: executing program 43 (id=1211):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
ioctl$KVM_CAP_X86_GUEST_MODE(r1, 0x4068aea3, &(0x7f00000001c0))
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x3, 0x400, 0x84b}) (fail_nth: 2)

6.781636597s ago: executing program 3 (id=1381):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(0x0, 0x0)
syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/87, &(0x7f0000000480)=""/74, 0xf000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
unshare(0x64000600)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)

6.264429745s ago: executing program 8 (id=1383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000005005b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
pidfd_send_signal(r6, 0x2, 0x0, 0x0)

6.091898958s ago: executing program 9 (id=1385):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000002600)={[], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsmagic}]}, 0x1, 0x1f0, &(0x7f0000000300)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000002600)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10)
socket$packet(0x11, 0xa, 0x300)
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x60)
recvmmsg(r5, &(0x7f00000023c0)=[{{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/84, 0x54}, {&(0x7f0000001500)=""/172, 0xac}, {&(0x7f00000015c0)=""/92, 0x5c}], 0x8, &(0x7f00000016c0)=""/47, 0x2f}, 0xe0e}, {{&(0x7f0000001700)=@nfc_llcp, 0x80, &(0x7f0000001780), 0x0, &(0x7f00000017c0)=""/232, 0xe8}, 0x1}, {{&(0x7f00000018c0)=@alg, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001940)}, {&(0x7f0000001980)=""/68, 0x44}, {&(0x7f0000001a00)=""/190, 0xbe}], 0x3, &(0x7f0000001b00)=""/238, 0xee}, 0xc84}, {{&(0x7f0000001c00)=@nl, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c80)=""/234, 0xea}], 0x1, &(0x7f0000001dc0)=""/180, 0xb4}, 0x9}, {{&(0x7f0000001e80)=@qipcrtr, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f00)=""/156, 0x9c}, {&(0x7f0000001fc0)=""/91, 0x5b}, {&(0x7f0000002080)=""/124, 0x7c}, {&(0x7f0000002100)=""/194, 0xc2}, {&(0x7f0000002200)=""/51, 0x33}], 0x5, &(0x7f00000022c0)=""/197, 0xc5}, 0xc}], 0x5, 0x10000, &(0x7f0000002500)={0x77359400})
chdir(&(0x7f00000000c0)='./bus\x00')
rename(&(0x7f0000001780)='./file0\x00', &(0x7f0000001940)='./bus\x00')
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)

6.091226128s ago: executing program 8 (id=1386):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0}, 0x50) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x80803, 0x84)
getsockopt$inet6_int(r5, 0x29, 0x50, 0x0, &(0x7f0000000340)=0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_usb_connect(0x4, 0x2d, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)={0x4a, 0x0, 0x5, &(0x7f0000000140)=ANY=[]}) (async)
r8 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)={0x4a, 0x0, 0x5, &(0x7f0000000140)=ANY=[]})
syz_usb_ep_write(r8, 0x0, 0x69, &(0x7f0000000180)="9c54a22619b07ab51cf30d1d1d9d44415d4eb933a7ddb2607a342fac014a12fb46c3185649fa9fb6280f22874ac7b36d1883ddedaa2a2463a09827d6da50cbe12e02793069641bc4d35c26843fc2a40269db82c2940621692132f83b3dd2ca4ff0b768831d79982855")
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$TIOCNOTTY(r9, 0x5422)

5.819362832s ago: executing program 7 (id=1387):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

5.767949943s ago: executing program 3 (id=1388):
socket$inet6(0xa, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsmount(0xffffffffffffffff, 0x0, 0x3)
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
io_setup(0x6, &(0x7f0000002140)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x7ff, 0x0, 0x2}])
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f00000003c0)={[{@nobarrier}]}, 0x1, 0x55f, &(0x7f0000000d00)="$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")
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f00000006c0)=r8}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x42000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x811, 0x0, 0x0, {0x2, 0x0, 0x10, 0xfe, 0x3, 0x3, 0xfe, 0x2}, [@RTA_SRC={0x8, 0x2, @private=0xa010100}, @RTA_GATEWAY={0x8, 0x5, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

5.213895491s ago: executing program 4 (id=1389):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x82)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xc, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000900), 0x8, 0xc0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl2\x00', r5, 0x4, 0x20, 0x3, 0xfff, 0x50, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x10, 0x10001, 0x2}})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{}, &(0x7f0000000a80), &(0x7f0000000ac0)='%pK    \x00'}, 0x20)
syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r6, &(0x7f0000001880), 0x0, 0x3fe, 0x0)

4.553625351s ago: executing program 7 (id=1390):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[], 0x0, 0x58, 0x0, 0x1}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000008000"/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x40106726, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000200000000440005002001000000000000000000009983086518f57caa2b00000000000000000000000000000000000000000000000535000004000700"/180], 0xfc}}, 0x20040880)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000801100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)

4.270059985s ago: executing program 8 (id=1391):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@usrjquota}, {@nomblk_io_submit}]}, 0x0, 0x4fa, &(0x7f00000005c0)="$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")
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
fcntl$setpipe(r2, 0x407, 0x5)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x3d6bf7b3fa2b4728, 0x0, {0x7, 0x29, 0x5, 0x8021008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x18)
listen(r7, 0x3)
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r2, 0x407, 0x2000000)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
r10 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x103881, 0x0)

4.269194825s ago: executing program 9 (id=1392):
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x44f0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
write$UHID_INPUT(r5, &(0x7f0000001080)={0x8, {"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", 0x1000}}, 0x1006)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r7, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000040), 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48)
ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000200))
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20)
sendmsg$tipc(r7, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000841}, 0x0)
close(r7)
sendmsg$tipc(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)

4.060874189s ago: executing program 9 (id=1393):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
mlock2(&(0x7f000034f000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x807bff)

3.99795282s ago: executing program 3 (id=1394):
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x2a, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
ppoll(&(0x7f0000000140)=[{r6}, {r6}], 0x2, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))

3.96900352s ago: executing program 9 (id=1395):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

3.599900515s ago: executing program 7 (id=1396):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x4000)
sendmsg$nl_route(r1, 0x0, 0x4010)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0)
ioctl$RTC_UIE_ON(r3, 0x7003)

3.451256468s ago: executing program 7 (id=1397):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
syz_open_pts(r5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES16, @ANYRESDEC], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)

3.383898029s ago: executing program 4 (id=1398):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x13, 0x8, 0x3, 0x0, 0x2800}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
socket$pptp(0x18, 0x1, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})

3.372853919s ago: executing program 4 (id=1399):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
r0 = fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r0, 0x0, 0x0)
fchdir(r4)
open(&(0x7f0000000280)='.\x00', 0x0, 0x8)

3.094237883s ago: executing program 9 (id=1400):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

2.736557438s ago: executing program 3 (id=1401):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18)
syz_emit_ethernet(0x14b, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x115, 0x11, 0x1, @empty, @mcast2, {[], {0x0, 0xe22, 0x115, 0x0, @gue={{0x1, 0x1, 0x1, 0x69, 0x100, @void}, "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"}}}}}}}, 0x0)

2.473661902s ago: executing program 4 (id=1402):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000002600)={[], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsmagic}]}, 0x1, 0x1f0, &(0x7f0000000300)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000002600)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10)
socket$packet(0x11, 0xa, 0x300)
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x60)
recvmmsg(r5, &(0x7f00000023c0)=[{{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/84, 0x54}, {&(0x7f0000001500)=""/172, 0xac}, {&(0x7f00000015c0)=""/92, 0x5c}], 0x8, &(0x7f00000016c0)=""/47, 0x2f}, 0xe0e}, {{&(0x7f0000001700)=@nfc_llcp, 0x80, &(0x7f0000001780), 0x0, &(0x7f00000017c0)=""/232, 0xe8}, 0x1}, {{&(0x7f00000018c0)=@alg, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001940)}, {&(0x7f0000001980)=""/68, 0x44}, {&(0x7f0000001a00)=""/190, 0xbe}], 0x3, &(0x7f0000001b00)=""/238, 0xee}, 0xc84}, {{&(0x7f0000001c00)=@nl, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c80)=""/234, 0xea}], 0x1, &(0x7f0000001dc0)=""/180, 0xb4}, 0x9}, {{&(0x7f0000001e80)=@qipcrtr, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f00)=""/156, 0x9c}, {&(0x7f0000001fc0)=""/91, 0x5b}, {&(0x7f0000002080)=""/124, 0x7c}, {&(0x7f0000002100)=""/194, 0xc2}, {&(0x7f0000002200)=""/51, 0x33}], 0x5, &(0x7f00000022c0)=""/197, 0xc5}, 0xc}], 0x5, 0x10000, &(0x7f0000002500)={0x77359400})
chdir(&(0x7f00000000c0)='./bus\x00')
rename(&(0x7f0000001780)='./file0\x00', &(0x7f0000001940)='./bus\x00')
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)

2.433119173s ago: executing program 3 (id=1403):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x9, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x7, 0x1200)
r3 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

2.348645224s ago: executing program 4 (id=1404):
socketpair(0xf, 0x3, 0x16, &(0x7f00000001c0))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x21085e, &(0x7f0000000340)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@dioread_lock}]}, 0x1, 0x516, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.219844346s ago: executing program 7 (id=1405):
socket$inet6(0xa, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsmount(0xffffffffffffffff, 0x0, 0x3)
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
io_setup(0x6, &(0x7f0000002140)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x7ff, 0x0, 0x2}])
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f00000003c0)={[{@nobarrier}]}, 0x1, 0x55f, &(0x7f0000000d00)="$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")
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f00000006c0)=r8}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x42000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x811, 0x0, 0x0, {0x2, 0x0, 0x10, 0xfe, 0x3, 0x3, 0xfe, 0x2}, [@RTA_SRC={0x8, 0x2, @private=0xa010100}, @RTA_GATEWAY={0x8, 0x5, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

2.013303789s ago: executing program 8 (id=1406):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fstat(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0)=r5)
close(r4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='svcrdma_send_err\x00', r6}, 0x18)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r7}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES32=r6, @ANYRESOCT=r7, @ANYRES8, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff00f7ffff68102600000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80)
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(r9, 0x3, &(0x7f0000000180)=0x2f0c000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x2a200}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)

929.498826ms ago: executing program 3 (id=1407):
socket$key(0xf, 0x3, 0x2)
socket$packet(0x11, 0xa, 0x300)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x27, 0x2, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
readv(r2, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1)

788.920768ms ago: executing program 7 (id=1408):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000140))
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "232cdaeb4a02"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20010e"], 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x1, 0xe, "7e1a99617f388885ed05851a69eb"}, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="200bd7000000d70a9475cb7439a521677633489c9406e5debe92038009c5e4c6f191c65ec7986137f5c24f4a9f47e11c35bfe130b25ac841183792376803cb3b487838f6d9b4f9fb709516f8d8471c66ce0216bf949f7fb69641310422e4489a7f7592ef5f1f0f677ec123b1c09b7d3e59909c6e0cbdde449ceda0909c6a58a312f2080a12cefea5554da1ec82e72b3634b4b6dc39a852d819c40db371b1438c4d70f8a812265388bc75ab04a3ce5c87529984b4d4b395bade9aeffd437e3cd584d2fe8d1d52cba687f4ef6aa9c7edc67a47c9"], &(0x7f00000004c0)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "bdb8b9b62d529b4035743bbd4da09a6bb298a82062fe3f3ba9274ab5669ecca5e5e9dca617dafe5377e66a2dbeee560b2109fbb27b8f4a01c113dddeea8f31ba70ce773f52427c9e8c69930c0473a2e1f3a7187e0c0b213febf70904dbfe8f53a8eb907f0b14d3abae8d1ad51197e9d288d03d44125379ee6c0c47f815d65eb1174c4b69af7c825a1db5aec3b103a30e72d44a440923efbec81369afd1233be6a7c76df0e0371f8425af4e047abbb3a4a5b52d0223f862c7b30be47280b8fdbd65e58fdd763f17eee1be40c739e4b02d00e08c1b7e5802733e2acdb211"}}, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x3, "a79148ef"}, @main=@item_4={0x3, 0x0, 0xa, "68bbdb18"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x202, 0x3, 0x1, {0x22, 0x24e}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000680)={0x0, 0x5, 0x45, "19403ffe4187e6702fe1a4a1a990681c85c9cb604d0bba15ab80e698548408ddf6f78664f44d33b47b3b4c8c69136ea2b3310b39f4127c9a1d41e1b7a3adab47bb121fc8e5"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x1, 0x18, "275bf099e9de71ecea404b79053a2842841c2af395ee9dc8"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x7}})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg$unix(r2, &(0x7f0000006480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000006580)=""/69, 0x45}, {&(0x7f0000006540)=""/40, 0x28}], 0x2, &(0x7f0000000800)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000000880)=""/237, 0xed}, {&(0x7f0000006040)=""/206, 0xce}, {&(0x7f0000006140)=""/212, 0xd4}, {&(0x7f0000007b80)=""/4096, 0x1000}, {&(0x7f0000006240)=""/250, 0xfa}, {&(0x7f0000000980)=""/183, 0xb7}, {&(0x7f0000006340)=""/179, 0xb3}], 0x8}}], 0x3, 0x40000040, 0x0)

515.394932ms ago: executing program 4 (id=1409):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc)

514.456422ms ago: executing program 9 (id=1410):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00')
read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)

168.597498ms ago: executing program 8 (id=1411):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x9, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x7, 0x1200)
r3 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

0s ago: executing program 8 (id=1412):
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x2, 0x3, 0x0, 0x3, 0x1d, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x18, 0x0, "90a8a9"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x6, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @loopback, 0x7}}, @sadb_key={0x11, 0x8, 0x3e8, 0x0, "67328c217950d4ed0ce9fd283e7a39cddf91db11b8d33fe41b6225fa8075fb71275ea059e57dbe5ddb41c0ece4532edb885207438d8c8ccd0b4736f5a7f78c02c158f5c563524df4f34de949509868d522a81cd34a99546e74c7f8725419f8e1af17a281d0f7914e267c1fc4f70fee6200286b016552268cce85ede55f"}]}, 0xe8}, 0x1, 0x7}, 0x4000044)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x7f000001}}, 0x1c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x54}}, 0x8810)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278)

kernel console output (not intermixed with test programs):

fffffffffda RBX: 00007ffaee1c9080 RCX: 00007ffaedfa1929
[  255.366098][ T4551] RDX: 0000000000000054 RSI: 0000200000000180 RDI: 0000000000000003
[  255.374061][ T4551] RBP: 00007ffaec5e9090 R08: 0000000000000000 R09: 0000000000000000
[  255.382019][ T4551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.389982][ T4551] R13: 0000000000000000 R14: 00007ffaee1c9080 R15: 00007fff2ab5fa08
[  255.454759][ T4560] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  255.553655][ T4555] overlayfs: unrecognized mount option "uuid=null" or missing value
[  255.736197][ T4564] FAT-fs (loop4): Directory bread(block 64) failed
[  255.742903][ T4564] FAT-fs (loop4): Directory bread(block 65) failed
[  255.751706][ T4564] FAT-fs (loop4): Directory bread(block 66) failed
[  255.758382][ T4564] FAT-fs (loop4): Directory bread(block 67) failed
[  255.765940][ T4564] FAT-fs (loop4): Directory bread(block 68) failed
[  255.772580][ T4564] FAT-fs (loop4): Directory bread(block 69) failed
[  255.779381][ T4564] FAT-fs (loop4): Directory bread(block 70) failed
[  255.786022][ T4564] FAT-fs (loop4): Directory bread(block 71) failed
[  255.792682][ T4564] FAT-fs (loop4): Directory bread(block 72) failed
[  255.799242][ T4564] FAT-fs (loop4): Directory bread(block 73) failed
[  256.169884][ T4572] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  257.046689][ T4576] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  257.230597][ T4589] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1194'.
[  257.240882][ T4576] EXT4-fs (loop7): mounted filesystem without journal. Opts: commit=0x0000000000000005,inode_readahead_blks=0x0000000000000800,usrjquota=,nomblk_io_submit,,errors=continue
[  257.277087][ T4576] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  257.296296][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  257.309239][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  257.317735][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  257.326014][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  257.334374][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  257.344189][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  257.417182][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  257.425841][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  257.444498][ T4594] xt_hashlimit: size too large, truncated to 1048576
[  257.513032][ T4597] FAULT_INJECTION: forcing a failure.
[  257.513032][ T4597] name failslab, interval 1, probability 0, space 0, times 0
[  257.525839][ T4597] CPU: 1 PID: 4597 Comm: syz.4.1195 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0
[  257.535726][ T4597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  257.545779][ T4597] Call Trace:
[  257.549082][ T4597]  __dump_stack+0x21/0x24
[  257.553412][ T4597]  dump_stack_lvl+0x169/0x1d8
[  257.558090][ T4597]  ? thaw_kernel_threads+0x220/0x220
[  257.563381][ T4597]  ? show_regs_print_info+0x18/0x18
[  257.568583][ T4597]  ? rcu_read_unlock_special+0x170/0x420
[  257.574217][ T4597]  dump_stack+0x15/0x1c
[  257.578373][ T4597]  should_fail+0x3c1/0x510
[  257.582792][ T4597]  ? fib6_info_alloc+0x34/0xe0
[  257.587558][ T4597]  __should_failslab+0xa4/0xe0
[  257.592323][ T4597]  should_failslab+0x9/0x20
[  257.596832][ T4597]  __kmalloc+0x60/0x330
[  257.600990][ T4597]  ? __rcu_read_unlock+0x5e/0xa0
[  257.605926][ T4597]  fib6_info_alloc+0x34/0xe0
[  257.610516][ T4597]  ip6_route_info_create+0x4d2/0x1490
[  257.615898][ T4597]  ? mutex_lock+0x8c/0xe0
[  257.620227][ T4597]  ip6_route_add+0x27/0x130
[  257.624729][ T4597]  ipv6_route_ioctl+0x328/0x420
[  257.629586][ T4597]  ? rt6_addrconf_purge+0x320/0x320
[  257.634792][ T4597]  ? __kasan_check_write+0x14/0x20
[  257.639907][ T4597]  ? _copy_from_user+0x95/0xd0
[  257.644669][ T4597]  inet6_ioctl+0x1e4/0x240
[  257.649086][ T4597]  ? inet6_getname+0x600/0x600
[  257.653848][ T4597]  ? do_vfs_ioctl+0x766/0x1510
[  257.658609][ T4597]  ? __ia32_compat_sys_ioctl+0x7b0/0x7b0
[  257.664241][ T4597]  sock_do_ioctl+0xd9/0x330
[  257.668747][ T4597]  ? sock_show_fdinfo+0xa0/0xa0
[  257.673601][ T4597]  ? __this_cpu_preempt_check+0x13/0x20
[  257.679150][ T4597]  ? tracing_record_taskinfo_sched_switch+0x80/0x3a0
[  257.685833][ T4597]  ? selinux_file_ioctl+0x377/0x480
[  257.691030][ T4597]  ? switch_mm_irqs_off+0x30c/0x9a0
[  257.696227][ T4597]  sock_ioctl+0x504/0x710
[  257.700559][ T4597]  ? sock_poll+0x360/0x360
[  257.704973][ T4597]  ? __fget_files+0x2c4/0x320
[  257.709654][ T4597]  ? security_file_ioctl+0x84/0xa0
[  257.714763][ T4597]  ? sock_poll+0x360/0x360
[  257.719178][ T4597]  __se_sys_ioctl+0x121/0x1a0
[  257.723855][ T4597]  __x64_sys_ioctl+0x7b/0x90
[  257.728444][ T4597]  do_syscall_64+0x31/0x40
[  257.732861][ T4597]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  257.738749][ T4597] RIP: 0033:0x7fe0f0d42929
[  257.743170][ T4597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.762778][ T4597] RSP: 002b:00007fe0ef369038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  257.771192][ T4597] RAX: ffffffffffffffda RBX: 00007fe0f0f6a160 RCX: 00007fe0f0d42929
[  257.779172][ T4597] RDX: 0000200000000800 RSI: 000000000000890b RDI: 000000000000000a
[  257.787145][ T4597] RBP: 00007fe0ef369090 R08: 0000000000000000 R09: 0000000000000000
[  257.795115][ T4597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.803087][ T4597] R13: 0000000000000000 R14: 00007fe0f0f6a160 R15: 00007ffe7e9d66b8
[  258.184303][ T4599] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  258.203329][ T4599] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  258.240328][ T4604] tipc: Started in network mode
[  258.245399][ T4604] tipc: Own node identity 7a9b843240b5, cluster identity 4711
[  258.258673][ T4604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.266095][   T24] kauditd_printk_skb: 2 callbacks suppressed
[  258.266109][   T24] audit: type=1400 audit(1751669464.138:3385): avc:  denied  { ioctl } for  pid=4603 comm="syz.9.1200" path="socket:[32381]" dev="sockfs" ino=32381 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  258.291606][ T4604] device syzkaller0 entered promiscuous mode
[  258.400007][ T4603] tipc: Resetting bearer <eth:syzkaller0>
[  258.587731][ T4603] tipc: Disabling bearer <eth:syzkaller0>
[  258.606237][ T4612] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue
[  258.618647][ T4612] ext4 filesystem being mounted at /12/file0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.669095][   T24] audit: type=1400 audit(1751669464.567:3386): avc:  denied  { mounton } for  pid=4611 comm="syz.1.1201" path="/73/file2/file0" dev="loop1" ino=1048657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  258.700850][   T24] audit: type=1400 audit(1751669464.599:3387): avc:  denied  { setattr } for  pid=4611 comm="syz.1.1201" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  258.872558][ T4623] EXT4-fs (loop9): Mount option "dax=always" incompatible with ext2
[  259.035122][   T24] audit: type=1400 audit(1751669464.953:3388): avc:  denied  { connect } for  pid=4622 comm="syz.9.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  259.299473][ T3475] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  259.308850][ T3475] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  259.360704][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.371151][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.378643][ T4638] device bridge_slave_0 entered promiscuous mode
[  259.393727][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.400903][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.408735][ T4638] device bridge_slave_1 entered promiscuous mode
[  259.489956][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.497064][ T4638] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.504356][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.511397][ T4638] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.569528][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.577234][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.600910][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  259.608861][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  259.626034][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  259.639625][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  259.647949][  T305] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.655015][  T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.662888][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  259.671545][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  259.679799][  T305] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.686845][  T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.702310][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  259.710844][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  259.719494][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  259.728083][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  259.752469][    T9] device bridge_slave_1 left promiscuous mode
[  259.826915][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.834753][    T9] device bridge_slave_0 left promiscuous mode
[  259.841438][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.849692][    T9] device veth1_macvtap left promiscuous mode
[  259.855706][    T9] device veth0_vlan left promiscuous mode
[  260.243450][ T4653] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1215'.
[  260.262338][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  260.270753][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  260.291728][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  260.299702][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  260.308268][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  260.316027][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  260.328678][ T4638] device veth0_vlan entered promiscuous mode
[  260.337906][ T4646] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.345164][ T4646] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.353192][ T4646] device bridge_slave_0 entered promiscuous mode
[  260.365310][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  260.374271][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  260.384348][ T4638] device veth1_macvtap entered promiscuous mode
[  260.391216][ T4646] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.398463][ T4646] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.407007][ T4646] device bridge_slave_1 entered promiscuous mode
[  260.421320][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  260.431463][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  260.439977][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  260.474651][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  260.484706][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  260.569524][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  260.583173][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  260.590453][ T4658] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  260.614072][   T24] audit: type=1400 audit(1751669466.659:3389): avc:  denied  { setattr } for  pid=4662 comm="syz.9.1218" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  260.648104][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  260.655595][ T4658] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,inode_readahead_blks=0x0000000000000800,usrjquota=,nomblk_io_submit,,errors=continue
[  260.667031][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  260.673654][ T4658] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  260.707575][  T305] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.714680][  T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.724432][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  260.760246][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  260.768803][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  260.777113][  T351] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.784168][  T351] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.793163][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  260.801550][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  260.821245][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  260.879107][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  261.045837][ T4658] xt_hashlimit: size too large, truncated to 1048576
[  261.068495][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  261.108301][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  261.154833][ T4646] device veth0_vlan entered promiscuous mode
[  261.174416][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  261.184070][ T4646] device veth1_macvtap entered promiscuous mode
[  261.194812][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  261.204162][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  261.235680][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  261.257266][   T24] audit: type=1400 audit(1751669467.346:3390): avc:  denied  { create } for  pid=4687 comm="syz.8.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  261.278417][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  261.291015][   T24] audit: type=1400 audit(1751669467.378:3391): avc:  denied  { read } for  pid=4687 comm="syz.8.1212" name="usbmon9" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  261.370688][   T24] audit: type=1400 audit(1751669467.378:3392): avc:  denied  { open } for  pid=4687 comm="syz.8.1212" path="/dev/usbmon9" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  262.262241][ T4705] tipc: Started in network mode
[  262.267150][ T4705] tipc: Own node identity 6a17684d7f38, cluster identity 4711
[  262.336855][ T4709] FAULT_INJECTION: forcing a failure.
[  262.336855][ T4709] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.350005][ T4709] CPU: 1 PID: 4709 Comm: syz.4.1230 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0
[  262.359891][ T4709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  262.370100][ T4709] Call Trace:
[  262.373396][ T4709]  __dump_stack+0x21/0x24
[  262.377725][ T4709]  dump_stack_lvl+0x169/0x1d8
[  262.382403][ T4709]  ? show_regs_print_info+0x18/0x18
[  262.387609][ T4709]  dump_stack+0x15/0x1c
[  262.391780][ T4709]  should_fail+0x3c1/0x510
[  262.396197][ T4709]  should_fail_usercopy+0x1a/0x20
[  262.401225][ T4709]  _copy_from_user+0x20/0xd0
[  262.405811][ T4709]  ip_getsockopt+0x106/0x1480
[  262.410483][ T4709]  ? switch_mm_irqs_off+0x30c/0x9a0
[  262.415675][ T4709]  ? __switch_to_asm+0x34/0x60
[  262.420437][ T4709]  ? ip_setsockopt+0x3510/0x3510
[  262.425369][ T4709]  ? __schedule+0xb4f/0x1310
[  262.429957][ T4709]  ? __kasan_check_write+0x14/0x20
[  262.435064][ T4709]  ? _raw_spin_lock+0x8e/0xe0
[  262.439743][ T4709]  ? _raw_spin_trylock_bh+0x130/0x130
[  262.445115][ T4709]  ? __switch_to+0x50f/0xfc0
[  262.449708][ T4709]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[  262.455511][ T4709]  ? rcu_preempt_deferred_qs_irqrestore+0x65d/0x950
[  262.462102][ T4709]  ? preempt_schedule_irq+0xbb/0x110
[  262.467392][ T4709]  ? rcu_read_unlock_special+0x170/0x420
[  262.473028][ T4709]  tcp_getsockopt+0x1c9/0x1df0
[  262.477788][ T4709]  ? __sanitizer_cov_trace_pc+0x1/0x60
[  262.483249][ T4709]  ? tcp_get_timestamping_opt_stats+0xf20/0xf20
[  262.489484][ T4709]  ? __rcu_read_unlock+0x5e/0xa0
[  262.494417][ T4709]  ? avc_has_perm+0x234/0x360
[  262.499100][ T4709]  ? proc_fail_nth_read+0x210/0x210
[  262.504297][ T4709]  ? avc_has_perm_noaudit+0x240/0x240
[  262.509671][ T4709]  ? vfs_write+0xac8/0xd60
[  262.514086][ T4709]  ? selinux_socket_getsockopt+0x208/0x2e0
[  262.519895][ T4709]  ? selinux_socket_getpeername+0x2e0/0x2e0
[  262.525784][ T4709]  ? __fget_files+0x2c4/0x320
[  262.530460][ T4709]  sock_common_getsockopt+0x98/0xb0
[  262.535656][ T4709]  ? sock_recv_errqueue+0x4c0/0x4c0
[  262.540851][ T4709]  __sys_getsockopt+0x201/0x370
[  262.545699][ T4709]  __x64_sys_getsockopt+0xbf/0xd0
[  262.550730][ T4709]  do_syscall_64+0x31/0x40
[  262.555146][ T4709]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  262.561065][ T4709] RIP: 0033:0x7fe0f0d42929
[  262.565489][ T4709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.585100][ T4709] RSP: 002b:00007fe0ef369038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  262.593515][ T4709] RAX: ffffffffffffffda RBX: 00007fe0f0f6a160 RCX: 00007fe0f0d42929
[  262.601487][ T4709] RDX: 0000000000000043 RSI: 0000000000000000 RDI: 0000000000000003
[  262.609462][ T4709] RBP: 00007fe0ef369090 R08: 0000200000000080 R09: 0000000000000000
[  262.617430][ T4709] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  262.625406][ T4709] R13: 0000000000000000 R14: 00007fe0f0f6a160 R15: 00007ffe7e9d66b8
[  262.637279][ T4705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.646150][    T9] device bridge_slave_1 left promiscuous mode
[  262.652573][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.660251][    T9] device bridge_slave_0 left promiscuous mode
[  262.667569][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.675869][ T4697] EXT4-fs error (device loop8): ext4_ext_check_inode:500: inode #2: comm syz.8.1228: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  262.694813][    T9] device veth1_macvtap left promiscuous mode
[  262.700892][    T9] device veth0_vlan left promiscuous mode
[  262.706900][ T4697] EXT4-fs (loop8): get root inode failed
[  262.738608][ T4697] EXT4-fs (loop8): mount failed
[  262.898268][ T4704] tipc: Resetting bearer <eth:syzkaller0>
[  262.930205][ T4704] tipc: Disabling bearer <eth:syzkaller0>
[  263.048101][ T4726] FAULT_INJECTION: forcing a failure.
[  263.048101][ T4726] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  263.062278][    T5] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  263.064007][ T4726] CPU: 1 PID: 4726 Comm: syz.4.1235 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0
[  263.079744][ T4726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  263.089805][ T4726] Call Trace:
[  263.093111][ T4726]  __dump_stack+0x21/0x24
[  263.097439][ T4726]  dump_stack_lvl+0x169/0x1d8
[  263.102127][ T4726]  ? show_regs_print_info+0x18/0x18
[  263.107323][ T4726]  ? stack_trace_save+0x98/0xe0
[  263.112176][ T4726]  ? do_kern_addr_fault+0x80/0x80
[  263.117188][ T4726]  dump_stack+0x15/0x1c
[  263.121329][ T4726]  should_fail+0x3c1/0x510
[  263.125732][ T4726]  should_fail_usercopy+0x1a/0x20
[  263.130745][ T4726]  _copy_from_user+0x20/0xd0
[  263.135322][ T4726]  __copy_msghdr_from_user+0xaf/0x5e0
[  263.140684][ T4726]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[  263.145961][ T4726]  ? __fsnotify_parent+0x5f5/0x6c0
[  263.151067][ T4726]  ___sys_sendmsg+0x156/0x260
[  263.155737][ T4726]  ? __sys_sendmsg+0x250/0x250
[  263.160485][ T4726]  ? rw_verify_area+0x1c0/0x360
[  263.165325][ T4726]  ? __fdget+0x1a1/0x230
[  263.169553][ T4726]  __x64_sys_sendmsg+0x1e2/0x2a0
[  263.174475][ T4726]  ? fput+0x1a/0x20
[  263.178275][ T4726]  ? ___sys_sendmsg+0x260/0x260
[  263.183120][ T4726]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  263.189172][ T4726]  do_syscall_64+0x31/0x40
[  263.193582][ T4726]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  263.199459][ T4726] RIP: 0033:0x7fe0f0d42929
[  263.203861][ T4726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.223456][ T4726] RSP: 002b:00007fe0ef38a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.231858][ T4726] RAX: ffffffffffffffda RBX: 00007fe0f0f6a080 RCX: 00007fe0f0d42929
[  263.239821][ T4726] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[  263.247780][ T4726] RBP: 00007fe0ef38a090 R08: 0000000000000000 R09: 0000000000000000
[  263.255737][ T4726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.263695][ T4726] R13: 0000000000000001 R14: 00007fe0f0f6a080 R15: 00007ffe7e9d66b8
[  263.564987][    T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.575956][    T5] usb 4-1: New USB device found, idVendor=046d, idProduct=c134, bcdDevice= 9.00
[  263.585227][    T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.593857][    T5] usb 4-1: config 0 descriptor??
[  263.915354][ T4745] fuse: Unknown parameter '¸
qZPÅÃ^'ñèv|ê'
[  264.293428][ T4748] EXT4-fs (loop9): Ignoring removed nobh option
[  264.301989][ T4748] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[  264.310323][ T4748] EXT4-fs error (device loop9): ext4_free_branches:1026: inode #13: comm syz.9.1243: invalid indirect mapped block 2683928664 (level 1)
[  264.324608][ T4748] EXT4-fs (loop9): 1 truncate cleaned up
[  264.330382][ T4748] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nojournal_checksum,acl,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue
[  264.350909][ T4748] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:476: comm syz.9.1243: Invalid block bitmap block 3 in block_group 0
[  264.476624][   T24] audit: type=1326 audit(1751669470.800:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.9.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c91e929 code=0x7ffc0000
[  264.500331][   T24] audit: type=1326 audit(1751669470.800:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.9.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577c91e929 code=0x7ffc0000
[  264.531131][   T24] audit: type=1326 audit(1751669470.800:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.9.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c91e929 code=0x7ffc0000
[  264.555278][   T24] audit: type=1326 audit(1751669470.800:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.9.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577c91e929 code=0x7ffc0000
[  264.579267][   T24] audit: type=1326 audit(1751669470.800:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.9.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c91e929 code=0x7ffc0000
[  264.655614][   T24] audit: type=1326 audit(1751669470.800:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.9.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577c91e929 code=0x7ffc0000
[  264.691331][ T4758] FAT-fs (loop8): bogus number of FAT sectors
[  264.703042][   T24] audit: type=1326 audit(1751669470.800:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.9.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c91e929 code=0x7ffc0000
[  264.726658][ T4758] FAT-fs (loop8): Can't find a valid FAT filesystem
[  264.726802][   T24] audit: type=1326 audit(1751669470.811:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.9.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c91e929 code=0x7ffc0000
[  264.756761][   T24] audit: type=1400 audit(1751669470.972:3401): avc:  denied  { execute } for  pid=4757 comm="syz.8.1246" dev="tmpfs" ino=1574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  264.778229][   T24] audit: type=1400 audit(1751669470.972:3402): avc:  denied  { execute_no_trans } for  pid=4757 comm="syz.8.1246" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  264.808353][ T4765] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1248'.
[  264.823206][   T51] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  265.014771][ T4767] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue
[  265.056890][   T51] usb 8-1: Using ep0 maxpacket: 16
[  265.119538][ T4777] fuse: Unknown parameter ''
[  265.168491][   T51] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.187490][   T51] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.199527][   T51] usb 8-1: New USB device found, idVendor=a5d8, idProduct=ac88, bcdDevice= 0.9b
[  265.216823][   T51] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.268148][   T51] usb 8-1: config 0 descriptor??
[  265.537486][   T25] usb 4-1: USB disconnect, device number 26
[  265.672473][ T4787] FAULT_INJECTION: forcing a failure.
[  265.672473][ T4787] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  265.685659][ T4787] CPU: 1 PID: 4787 Comm: syz.9.1256 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0
[  265.695659][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  265.705700][ T4787] Call Trace:
[  265.708979][ T4787]  __dump_stack+0x21/0x24
[  265.713295][ T4787]  dump_stack_lvl+0x169/0x1d8
[  265.717962][ T4787]  ? show_regs_print_info+0x18/0x18
[  265.723159][ T4787]  ? stack_trace_save+0x98/0xe0
[  265.728007][ T4787]  dump_stack+0x15/0x1c
[  265.732156][ T4787]  should_fail+0x3c1/0x510
[  265.736590][ T4787]  should_fail_usercopy+0x1a/0x20
[  265.741602][ T4787]  _copy_from_user+0x20/0xd0
[  265.746173][ T4787]  __copy_msghdr_from_user+0xaf/0x5e0
[  265.751525][ T4787]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[  265.756792][ T4787]  ? __fsnotify_parent+0x5f5/0x6c0
[  265.761884][ T4787]  ___sys_sendmsg+0x156/0x260
[  265.766539][ T4787]  ? __sys_sendmsg+0x250/0x250
[  265.771284][ T4787]  ? rw_verify_area+0x1c0/0x360
[  265.776118][ T4787]  ? __fdget+0x1a1/0x230
[  265.780339][ T4787]  __x64_sys_sendmsg+0x1e2/0x2a0
[  265.785255][ T4787]  ? fput+0x1a/0x20
[  265.789045][ T4787]  ? ___sys_sendmsg+0x260/0x260
[  265.793876][ T4787]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  265.799921][ T4787]  do_syscall_64+0x31/0x40
[  265.804321][ T4787]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  265.810207][ T4787] RIP: 0033:0x7f577c91e929
[  265.814614][ T4787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.834292][ T4787] RSP: 002b:00007f577af87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  265.842690][ T4787] RAX: ffffffffffffffda RBX: 00007f577cb45fa0 RCX: 00007f577c91e929
[  265.850777][ T4787] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000003
[  265.858734][ T4787] RBP: 00007f577af87090 R08: 0000000000000000 R09: 0000000000000000
[  265.866687][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.874754][ T4787] R13: 0000000000000000 R14: 00007f577cb45fa0 R15: 00007fffb574faf8
[  265.896448][   T51] hid-generic 0003:A5D8:AC88.001D: unknown main item tag 0x0
[  265.907759][   T51] hid-generic 0003:A5D8:AC88.001D: unknown main item tag 0x0
[  265.915492][   T51] hid-generic 0003:A5D8:AC88.001D: item fetching failed at offset 2/11
[  265.924198][   T51] hid-generic: probe of 0003:A5D8:AC88.001D failed with error -22
[  266.000979][ T4797] tipc: Started in network mode
[  266.005928][ T4797] tipc: Own node identity 4279eec16f65, cluster identity 4711
[  266.014575][ T4797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.022023][ T4796] tipc: Resetting bearer <eth:syzkaller0>
[  266.040805][ T4796] tipc: Disabling bearer <eth:syzkaller0>
[  266.092976][ T4727] usb 8-1: USB disconnect, device number 6
[  266.344160][ T4812] FAT-fs (loop4): Unrecognized mount option "allow�OïLŒ;æ×È�(h_utime=00000000000000000177777" or missing value
[  266.409353][  T650] hid-generic 0003:0000:0000.001E: item fetching failed at offset 0/1
[  266.477459][  T650] hid-generic: probe of 0003:0000:0000.001E failed with error -22
[  266.594241][    T5] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  266.827875][    T5] usb 10-1: Using ep0 maxpacket: 32
[  266.835089][ T4824] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18b10316, utbl_chksum : 0xe619d30d)
[  266.847331][ T4824] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  266.939368][    T5] usb 10-1: config 0 has an invalid interface number: 196 but max is 0
[  266.948144][    T5] usb 10-1: config 0 has no interface number 0
[  266.954573][    T5] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  266.969523][    T5] usb 10-1: config 0 interface 196 has no altsetting 0
[  267.349137][  T650] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  267.591386][  T650] usb 5-1: Using ep0 maxpacket: 16
[  267.712764][  T650] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  267.721132][  T650] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  267.732394][  T650] usb 5-1: config 0 has no interface number 0
[  267.945864][  T650] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  267.955055][  T650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.963036][  T650] usb 5-1: Product: syz
[  267.967517][  T650] usb 5-1: Manufacturer: syz
[  267.972113][  T650] usb 5-1: SerialNumber: syz
[  267.980553][  T650] usb 5-1: config 0 descriptor??
[  268.026657][ T1312] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  268.045292][  T650] snd-usb-audio: probe of 5-1:0.1 failed with error -2
[  268.064741][ T4838] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.072080][ T4837] tipc: Resetting bearer <eth:syzkaller0>
[  268.086067][ T4837] tipc: Disabling bearer <eth:syzkaller0>
[  268.151121][    T5] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  268.162892][    T5] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.171652][    T5] usb 10-1: Product: syz
[  268.176079][    T5] usb 10-1: Manufacturer: syz
[  268.181115][    T5] usb 10-1: SerialNumber: syz
[  268.187208][    T5] usb 10-1: config 0 descriptor??
[  268.216180][ T4810] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  268.262522][ T1312] usb 4-1: Using ep0 maxpacket: 32
[  268.374367][ T1312] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[  268.382603][ T1312] usb 4-1: config 0 has no interface number 0
[  268.388732][ T1312] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  268.399113][ T1312] usb 4-1: config 0 interface 196 has no altsetting 0
[  268.458259][  T650] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  268.560973][ T1312] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  268.570089][ T1312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.578084][ T1312] usb 4-1: Product: syz
[  268.582310][ T1312] usb 4-1: Manufacturer: syz
[  268.586899][ T1312] usb 4-1: SerialNumber: syz
[  268.592301][ T1312] usb 4-1: config 0 descriptor??
[  268.608108][ T4822] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  268.654151][    T5] ipheth 10-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  268.663330][    T5] ipheth: probe of 10-1:0.196 failed with error -22
[  268.692639][   T25] usb 5-1: USB disconnect, device number 18
[  268.704630][  T650] usb 8-1: Using ep0 maxpacket: 32
[  268.821915][  T650] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[  268.830410][  T650] usb 8-1: config 0 has no interface number 0
[  268.836923][  T650] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  268.892395][ T4849] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1275'.
[  268.910599][  T650] usb 8-1: config 0 interface 196 has no altsetting 0
[  269.101504][  T650] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  269.107990][ T1312] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  269.113859][  T650] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.119668][ T1312] ipheth: probe of 4-1:0.196 failed with error -22
[  269.142400][  T650] usb 8-1: Product: syz
[  269.146625][  T650] usb 8-1: Manufacturer: syz
[  269.146982][ T4852] fuse: Unknown parameter 'fd0x0000000000000005'
[  269.151623][  T650] usb 8-1: SerialNumber: syz
[  269.165579][  T650] usb 8-1: config 0 descriptor??
[  269.185562][ T4840] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  269.318033][   T24] kauditd_printk_skb: 48 callbacks suppressed
[  269.318047][   T24] audit: type=1400 audit(1751669476.004:3451): avc:  denied  { read } for  pid=4858 comm="syz.8.1279" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  269.346953][   T24] audit: type=1400 audit(1751669476.004:3452): avc:  denied  { open } for  pid=4858 comm="syz.8.1279" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  269.370960][   T24] audit: type=1400 audit(1751669476.004:3453): avc:  denied  { ioctl } for  pid=4858 comm="syz.8.1279" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  269.397659][   T24] audit: type=1400 audit(1751669476.004:3454): avc:  denied  { set_context_mgr } for  pid=4858 comm="syz.8.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  269.623436][  T650] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  269.674536][  T650] ipheth: probe of 8-1:0.196 failed with error -22
[  269.851327][    T5] usb 8-1: USB disconnect, device number 7
[  269.974697][   T25] usb 10-1: USB disconnect, device number 6
[  270.099818][   T24] audit: type=1326 audit(1751669476.841:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.8.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f696ac929 code=0x7ffc0000
[  270.123451][   T24] audit: type=1326 audit(1751669476.841:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.8.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f696ac929 code=0x7ffc0000
[  270.149493][   T24] audit: type=1326 audit(1751669476.841:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.8.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2f696ac929 code=0x7ffc0000
[  270.173581][   T24] audit: type=1326 audit(1751669476.841:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.8.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f696ac929 code=0x7ffc0000
[  270.197570][   T24] audit: type=1326 audit(1751669476.841:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.8.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f696ac929 code=0x7ffc0000
[  270.221059][   T24] audit: type=1326 audit(1751669476.841:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.8.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f696ac929 code=0x7ffc0000
[  270.638419][  T650] usb 4-1: USB disconnect, device number 27
[  270.679106][ T4875] tipc: Started in network mode
[  270.684059][ T4875] tipc: Own node identity 3ec00951b1c2, cluster identity 4711
[  270.691660][ T4875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.698940][ T4874] tipc: Resetting bearer <eth:syzkaller0>
[  270.708873][ T4874] tipc: Disabling bearer <eth:syzkaller0>
[  270.717985][ T4877] EXT4-fs (loop7): Ignoring removed nobh option
[  270.728334][ T4877] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  270.729398][ T4880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1285'.
[  270.736804][ T4877] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #13: comm syz.7.1284: invalid indirect mapped block 2683928664 (level 1)
[  270.745732][   T25] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  270.759864][ T4877] EXT4-fs (loop7): 1 truncate cleaned up
[  270.775335][ T4877] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nojournal_checksum,acl,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue
[  270.805064][ T4877] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.1284: Invalid block bitmap block 3 in block_group 0
[  270.859254][ T4884] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  270.867812][ T4885] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  271.012448][ T4893] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:3'
[  271.020689][ T4893] CPU: 0 PID: 4893 Comm: syz.7.1291 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0
[  271.030578][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  271.040632][ T4893] Call Trace:
[  271.043924][ T4893]  __dump_stack+0x21/0x24
[  271.048260][ T4893]  dump_stack_lvl+0x169/0x1d8
[  271.052936][ T4893]  ? show_regs_print_info+0x18/0x18
[  271.058146][ T4893]  ? sysfs_create_dir_ns+0x20f/0x280
[  271.059591][   T25] usb 10-1: Using ep0 maxpacket: 32
[  271.063450][ T4893]  dump_stack+0x15/0x1c
[  271.072777][ T4893]  sysfs_create_dir_ns+0x24e/0x280
[  271.077895][ T4893]  ? loop_add+0x5bd/0x7b0
[  271.082231][ T4893]  ? sysfs_warn_dup+0xa0/0xa0
[  271.086912][ T4893]  ? _raw_spin_lock+0x8e/0xe0
[  271.091603][ T4893]  kobject_add_internal+0x755/0xda0
[  271.096815][ T4893]  kobject_add+0x154/0x210
[  271.101250][ T4893]  ? _raw_spin_lock+0x8e/0xe0
[  271.105941][ T4893]  ? kobject_init+0x1d0/0x1d0
[  271.110635][ T4893]  ? __kasan_check_write+0x14/0x20
[  271.115753][ T4893]  ? mutex_unlock+0x1c/0x40
[  271.120270][ T4893]  ? get_device_parent+0x2a1/0x410
[  271.125390][ T4893]  device_add+0x3e7/0xbf0
[  271.129729][ T4893]  ? kobject_set_name_vargs+0xca/0x110
[  271.135193][ T4893]  device_create+0x25e/0x2f0
[  271.139788][ T4893]  ? root_device_unregister+0x80/0x80
[  271.145155][ T4893]  ? vsnprintf+0x1871/0x1960
[  271.149728][ T4893]  bdi_register_va+0x90/0x5f0
[  271.154383][ T4893]  bdi_register+0xd1/0x120
[  271.158780][ T4893]  ? bdi_register_va+0x5f0/0x5f0
[  271.163701][ T4893]  ? __kasan_check_read+0x11/0x20
[  271.168706][ T4893]  ? blk_alloc_devt+0xda/0x330
[  271.173448][ T4893]  __device_add_disk+0x548/0x1020
[  271.178450][ T4893]  device_add_disk+0x2a/0x40
[  271.183021][ T4893]  loop_add+0x5bd/0x7b0
[  271.187163][ T4893]  loop_control_ioctl+0x369/0x550
[  271.192171][ T4893]  ? loop_remove+0xb0/0xb0
[  271.196565][ T4893]  ? __fget_files+0x2c4/0x320
[  271.201220][ T4893]  ? security_file_ioctl+0x84/0xa0
[  271.206307][ T4893]  ? loop_remove+0xb0/0xb0
[  271.210702][ T4893]  __se_sys_ioctl+0x121/0x1a0
[  271.215353][ T4893]  __x64_sys_ioctl+0x7b/0x90
[  271.219919][ T4893]  do_syscall_64+0x31/0x40
[  271.224314][ T4893]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  271.230183][ T4893] RIP: 0033:0x7ffaedfa1929
[  271.234576][ T4893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.246346][   T25] usb 10-1: config 0 has an invalid interface number: 196 but max is 0
[  271.254165][ T4893] RSP: 002b:00007ffaec60a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  271.262446][   T25] usb 10-1: config 0 has no interface number 0
[  271.270795][ T4893] RAX: ffffffffffffffda RBX: 00007ffaee1c8fa0 RCX: 00007ffaedfa1929
[  271.270804][ T4893] RDX: 0000000000100003 RSI: 0000000000004c80 RDI: 0000000000000009
[  271.270812][ T4893] RBP: 00007ffaee023b39 R08: 0000000000000000 R09: 0000000000000000
[  271.270818][ T4893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.270834][ T4893] R13: 0000000000000000 R14: 00007ffaee1c8fa0 R15: 00007fff2ab5fa08
[  271.278304][   T25] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  271.286645][ T4893] kobject_add_internal failed for 7:3 with -EEXIST, don't try to register things with the same name in the same directory.
[  271.316981][   T25] usb 10-1: config 0 interface 196 has no altsetting 0
[  271.424348][ T4900] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1288'.
[  271.474783][ T4893] ------------[ cut here ]------------
[  271.570972][ T4893] WARNING: CPU: 1 PID: 4893 at block/genhd.c:821 __device_add_disk+0xd28/0x1020
[  271.587410][ T4893] Modules linked in:
[  271.597187][ T4893] CPU: 1 PID: 4893 Comm: syz.7.1291 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0
[  271.608135][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  271.620030][   T51] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  271.637529][   T25] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  271.650899][ T4893] RIP: 0010:__device_add_disk+0xd28/0x1020
[  271.668902][   T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.969205][ T4893] Code: ff e8 0c 4b 34 ff 0f 0b e9 85 fe ff ff e8 00 4b 34 ff 0f 0b e9 39 f4 ff ff e8 f4 4a 34 ff 0f 0b e9 8b f9 ff ff e8 e8 4a 34 ff <0f> 0b e9 33 f8 ff ff e8 dc 4a 34 ff e9 5b fd ff ff e8 d2 4a 34 ff
[  271.989397][ T4893] RSP: 0018:ffffc90000e37c88 EFLAGS: 00010246
[  271.995788][ T4893] RAX: ffffffff822f4928 RBX: ffff888126d04000 RCX: 0000000000080000
[  272.004050][ T4893] RDX: ffffc9000553a000 RSI: 000000000007ffff RDI: 0000000000080000
[  272.012494][ T4893] RBP: ffffc90000e37d30 R08: 0000000000000004 R09: 0000000000000003
[  272.020816][ T4893] R10: fffff520001c6ea8 R11: 1ffff920001c6ea8 R12: ffff888126d04068
[  272.028971][ T4893] R13: ffff888126d04348 R14: ffff888126d07000 R15: 00000000ffffffef
[  272.037063][ T4893] FS:  00007ffaec60a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  272.046257][ T4893] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  272.053032][ T4893] CR2: 00007fe5ab566d0c CR3: 00000001177bf000 CR4: 00000000003506b0
[  272.061164][ T4893] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  272.069363][ T4893] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  272.077483][ T4893] Call Trace:
[  272.081024][ T4893]  device_add_disk+0x2a/0x40
[  272.085826][ T4893]  loop_add+0x5bd/0x7b0
[  272.089994][ T4893]  loop_control_ioctl+0x369/0x550
[  272.095339][ T4893]  ? loop_remove+0xb0/0xb0
[  272.099762][ T4893]  ? __fget_files+0x2c4/0x320
[  272.104699][ T4893]  ? security_file_ioctl+0x84/0xa0
[  272.109853][ T4893]  ? loop_remove+0xb0/0xb0
[  272.114552][ T4893]  __se_sys_ioctl+0x121/0x1a0
[  272.119235][ T4893]  __x64_sys_ioctl+0x7b/0x90
[  272.124058][ T4893]  do_syscall_64+0x31/0x40
[  272.128487][ T4893]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  272.134641][ T4893] RIP: 0033:0x7ffaedfa1929
[  272.139065][ T4893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.159238][ T4893] RSP: 002b:00007ffaec60a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  272.167658][ T4893] RAX: ffffffffffffffda RBX: 00007ffaee1c8fa0 RCX: 00007ffaedfa1929
[  272.175879][ T4893] RDX: 0000000000100003 RSI: 0000000000004c80 RDI: 0000000000000009
[  272.184019][ T4893] RBP: 00007ffaee023b39 R08: 0000000000000000 R09: 0000000000000000
[  272.192175][ T4893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.200300][ T4893] R13: 0000000000000000 R14: 00007ffaee1c8fa0 R15: 00007fff2ab5fa08
[  272.208487][ T4893] ---[ end trace 12ab8701694640b0 ]---
[  272.214243][ T4893] sysfs: cannot create duplicate filename '/dev/block/7:3'
[  272.221706][ T4893] CPU: 0 PID: 4893 Comm: syz.7.1291 Tainted: G        W         5.10.238-syzkaller-00008-g59e9a7228857 #0
[  272.232978][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  272.243030][ T4893] Call Trace:
[  272.246333][ T4893]  __dump_stack+0x21/0x24
[  272.250664][ T4893]  dump_stack_lvl+0x169/0x1d8
[  272.255345][ T4893]  ? show_regs_print_info+0x18/0x18
[  272.260545][ T4893]  ? kmem_cache_alloc_trace+0x184/0x2e0
[  272.266090][ T4893]  ? sysfs_warn_dup+0x51/0xa0
[  272.270765][ T4893]  dump_stack+0x15/0x1c
[  272.274920][ T4893]  sysfs_warn_dup+0x8e/0xa0
[  272.279421][ T4893]  sysfs_do_create_link_sd+0xc9/0x110
[  272.284791][ T4893]  sysfs_create_link+0x68/0x80
[  272.289557][ T4893]  device_create_sys_dev_entry+0x113/0x170
[  272.295359][ T4893]  ? device_add_attrs+0x430/0x430
[  272.300383][ T4893]  ? device_create_file+0x10e/0x1c0
[  272.305582][ T4893]  device_add+0x830/0xbf0
[  272.309917][ T4893]  __device_add_disk+0x6eb/0x1020
[  272.314943][ T4893]  device_add_disk+0x2a/0x40
[  272.319533][ T4893]  loop_add+0x5bd/0x7b0
[  272.323687][ T4893]  loop_control_ioctl+0x369/0x550
[  272.328710][ T4893]  ? loop_remove+0xb0/0xb0
[  272.333124][ T4893]  ? __fget_files+0x2c4/0x320
[  272.337801][ T4893]  ? security_file_ioctl+0x84/0xa0
[  272.342910][ T4893]  ? loop_remove+0xb0/0xb0
[  272.347330][ T4893]  __se_sys_ioctl+0x121/0x1a0
[  272.352005][ T4893]  __x64_sys_ioctl+0x7b/0x90
[  272.356598][ T4893]  do_syscall_64+0x31/0x40
[  272.361021][ T4893]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  272.366910][ T4893] RIP: 0033:0x7ffaedfa1929
[  272.371328][ T4893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.390940][ T4893] RSP: 002b:00007ffaec60a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  272.399360][ T4893] RAX: ffffffffffffffda RBX: 00007ffaee1c8fa0 RCX: 00007ffaedfa1929
[  272.407338][ T4893] RDX: 0000000000100003 RSI: 0000000000004c80 RDI: 0000000000000009
[  272.415319][ T4893] RBP: 00007ffaee023b39 R08: 0000000000000000 R09: 0000000000000000
[  272.423294][ T4893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.431273][ T4893] R13: 0000000000000000 R14: 00007ffaee1c8fa0 R15: 00007fff2ab5fa08
[  272.441619][ T4893] kobject_add_internal failed for queue (error: -2 parent: loop1048579)
[  272.450146][ T4893] ------------[ cut here ]------------
[  272.455662][ T4893] WARNING: CPU: 0 PID: 4893 at fs/sysfs/file.c:328 sysfs_create_files+0x1f4/0x310
[  272.462825][   T25] usb 10-1: Product: syz
[  272.467139][ T4893] Modules linked in:
[  272.469646][   T25] usb 10-1: Manufacturer: syz
[  272.473181][ T4893] CPU: 0 PID: 4893 Comm: syz.7.1291 Tainted: G        W         5.10.238-syzkaller-00008-g59e9a7228857 #0
[  272.473189][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  272.473206][ T4893] RIP: 0010:sysfs_create_files+0x1f4/0x310
[  272.473218][ T4893] Code: ff ff 48 89 fb 48 89 c7 e8 19 f6 d7 ff 48 89 df e9 58 ff ff ff e8 ec 05 9e ff 4c 89 f0 45 31 f6 e9 d4 00 00 00 e8 dc 05 9e ff <0f> 0b 41 be ea ff ff ff eb 15 85 c0 4c 89 e3 0f 84 b0 00 00 00 e8
[  272.473227][ T4893] RSP: 0018:ffffc90000e37ba0 EFLAGS: 00010246
[  272.473240][ T4893] RAX: ffffffff81c58f3e RBX: dffffc0000000000 RCX: 0000000000080000
[  272.473249][ T4893] RDX: ffffc9000553a000 RSI: 000000000007ffff RDI: 0000000000080000
[  272.473258][ T4893] RBP: ffffc90000e37c78 R08: dffffc0000000000 R09: ffffed102157e9de
[  272.473268][ T4893] R10: ffffed102157e9de R11: 1ffff1102157e9dd R12: ffffffff8654d900
[  272.473277][ T4893] R13: ffff888126d04068 R14: ffff888126d04098 R15: ffffffff851f6860
[  272.473289][ T4893] FS:  00007ffaec60a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  272.473298][ T4893] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  272.473307][ T4893] CR2: 00007fe5a916d0ec CR3: 00000001177bf000 CR4: 00000000003506b0
[  272.473328][ T4893] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  272.473336][ T4893] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  272.473340][ T4893] Call Trace:
[  272.473355][ T4893]  ? sysfs_create_file_ns+0x1a0/0x1a0
[  272.473376][ T4893]  ? __kasan_check_write+0x14/0x20
[  272.478242][   T25] usb 10-1: SerialNumber: syz
[  272.490162][ T4893]  ? kobject_get+0xd3/0x120
[  272.532172][   T25] usb 10-1: config 0 descriptor??
[  272.539891][ T4893]  __device_add_disk+0xb9f/0x1020
[  272.569277][ T4868] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  272.571390][ T4893]  device_add_disk+0x2a/0x40
[  272.655536][ T4893]  loop_add+0x5bd/0x7b0
[  272.659742][ T4893]  loop_control_ioctl+0x369/0x550
[  272.664846][   T51] usb 8-1: Using ep0 maxpacket: 32
[  272.665027][ T4893]  ? loop_remove+0xb0/0xb0
[  272.674433][ T4893]  ? __fget_files+0x2c4/0x320
[  272.679095][ T4893]  ? security_file_ioctl+0x84/0xa0
[  272.684230][ T4893]  ? loop_remove+0xb0/0xb0
[  272.688643][ T4893]  __se_sys_ioctl+0x121/0x1a0
[  272.693365][ T4893]  __x64_sys_ioctl+0x7b/0x90
[  272.697964][ T4893]  do_syscall_64+0x31/0x40
[  272.702389][ T4893]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  272.708280][ T4893] RIP: 0033:0x7ffaedfa1929
[  272.712734][ T4893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.732435][ T4893] RSP: 002b:00007ffaec60a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  272.740892][ T4893] RAX: ffffffffffffffda RBX: 00007ffaee1c8fa0 RCX: 00007ffaedfa1929
[  272.748924][ T4893] RDX: 0000000000100003 RSI: 0000000000004c80 RDI: 0000000000000009
[  272.756907][ T4893] RBP: 00007ffaee023b39 R08: 0000000000000000 R09: 0000000000000000
[  272.764917][ T4893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.772981][ T4893] R13: 0000000000000000 R14: 00007ffaee1c8fa0 R15: 00007fff2ab5fa08
[  272.780983][ T4893] ---[ end trace 12ab8701694640b1 ]---
[  272.786619][ T4893] ------------[ cut here ]------------
[  272.792065][ T4893] kernfs: can not remove 'events', no directory
[  272.793757][   T51] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  272.798412][ T4893] WARNING: CPU: 0 PID: 4893 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160
[  272.807306][   T51] usb 8-1: config 0 has no interface number 0
[  272.816281][ T4893] Modules linked in:
[  272.826234][ T4893] CPU: 0 PID: 4893 Comm: syz.7.1291 Tainted: G        W         5.10.238-syzkaller-00008-g59e9a7228857 #0
[  272.837554][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  272.847639][ T4893] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160
[  272.854043][ T4893] Code: 06 4c 89 f7 e8 4e ef ff ff 4c 89 f7 e8 b6 af ff ff 45 31 f6 eb 29 e8 3c 64 9e ff 48 c7 c7 40 c6 0a 85 4c 89 f6 e8 9d ce a6 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 1e 64 9e ff 41 be fe ff ff ff 48
[  272.873720][ T4893] RSP: 0018:ffffc90000e37b68 EFLAGS: 00010246
[  272.879824][ T4893] RAX: ea6558f1d76d3d00 RBX: 0000000000000000 RCX: 0000000000080000
[  272.887854][ T4893] RDX: ffffc9000553a000 RSI: 000000000007ffff RDI: 0000000000080000
[  272.895835][ T4893] RBP: ffffc90000e37b90 R08: 0000000000000004 R09: 0000000000000003
[  272.903791][ T4893] R10: fffff520001c6eb0 R11: 1ffff920001c6eb0 R12: 0000000000000000
[  272.911823][ T4893] R13: dffffc0000000000 R14: ffffffff851f6840 R15: 0000000000000000
[  272.919846][ T4893] FS:  00007ffaec60a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  272.928832][ T4893] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  272.935441][ T4893] CR2: 00007fe5a916d0ec CR3: 00000001177bf000 CR4: 00000000003506b0
[  272.943476][ T4893] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  272.951471][ T4893] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  272.959436][ T4893] Call Trace:
[  272.962796][ T4893]  sysfs_create_files+0x293/0x310
[  272.967834][ T4893]  ? sysfs_create_file_ns+0x1a0/0x1a0
[  272.973236][ T4893]  ? __kasan_check_write+0x14/0x20
[  272.978348][ T4893]  ? kobject_get+0xd3/0x120
[  272.982895][ T4893]  __device_add_disk+0xb9f/0x1020
[  272.987916][ T4893]  device_add_disk+0x2a/0x40
[  272.992512][ T4893]  loop_add+0x5bd/0x7b0
[  272.996670][ T4893]  loop_control_ioctl+0x369/0x550
[  272.997657][   T51] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  273.001745][ T4893]  ? loop_remove+0xb0/0xb0
[  273.010851][   T25] ipheth 10-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  273.015147][ T4893]  ? __fget_files+0x2c4/0x320
[  273.024717][   T51] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.028928][ T4893]  ? security_file_ioctl+0x84/0xa0
[  273.037117][   T25] ipheth: probe of 10-1:0.196 failed with error -22
[  273.042042][ T4893]  ? loop_remove+0xb0/0xb0
[  273.049405][   T51] usb 8-1: Product: syz
[  273.053897][ T4893]  __se_sys_ioctl+0x121/0x1a0
[  273.061929][ T4893]  __x64_sys_ioctl+0x7b/0x90
[  273.066766][ T4893]  do_syscall_64+0x31/0x40
[  273.067292][   T51] usb 8-1: Manufacturer: syz
[  273.071228][ T4893]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  273.071246][ T4893] RIP: 0033:0x7ffaedfa1929
[  273.076031][   T51] usb 8-1: SerialNumber: syz
[  273.081880][ T4893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.090233][   T51] usb 8-1: config 0 descriptor??
[  273.090858][ T4893] RSP: 002b:00007ffaec60a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  273.123979][ T4893] RAX: ffffffffffffffda RBX: 00007ffaee1c8fa0 RCX: 00007ffaedfa1929
[  273.132019][ T4893] RDX: 0000000000100003 RSI: 0000000000004c80 RDI: 0000000000000009
[  273.140019][ T4893] RBP: 00007ffaee023b39 R08: 0000000000000000 R09: 0000000000000000
[  273.148053][ T4893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  273.156023][ T4893] R13: 0000000000000000 R14: 00007ffaee1c8fa0 R15: 00007fff2ab5fa08
[  273.157820][   T51] smsc95xx v2.0.0
[  273.164038][ T4893] ---[ end trace 12ab8701694640b2 ]---
[  273.173397][ T4893] loop1048579: failed to create sysfs files for events
[  273.193086][ T4897] F2FS-fs (loop8): invalid crc value
[  273.203755][ T4897] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  273.232530][ T4897] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2
[  273.232684][   T25] usb 10-1: USB disconnect, device number 7
[  273.239861][ T4897] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  274.048575][ T4918] FAULT_INJECTION: forcing a failure.
[  274.048575][ T4918] name failslab, interval 1, probability 0, space 0, times 0
[  274.061336][ T4918] CPU: 0 PID: 4918 Comm: syz.8.1292 Tainted: G        W         5.10.238-syzkaller-00008-g59e9a7228857 #0
[  274.072625][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  274.082685][ T4918] Call Trace:
[  274.085984][ T4918]  __dump_stack+0x21/0x24
[  274.090320][ T4918]  dump_stack_lvl+0x169/0x1d8
[  274.095001][ T4918]  ? thaw_kernel_threads+0x220/0x220
[  274.100300][ T4918]  ? show_regs_print_info+0x18/0x18
[  274.105506][ T4918]  ? proc_fail_nth_read+0x210/0x210
[  274.110712][ T4918]  dump_stack+0x15/0x1c
[  274.114867][ T4918]  should_fail+0x3c1/0x510
[  274.119283][ T4918]  ? getname_flags+0xb9/0x500
[  274.123959][ T4918]  __should_failslab+0xa4/0xe0
[  274.128745][ T4918]  should_failslab+0x9/0x20
[  274.133266][ T4918]  kmem_cache_alloc+0x3d/0x2e0
[  274.138047][ T4918]  getname_flags+0xb9/0x500
[  274.142556][ T4918]  getname+0x19/0x20
[  274.146466][ T4918]  do_sys_openat2+0xd9/0x6d0
[  274.151072][ T4918]  ? __kasan_check_write+0x14/0x20
[  274.156205][ T4918]  ? fput_many+0x15a/0x1a0
[  274.160626][ T4918]  ? do_sys_open+0xe0/0xe0
[  274.165049][ T4918]  ? fput+0x1a/0x20
[  274.168862][ T4918]  ? ksys_write+0x1eb/0x240
[  274.173369][ T4918]  ? __ia32_sys_read+0x90/0x90
[  274.178137][ T4918]  ? fpu__clear_all+0x20/0x20
[  274.182824][ T4918]  __x64_sys_openat+0x136/0x160
[  274.187676][ T4918]  do_syscall_64+0x31/0x40
[  274.192108][ T4918]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  274.198007][ T4918] RIP: 0033:0x7f2f696ac929
[  274.202432][ T4918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.222044][ T4918] RSP: 002b:00007f2f67cd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  274.230463][ T4918] RAX: ffffffffffffffda RBX: 00007f2f698d4160 RCX: 00007f2f696ac929
[  274.238437][ T4918] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  274.246409][ T4918] RBP: 00007f2f67cd3090 R08: 0000000000000000 R09: 0000000000000000
[  274.254378][ T4918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.262353][ T4918] R13: 0000000000000000 R14: 00007f2f698d4160 R15: 00007fff589d2ca8
[  274.453318][   T51] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  274.517294][   T51] smsc95xx: probe of 8-1:0.67 failed with error -71
[  274.529359][   T51] usb 8-1: USB disconnect, device number 8
[  274.535915][ T4922] ------------[ cut here ]------------
[  274.543466][ T4922] WARNING: CPU: 0 PID: 4922 at fs/sysfs/group.c:116 internal_create_group+0xe4/0xcf0
[  274.567799][ T4922] Modules linked in:
[  274.571737][ T4922] CPU: 1 PID: 4922 Comm: syz.3.1296 Tainted: G        W         5.10.238-syzkaller-00008-g59e9a7228857 #0
[  274.584910][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  274.596104][ T4922] RIP: 0010:internal_create_group+0xe4/0xcf0
[  274.602392][ T4922] Code: 00 74 08 48 89 df e8 6b c0 d7 ff 48 8b 03 83 7c 24 1c 00 74 22 48 85 c0 0f 84 ef 0b 00 00 e8 f3 cf 9d ff eb 20 e8 ec cf 9d ff <0f> 0b 41 be ea ff ff ff e9 40 0b 00 00 48 85 c0 0f 84 dd 0b 00 00
[  274.622481][ T4922] RSP: 0000:ffffc90000ed7140 EFLAGS: 00010287
[  274.628572][ T4922] RAX: ffffffff81c5d01c RBX: ffff888126d04098 RCX: 0000000000080000
[  274.636748][ T4922] RDX: ffffc9000187a000 RSI: 00000000000056ae RDI: 00000000000056af
[  274.644759][ T4922] RBP: ffffc90000ed7248 R08: dffffc0000000000 R09: ffffed102157e9d4
[  274.652828][ T4922] R10: ffffed102157e9d4 R11: 1ffff1102157e9d3 R12: 1ffff920001dae38
[  274.660833][ T4922] R13: dffffc0000000000 R14: ffffffff866335e0 R15: 1ffff11024da0813
[  274.668865][ T4922] FS:  00007f67d06826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  274.677812][ T4922] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  274.684392][ T4922] CR2: 00007fe0e8348000 CR3: 0000000122eea000 CR4: 00000000003506b0
[  274.692422][ T4922] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  274.700410][ T4922] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  274.708422][ T4922] Call Trace:
[  274.711709][ T4922]  ? rt_mutex_setprio+0xb40/0xb40
[  274.716757][ T4922]  ? sysfs_create_group+0x30/0x30
[  274.721793][ T4922]  ? __kasan_check_write+0x14/0x20
[  274.726967][ T4922]  sysfs_create_group+0x1f/0x30
[  274.731827][ T4922]  loop_configure+0xc2f/0x1260
[  274.736577][ T4922]  lo_ioctl+0x76d/0x1a80
[  274.740873][ T4922]  ? lo_release+0x1f0/0x1f0
[  274.745369][ T4922]  ? 0xffffffffa0034000
[  274.749503][ T4922]  ? is_bpf_text_address+0x177/0x190
[  274.754809][ T4922]  ? __kernel_text_address+0xa0/0x100
[  274.760236][ T4922]  ? unwind_get_return_address+0x4d/0x90
[  274.765856][ T4922]  ? stack_trace_save+0xe0/0xe0
[  274.770845][ T4922]  ? arch_stack_walk+0xee/0x140
[  274.775809][ T4922]  ? __kasan_check_write+0x14/0x20
[  274.781091][ T4922]  ? kobject_get_unless_zero+0x15e/0x1e0
[  274.786773][ T4922]  ? __kobject_del+0x2f0/0x2f0
[  274.791576][ T4922]  ? __kasan_check_write+0x14/0x20
[  274.796740][ T4922]  ? mutex_lock+0x8c/0xe0
[  274.801059][ T4922]  ? mutex_trylock+0xa0/0xa0
[  274.805635][ T4922]  ? bdev_check_media_change+0x350/0x350
[  274.811293][ T4922]  ? __kasan_check_write+0x14/0x20
[  274.816461][ T4922]  ? bdev_check_media_change+0x350/0x350
[  274.822078][ T4922]  ? __kasan_check_write+0x14/0x20
[  274.827203][ T4922]  ? _raw_spin_lock+0x8e/0xe0
[  274.831892][ T4922]  ? _raw_spin_trylock_bh+0x130/0x130
[  274.837340][ T4922]  ? __kasan_check_write+0x14/0x20
[  274.842459][ T4922]  ? __kasan_check_write+0x14/0x20
[  274.848339][ T4922]  ? __kasan_check_write+0x14/0x20
[  274.853993][ T4922]  ? disk_unblock_events+0x51/0x60
[  274.859092][ T4922]  ? 0xffffffffa0034000
[  274.863285][ T4922]  ? is_bpf_text_address+0x177/0x190
[  274.868595][ T4922]  ? __kernel_text_address+0xa0/0x100
[  274.874061][ T4922]  ? unwind_get_return_address+0x4d/0x90
[  274.879833][ T4922]  ? stack_trace_save+0xe0/0xe0
[  274.884754][ T4922]  ? arch_stack_walk+0xee/0x140
[  274.889602][ T4922]  ? memcpy+0x56/0x70
[  274.893739][ T4922]  ? avc_has_extended_perms+0x7f0/0xc30
[  274.899298][ T4922]  ? avc_ss_reset+0x280/0x280
[  274.903973][ T4922]  ? kasan_set_track+0x5b/0x70
[  274.908811][ T4922]  ? __kasan_slab_free+0x11/0x20
[  274.913736][ T4922]  ? slab_free_freelist_hook+0xc5/0x190
[  274.919297][ T4922]  ? kmem_cache_free+0x100/0x2d0
[  274.924233][ T4922]  ? putname+0xfe/0x150
[  274.928463][ T4922]  ? do_sys_openat2+0x207/0x6d0
[  274.933318][ T4922]  ? blkdev_common_ioctl+0xf90/0x1a80
[  274.938698][ T4922]  ? blkdev_bszset+0x1e0/0x1e0
[  274.943465][ T4922]  ? do_vfs_ioctl+0x766/0x1510
[  274.948308][ T4922]  ? __ia32_compat_sys_ioctl+0x7b0/0x7b0
[  274.953928][ T4922]  ? has_cap_mac_admin+0x330/0x330
[  274.959051][ T4922]  ? __kasan_slab_free+0x11/0x20
[  274.963985][ T4922]  ? slab_free_freelist_hook+0xc5/0x190
[  274.969603][ T4922]  ? putname+0xfe/0x150
[  274.973806][ T4922]  ? kmem_cache_free+0x100/0x2d0
[  274.978751][ T4922]  ? selinux_file_ioctl+0x377/0x480
[  274.984049][ T4922]  ? lo_release+0x1f0/0x1f0
[  274.988547][ T4922]  blkdev_ioctl+0x2d2/0x5b0
[  274.993072][ T4922]  ? blkdev_compat_ptr_ioctl+0xc0/0xc0
[  274.998539][ T4922]  ? __fget_files+0x2c4/0x320
[  275.003313][ T4922]  block_ioctl+0xae/0x100
[  275.007629][ T4922]  ? blkdev_iopoll+0x100/0x100
[  275.012398][ T4922]  __se_sys_ioctl+0x121/0x1a0
[  275.017075][ T4922]  __x64_sys_ioctl+0x7b/0x90
[  275.021740][ T4922]  do_syscall_64+0x31/0x40
[  275.026155][ T4922]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  275.032084][ T4922] RIP: 0033:0x7f67d201952b
[  275.036497][ T4922] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  275.056216][ T4922] RSP: 002b:00007f67d0681dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  275.064657][ T4922] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f67d201952b
[  275.072693][ T4922] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004
[  275.080674][ T4922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000453
[  275.088712][ T4922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  275.096693][ T4922] R13: 00007f67d0681ef0 R14: 00007f67d0681eb0 R15: 00007f67c8262000
[  275.104716][ T4922] ---[ end trace 12ab8701694640b3 ]---
[  275.207421][ T4922] EXT4-fs (loop1048579): Ignoring removed nobh option
[  275.215919][ T4922] EXT4-fs (loop1048579): Cannot turn on journaled quota: type 0: error -2
[  275.224657][ T4922] EXT4-fs error (device loop1048579): ext4_free_branches:1026: inode #13: comm syz.3.1296: invalid indirect mapped block 2683928664 (level 1)
[  275.257218][ T4922] EXT4-fs (loop1048579): 1 truncate cleaned up
[  275.263756][ T4922] EXT4-fs (loop1048579): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nojournal_checksum,acl,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue
[  275.297953][ T4931] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  275.340086][ T4920] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  275.390809][ T4920] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  275.437827][ T4922] EXT4-fs error (device loop1048579): ext4_find_dest_de:2079: inode #2: block 13: comm syz.3.1296: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  275.466537][ T4935] FAULT_INJECTION: forcing a failure.
[  275.466537][ T4935] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  275.477368][ T4920] F2FS-fs (loop4): invalid crc value
[  275.490322][ T4934] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.493407][ T4935] CPU: 0 PID: 4935 Comm: syz.7.1300 Tainted: G        W         5.10.238-syzkaller-00008-g59e9a7228857 #0
[  275.505249][ T4922] EXT4-fs error (device loop1048579): ext4_find_dest_de:2079: inode #2: block 13: comm syz.3.1296: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  275.508200][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  275.508206][ T4935] Call Trace:
[  275.508232][ T4935]  __dump_stack+0x21/0x24
[  275.535643][ T4920] F2FS-fs (loop4): Found nat_bits in checkpoint
[  275.538076][ T4935]  dump_stack_lvl+0x169/0x1d8
[  275.538087][ T4935]  ? thaw_kernel_threads+0x220/0x220
[  275.538107][ T4935]  ? vsnprintf+0x1871/0x1960
[  275.564392][ T4920] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  275.566438][ T4935]  ? show_regs_print_info+0x18/0x18
[  275.573535][ T4920] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  275.578615][ T4935]  dump_stack+0x15/0x1c
[  275.578626][ T4935]  should_fail+0x3c1/0x510
[  275.578637][ T4935]  should_fail_usercopy+0x1a/0x20
[  275.578649][ T4935]  _copy_to_user+0x20/0x90
[  275.578660][ T4935]  simple_read_from_buffer+0xe9/0x160
[  275.578671][ T4935]  proc_fail_nth_read+0x19a/0x210
[  275.578681][ T4935]  ? proc_fault_inject_write+0x2f0/0x2f0
[  275.578693][ T4935]  ? rw_verify_area+0x1c0/0x360
[  275.578703][ T4935]  ? proc_fault_inject_write+0x2f0/0x2f0
[  275.578713][ T4935]  vfs_read+0x1fe/0xa10
[  275.578724][ T4935]  ? kernel_read+0x70/0x70
[  275.578736][ T4935]  ? __kasan_check_write+0x14/0x20
[  275.578746][ T4935]  ? mutex_lock+0x8c/0xe0
[  275.578755][ T4935]  ? mutex_trylock+0xa0/0xa0
[  275.578765][ T4935]  ? __fget_files+0x2c4/0x320
[  275.578777][ T4935]  ? __fdget_pos+0x2d2/0x380
[  275.578785][ T4935]  ? ksys_read+0x71/0x240
[  275.578795][ T4935]  ksys_read+0x140/0x240
[  275.578824][ T4935]  ? vfs_write+0xd60/0xd60
[  275.578842][ T4935]  __x64_sys_read+0x7b/0x90
[  275.679797][ T4935]  do_syscall_64+0x31/0x40
[  275.684191][ T4935]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  275.690059][ T4935] RIP: 0033:0x7ffaedfa033c
[  275.694456][ T4935] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  275.714046][ T4935] RSP: 002b:00007ffaec60a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  275.722442][ T4935] RAX: ffffffffffffffda RBX: 00007ffaee1c8fa0 RCX: 00007ffaedfa033c
[  275.730401][ T4935] RDX: 000000000000000f RSI: 00007ffaec60a0a0 RDI: 0000000000000003
[  275.738360][ T4935] RBP: 00007ffaec60a090 R08: 0000000000000000 R09: 0000000000000002
[  275.746321][ T4935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.754281][ T4935] R13: 0000000000000001 R14: 00007ffaee1c8fa0 R15: 00007fff2ab5fa08
[  275.764074][ T4932] tipc: Resetting bearer <eth:syzkaller0>
[  275.770880][  T351] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  275.783164][  T351] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  275.788120][ T4932] tipc: Disabling bearer <eth:syzkaller0>
[  275.815438][ T4943] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  275.994662][ T4941] overlayfs: unrecognized mount option "uuid=null" or missing value
[  276.024150][ T4946] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  276.037847][ T4946] EXT4-fs (loop8): mounted filesystem without journal. Opts: commit=0x0000000000000005,inode_readahead_blks=0x0000000000000800,usrjquota=,nomblk_io_submit,,errors=continue
[  276.055314][ T4946] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  276.169739][ T4963] xt_hashlimit: size too large, truncated to 1048576
[  276.372820][ T4969] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1309'.
[  276.439461][   T24] kauditd_printk_skb: 30 callbacks suppressed
[  276.439474][   T24] audit: type=1400 audit(1751669483.643:3491): avc:  denied  { write } for  pid=4970 comm="syz.9.1311" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  276.468560][   T51] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  276.494969][ T4971] netlink: 23 bytes leftover after parsing attributes in process `syz.9.1311'.
[  276.753668][   T51] usb 8-1: Using ep0 maxpacket: 32
[  276.865547][  T650] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  276.893944][   T51] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[  277.043816][ T4977] EXT4-fs (loop9): Ignoring removed mblk_io_submit option
[  277.051029][ T4977] EXT4-fs (loop9): Test dummy encryption mode enabled
[  277.062644][   T51] usb 8-1: config 0 has no interface number 0
[  277.068970][ T4977] EXT4-fs (loop9): Ignoring removed oldalloc option
[  277.075827][   T51] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  277.086118][ T4977] EXT4-fs (loop9): Ignoring removed mblk_io_submit option
[  277.098405][ T4977] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  277.098546][   T51] usb 8-1: config 0 interface 196 has no altsetting 0
[  277.115339][   T24] audit: type=1326 audit(1751669484.362:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4985 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0d42929 code=0x7ffc0000
[  277.128114][ T4977] EXT4-fs (loop9): 1 truncate cleaned up
[  277.142996][   T24] audit: type=1326 audit(1751669484.394:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4985 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0f0d42929 code=0x7ffc0000
[  277.144446][ T4977] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,nodelalloc,test_dummy_encryption=v1,oldalloc,mblk_io_submit,nogrpid,
[  277.167896][   T24] audit: type=1326 audit(1751669484.394:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4985 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0d42929 code=0x7ffc0000
[  277.207988][   T24] audit: type=1326 audit(1751669484.394:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4985 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe0f0d42929 code=0x7ffc0000
[  277.232219][   T24] audit: type=1326 audit(1751669484.394:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4985 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0d42929 code=0x7ffc0000
[  277.255849][   T24] audit: type=1326 audit(1751669484.394:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4985 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f0d42929 code=0x7ffc0000
[  277.279480][   T24] audit: type=1326 audit(1751669484.394:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4985 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0d42929 code=0x7ffc0000
[  277.303144][   T24] audit: type=1326 audit(1751669484.394:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4985 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fe0f0d42929 code=0x7ffc0000
[  277.326999][   T24] audit: type=1326 audit(1751669484.394:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4985 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0d42929 code=0x7ffc0000
[  277.332112][  T650] usb 4-1: Using ep0 maxpacket: 16
[  277.378682][   T51] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  277.387891][   T51] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.395905][   T51] usb 8-1: Product: syz
[  277.400242][   T51] usb 8-1: Manufacturer: syz
[  277.404840][   T51] usb 8-1: SerialNumber: syz
[  277.413511][   T51] usb 8-1: config 0 descriptor??
[  277.443634][ T4961] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  277.503406][ T4992] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option
[  277.510603][  T650] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.521650][ T4405] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  277.529292][  T650] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  277.539342][  T650] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x30, skipping
[  277.550741][  T650] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  277.566273][ T4992] EXT4-fs (loop9): mounted filesystem without journal. Opts: commit=0x0000000000000005,inode_readahead_blks=0x0000000000000800,usrjquota=,nomblk_io_submit,,errors=continue
[  277.583532][ T4992] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  277.630286][  T650] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  277.640494][  T650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  277.671580][ T4997] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  277.688451][  T650] usb 4-1: SerialNumber: syz
[  277.714159][ T4975] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  277.778830][ T4405] usb 5-1: device descriptor read/64, error -71
[  277.791425][ T4999] xt_hashlimit: size too large, truncated to 1048576
[  277.946735][   T51] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  277.955912][   T51] ipheth: probe of 8-1:0.196 failed with error -22
[  277.998817][   T51] usb 4-1: USB disconnect, device number 28
[  278.020005][ T5001] overlayfs: unrecognized mount option "uuid=off" or missing value
[  278.143583][  T650] usb 8-1: USB disconnect, device number 9
[  278.170291][ T4405] usb 5-1: device descriptor read/64, error -71
[  278.435439][ T4405] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  278.715699][ T5017] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  278.756547][ T5021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.764127][ T5020] tipc: Resetting bearer <eth:syzkaller0>
[  278.777250][ T5020] tipc: Disabling bearer <eth:syzkaller0>
[  278.794718][ T4405] usb 5-1: device descriptor read/64, error -71
[  278.939449][ T5023] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,bsddf,,errors=continue
[  278.949966][ T5023] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  278.965663][ T5023] fscrypt (loop7, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS
[  279.229879][ T5029] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,,errors=continue
[  279.240042][ T5029] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.264340][ T4405] usb 5-1: device descriptor read/64, error -71
[  279.264374][   T51] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  279.410195][ T4405] usb usb5-port1: attempt power cycle
[  279.615095][   T51] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.654215][   T51] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  279.823903][   T51] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.832363][   T51] usb 8-1: config 0 descriptor??
[  279.912064][ T4405] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  280.259981][ T5037] overlayfs: unrecognized mount option "uuid=null" or missing value
[  280.813292][ T4405] usb 5-1: device not accepting address 21, error -71
[  280.855167][   T51] usbhid 8-1:0.0: can't add hid device: -71
[  280.870760][   T51] usbhid: probe of 8-1:0.0 failed with error -71
[  280.977062][   T51] usb 8-1: USB disconnect, device number 10
[  281.195074][ T5058] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue
[  281.205229][ T5058] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.005107][ T5068] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  282.110167][ T5070] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  282.585420][ T5080] ------------[ cut here ]------------
[  282.591452][ T5080] WARNING: CPU: 1 PID: 5080 at fs/sysfs/group.c:116 internal_create_group+0xe4/0xcf0
[  282.610186][ T5080] Modules linked in:
[  282.614301][ T5080] CPU: 1 PID: 5080 Comm: syz.3.1344 Tainted: G        W         5.10.238-syzkaller-00008-g59e9a7228857 #0
[  282.625891][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  282.636092][ T5080] RIP: 0010:internal_create_group+0xe4/0xcf0
[  282.642092][ T5080] Code: 00 74 08 48 89 df e8 6b c0 d7 ff 48 8b 03 83 7c 24 1c 00 74 22 48 85 c0 0f 84 ef 0b 00 00 e8 f3 cf 9d ff eb 20 e8 ec cf 9d ff <0f> 0b 41 be ea ff ff ff e9 40 0b 00 00 48 85 c0 0f 84 dd 0b 00 00
[  282.661787][ T5080] RSP: 0018:ffffc9000103f140 EFLAGS: 00010283
[  282.667908][ T5080] RAX: ffffffff81c5d01c RBX: ffff888126d04098 RCX: 0000000000080000
[  282.676185][ T5080] RDX: ffffc9000187a000 RSI: 000000000000c451 RDI: 000000000000c452
[  282.684275][ T5080] RBP: ffffc9000103f248 R08: dffffc0000000000 R09: ffffed102157e9d4
[  282.692374][ T5080] R10: ffffed102157e9d4 R11: 1ffff1102157e9d3 R12: 1ffff92000207e38
[  282.700532][ T5080] R13: dffffc0000000000 R14: ffffffff866335e0 R15: 1ffff11024da0813
[  282.708637][ T5080] FS:  00007f67d06826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  282.717848][ T5080] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  282.724682][ T5080] CR2: 0000000000000000 CR3: 0000000120266000 CR4: 00000000003506b0
[  282.732860][ T5080] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006
[  282.741246][ T5080] DR3: 0000000000000006 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  282.749810][ T5080] Call Trace:
[  282.753174][ T5080]  ? irqentry_exit+0x56/0x60
[  282.758136][ T5080]  ? sysvec_reschedule_ipi+0x69/0x70
[  282.763594][ T5080]  ? asm_sysvec_reschedule_ipi+0x12/0x20
[  282.769507][ T5080]  ? sysfs_create_group+0x30/0x30
[  282.775579][ T5080]  ? __kasan_check_write+0x14/0x20
[  282.780962][ T5080]  sysfs_create_group+0x1f/0x30
[  282.785939][ T5080]  loop_configure+0xc2f/0x1260
[  282.790711][ T5080]  lo_ioctl+0x76d/0x1a80
[  282.795313][ T5080]  ? __this_cpu_preempt_check+0x13/0x20
[  282.800870][ T5080]  ? _raw_spin_unlock_irq+0x4e/0x70
[  282.806330][ T5080]  ? lo_release+0x1f0/0x1f0
[  282.810892][ T5080]  ? __switch_to_asm+0x34/0x60
[  282.815787][ T5080]  ? __kasan_check_write+0x14/0x20
[  282.820917][ T5080]  ? __switch_to+0x50f/0xfc0
[  282.825662][ T5080]  ? dev_map_hash_lookup_elem+0xac/0x180
[  282.831410][ T5080]  ? bpf_trace_run3+0xd0/0x230
[  282.836231][ T5080]  ? compat_start_thread+0x80/0x80
[  282.841406][ T5080]  ? bpf_trace_run2+0x200/0x200
[  282.846296][ T5080]  ? __this_cpu_preempt_check+0x13/0x20
[  282.851936][ T5080]  ? __kasan_check_write+0x14/0x20
[  282.857066][ T5080]  ? __switch_to+0x50f/0xfc0
[  282.861814][ T5080]  ? dev_map_hash_lookup_elem+0xac/0x180
[  282.867495][ T5080]  ? cmp_ex_search+0x1e/0x80
[  282.872195][ T5080]  ? bsearch+0x96/0xc0
[  282.876294][ T5080]  ? search_extable+0xd0/0xd0
[  282.881074][ T5080]  ? strncpy_from_user+0x20d/0x2e0
[  282.886221][ T5080]  ? search_extable+0x8c/0xd0
[  282.891008][ T5080]  ? trim_init_extable+0x3e0/0x3e0
[  282.896220][ T5080]  ? strncpy_from_user+0x20d/0x2e0
[  282.901347][ T5080]  ? __this_cpu_preempt_check+0x13/0x20
[  282.906970][ T5080]  ? tracing_record_taskinfo_sched_switch+0x80/0x3a0
[  282.913665][ T5080]  ? strncpy_from_user+0x20d/0x2e0
[  282.918824][ T5080]  ? ex_handler_uaccess+0x41/0xc0
[  282.923978][ T5080]  ? fixup_exception+0x92/0xd0
[  282.928757][ T5080]  ? no_context+0x108/0xb60
[  282.933309][ T5080]  ? is_prefetch+0x490/0x490
[  282.937939][ T5080]  ? __kasan_check_read+0x11/0x20
[  282.943045][ T5080]  ? preempt_schedule_irq+0xbb/0x110
[  282.948369][ T5080]  ? __bad_area_nosemaphore+0x9c/0x420
[  282.953890][ T5080]  ? __kasan_check_write+0x14/0x20
[  282.960938][ T5080]  ? __switch_to+0x50f/0xfc0
[  282.965611][ T5080]  ? dev_map_hash_lookup_elem+0xac/0x180
[  282.971581][ T5080]  ? __kasan_check_write+0x14/0x20
[  282.976701][ T5080]  ? __switch_to+0x50f/0xfc0
[  282.981494][ T5080]  ? dev_map_hash_lookup_elem+0xac/0x180
[  282.987137][ T5080]  ? bpf_trace_run3+0xd0/0x230
[  282.992074][ T5080]  ? compat_start_thread+0x80/0x80
[  282.997275][ T5080]  ? bpf_trace_run2+0x200/0x200
[  283.002315][ T5080]  ? native_set_ldt+0x370/0x370
[  283.007170][ T5080]  ? __this_cpu_preempt_check+0x13/0x20
[  283.012838][ T5080]  ? tracing_record_taskinfo_sched_switch+0x80/0x3a0
[  283.019583][ T5080]  ? release_firmware_map_entry+0x190/0x190
[  283.025596][ T5080]  ? blkdev_common_ioctl+0xf90/0x1a80
[  283.031022][ T5080]  ? __kasan_check_read+0x11/0x20
[  283.036491][ T5080]  ? preempt_schedule_irq+0xbb/0x110
[  283.041830][ T5080]  ? preempt_schedule_notrace+0x110/0x110
[  283.047637][ T5080]  ? irqentry_exit+0x56/0x60
[  283.052224][ T5080]  ? sysvec_reschedule_ipi+0x69/0x70
[  283.057639][ T5080]  ? asm_sysvec_reschedule_ipi+0x12/0x20
[  283.063258][ T5080]  ? lo_release+0x1f0/0x1f0
[  283.067798][ T5080]  ? blkdev_ioctl+0x2c3/0x5b0
[  283.072484][ T5080]  ? lo_release+0x1f0/0x1f0
[  283.077106][ T5080]  blkdev_ioctl+0x2d2/0x5b0
[  283.081614][ T5080]  ? asm_sysvec_reschedule_ipi+0x12/0x20
[  283.087253][ T5080]  ? blkdev_compat_ptr_ioctl+0xc0/0xc0
[  283.092791][ T5080]  block_ioctl+0xae/0x100
[  283.097107][ T5080]  ? blkdev_iopoll+0x100/0x100
[  283.101879][ T5080]  __se_sys_ioctl+0x121/0x1a0
[  283.106554][ T5080]  __x64_sys_ioctl+0x7b/0x90
[  283.111239][ T5080]  do_syscall_64+0x31/0x40
[  283.115671][ T5080]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  283.121732][ T5080] RIP: 0033:0x7f67d201952b
[  283.126157][ T5080] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  283.145867][ T5080] RSP: 002b:00007f67d0681dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  283.154626][ T5080] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f67d201952b
[  283.162908][ T5080] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004
[  283.170908][ T5080] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000047f
[  283.178972][ T5080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  283.186977][ T5080] R13: 00007f67d0681ef0 R14: 00007f67d0681eb0 R15: 00007f67c8262000
[  283.195124][ T5080] ---[ end trace 12ab8701694640b4 ]---
[  283.250837][   T24] kauditd_printk_skb: 41 callbacks suppressed
[  283.250849][   T24] audit: type=1400 audit(1751669490.950:3542): avc:  denied  { remount } for  pid=5079 comm="syz.3.1344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  283.465790][ T1312] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  283.473645][ T5088] overlayfs: unrecognized mount option "uuid=null" or missing value
[  283.492823][ T5093] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(15) root(3)
[  283.500698][ T5093] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  283.510419][ T5093] F2FS-fs (loop4): invalid crc value
[  283.542520][ T5093] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045588246331391)
[  283.568480][ T5093] F2FS-fs (loop4): Start checkpoint disabled!
[  283.574706][ T5093] attempt to access beyond end of device
[  283.574706][ T5093] loop4: rw=2049, want=40968, limit=40427
[  283.659313][ T5102] syz.8.1350[5102] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  283.659583][ T5102] syz.8.1350[5102] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  283.793553][ T5102] EXT4-fs (loop8): Ignoring removed bh option
[  283.811497][ T5102] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  283.844119][ T5102] EXT4-fs (loop8): 1 truncate cleaned up
[  283.849897][ T5102] EXT4-fs (loop8): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,bh,min_batch_time=0x0000000000000004,,errors=continue
[  284.647687][ T5115] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.698677][ T5119] FAULT_INJECTION: forcing a failure.
[  284.698677][ T5119] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  284.712087][ T5119] CPU: 1 PID: 5119 Comm: syz.8.1356 Tainted: G        W         5.10.238-syzkaller-00008-g59e9a7228857 #0
[  284.723374][ T5119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  284.733436][ T5119] Call Trace:
[  284.736735][ T5119]  __dump_stack+0x21/0x24
[  284.741064][ T5119]  dump_stack_lvl+0x169/0x1d8
[  284.745740][ T5119]  ? thaw_kernel_threads+0x220/0x220
[  284.751021][ T5119]  ? vsnprintf+0x1871/0x1960
[  284.755607][ T5119]  ? show_regs_print_info+0x18/0x18
[  284.760807][ T5119]  dump_stack+0x15/0x1c
[  284.764964][ T5119]  should_fail+0x3c1/0x510
[  284.769383][ T5119]  should_fail_usercopy+0x1a/0x20
[  284.774407][ T5119]  _copy_to_user+0x20/0x90
[  284.778822][ T5119]  simple_read_from_buffer+0xe9/0x160
[  284.784196][ T5119]  proc_fail_nth_read+0x19a/0x210
[  284.789228][ T5119]  ? proc_fault_inject_write+0x2f0/0x2f0
[  284.794856][ T5119]  ? rw_verify_area+0x1c0/0x360
[  284.799714][ T5119]  ? proc_fault_inject_write+0x2f0/0x2f0
[  284.805343][ T5119]  vfs_read+0x1fe/0xa10
[  284.809500][ T5119]  ? kernel_read+0x70/0x70
[  284.813923][ T5119]  ? __kasan_check_write+0x14/0x20
[  284.819190][ T5119]  ? mutex_lock+0x8c/0xe0
[  284.823548][ T5119]  ? mutex_trylock+0xa0/0xa0
[  284.828148][ T5119]  ? __fget_files+0x2c4/0x320
[  284.832828][ T5119]  ? __fdget_pos+0x2d2/0x380
[  284.837425][ T5119]  ? ksys_read+0x71/0x240
[  284.841763][ T5119]  ksys_read+0x140/0x240
[  284.846017][ T5119]  ? vfs_write+0xd60/0xd60
[  284.850437][ T5119]  __x64_sys_read+0x7b/0x90
[  284.854945][ T5119]  do_syscall_64+0x31/0x40
[  284.859367][ T5119]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  284.865258][ T5119] RIP: 0033:0x7f2f696ab33c
[  284.869668][ T5119] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  284.889273][ T5119] RSP: 002b:00007f2f67d15030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  284.897694][ T5119] RAX: ffffffffffffffda RBX: 00007f2f698d3fa0 RCX: 00007f2f696ab33c
[  284.905657][ T5119] RDX: 000000000000000f RSI: 00007f2f67d150a0 RDI: 0000000000000004
[  284.913627][ T5119] RBP: 00007f2f67d15090 R08: 0000000000000000 R09: 0000000000000000
[  284.921594][ T5119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.929559][ T5119] R13: 0000000000000000 R14: 00007f2f698d3fa0 R15: 00007fff589d2ca8
[  284.963809][ T1312] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  284.973883][ T1312] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  285.017052][ T5114] FAT-fs (loop4): Unrecognized mount option "allow�OïLŒ;æ×È�(h_utime=00000000000000000177777" or missing value
[  285.058183][ T1312] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60
[  285.071412][ T1312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  285.090819][ T1312] usb 8-1: SerialNumber: syz
[  285.170738][ T5086] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  285.189068][ T1312] cdc_acm 8-1:1.0: Control and data interfaces are not separated!
[  285.197503][ T1312] cdc_acm: probe of 8-1:1.0 failed with error -12
[  285.259690][ T5107] ------------[ cut here ]------------
[  285.265305][ T5107] WARNING: CPU: 0 PID: 5107 at fs/sysfs/group.c:116 internal_create_group+0xe4/0xcf0
[  285.275222][ T5107] Modules linked in:
[  285.279190][ T5107] CPU: 0 PID: 5107 Comm: syz.3.1351 Tainted: G        W         5.10.238-syzkaller-00008-g59e9a7228857 #0
[  285.290790][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  285.301414][ T5107] RIP: 0010:internal_create_group+0xe4/0xcf0
[  285.307456][ T5107] Code: 00 74 08 48 89 df e8 6b c0 d7 ff 48 8b 03 83 7c 24 1c 00 74 22 48 85 c0 0f 84 ef 0b 00 00 e8 f3 cf 9d ff eb 20 e8 ec cf 9d ff <0f> 0b 41 be ea ff ff ff e9 40 0b 00 00 48 85 c0 0f 84 dd 0b 00 00
[  285.327996][ T5107] RSP: 0018:ffffc90000f6f140 EFLAGS: 00010246
[  285.334228][ T5107] RAX: ffffffff81c5d01c RBX: ffff888126d04098 RCX: 0000000000080000
[  285.342383][ T5107] RDX: ffffc90001c7b000 RSI: 000000000007ffff RDI: 0000000000080000
[  285.350492][ T5107] RBP: ffffc90000f6f248 R08: dffffc0000000000 R09: ffffed102157e9d4
[  285.358620][ T5107] R10: ffffed102157e9d4 R11: 1ffff1102157e9d3 R12: 1ffff920001ede38
[  285.366737][ T5107] R13: dffffc0000000000 R14: ffffffff866335e0 R15: 1ffff11024da0813
[  285.374725][ T5107] FS:  00007f67d06616c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  285.387197][ T5107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  285.393809][ T5107] CR2: 00007f2f67cf3f98 CR3: 0000000124ffa000 CR4: 00000000003506b0
[  285.407067][ T1312] usb 8-1: USB disconnect, device number 11
[  285.418656][ T5107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  285.426882][ T5110] tipc: Resetting bearer <eth:syzkaller0>
[  285.426909][ T5107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  285.441045][ T5107] Call Trace:
[  285.446364][ T5107]  ? rt_mutex_setprio+0xb40/0xb40
[  285.452840][ T5110] tipc: Disabling bearer <eth:syzkaller0>
[  285.458660][ T5107]  ? sysfs_create_group+0x30/0x30
[  285.464483][ T5107]  ? __kasan_check_write+0x14/0x20
[  285.469785][ T5107]  sysfs_create_group+0x1f/0x30
[  285.474659][ T5107]  loop_configure+0xc2f/0x1260
[  285.479629][ T5107]  lo_ioctl+0x76d/0x1a80
[  285.483885][ T5107]  ? lo_release+0x1f0/0x1f0
[  285.488580][ T5107]  ? is_bpf_text_address+0x177/0x190
[  285.493876][ T5107]  ? __kernel_text_address+0xa0/0x100
[  285.499869][ T5107]  ? unwind_get_return_address+0x4d/0x90
[  285.505511][ T5107]  ? stack_trace_save+0xe0/0xe0
[  285.510638][ T5107]  ? arch_stack_walk+0xee/0x140
[  285.515717][ T5107]  ? __kasan_check_write+0x14/0x20
[  285.520834][ T5107]  ? kobject_get_unless_zero+0x15e/0x1e0
[  285.526629][ T5107]  ? __kobject_del+0x2f0/0x2f0
[  285.531431][ T5107]  ? __kasan_check_write+0x14/0x20
[  285.536754][ T5107]  ? mutex_lock+0x8c/0xe0
[  285.541092][ T5107]  ? mutex_trylock+0xa0/0xa0
[  285.545716][ T5107]  ? bdev_check_media_change+0x350/0x350
[  285.551361][ T5107]  ? __kasan_check_write+0x14/0x20
[  285.556600][ T5107]  ? bdev_check_media_change+0x350/0x350
[  285.562394][ T5107]  ? __kasan_check_write+0x14/0x20
[  285.567516][ T5107]  ? _raw_spin_lock+0x8e/0xe0
[  285.572315][ T5107]  ? _raw_spin_trylock_bh+0x130/0x130
[  285.577739][ T5107]  ? __kasan_check_write+0x14/0x20
[  285.583759][ T5107]  ? __kasan_check_write+0x14/0x20
[  285.588901][ T5107]  ? __kasan_check_write+0x14/0x20
[  285.594329][ T5107]  ? disk_unblock_events+0x51/0x60
[  285.599603][ T5107]  ? is_bpf_text_address+0x177/0x190
[  285.604950][ T5107]  ? __kernel_text_address+0xa0/0x100
[  285.610403][ T5107]  ? unwind_get_return_address+0x4d/0x90
[  285.616047][ T5107]  ? stack_trace_save+0xe0/0xe0
[  285.621002][ T5107]  ? arch_stack_walk+0xee/0x140
[  285.625854][ T5107]  ? memcpy+0x56/0x70
[  285.629862][ T5107]  ? avc_has_extended_perms+0x7f0/0xc30
[  285.635416][ T5107]  ? avc_ss_reset+0x280/0x280
[  285.640160][ T5107]  ? kasan_set_track+0x5b/0x70
[  285.644924][ T5107]  ? __kasan_slab_free+0x11/0x20
[  285.649867][ T5107]  ? slab_free_freelist_hook+0xc5/0x190
[  285.655467][ T5107]  ? kmem_cache_free+0x100/0x2d0
[  285.660394][ T5107]  ? putname+0xfe/0x150
[  285.664559][ T5107]  ? do_sys_openat2+0x207/0x6d0
[  285.669410][ T5107]  ? blkdev_common_ioctl+0xf90/0x1a80
[  285.674839][ T5107]  ? blkdev_bszset+0x1e0/0x1e0
[  285.679595][ T5107]  ? do_vfs_ioctl+0x766/0x1510
[  285.684367][ T5107]  ? __ia32_compat_sys_ioctl+0x7b0/0x7b0
[  285.689991][ T5107]  ? has_cap_mac_admin+0x330/0x330
[  285.695194][ T5107]  ? putname+0xfe/0x150
[  285.699379][ T5107]  ? kmem_cache_free+0x2ac/0x2d0
[  285.704345][ T5107]  ? selinux_file_ioctl+0x377/0x480
[  285.709571][ T5107]  ? lo_release+0x1f0/0x1f0
[  285.714132][ T5107]  blkdev_ioctl+0x2d2/0x5b0
[  285.718636][ T5107]  ? blkdev_compat_ptr_ioctl+0xc0/0xc0
[  285.724271][ T5107]  ? __fget_files+0x2c4/0x320
[  285.728999][ T5107]  block_ioctl+0xae/0x100
[  285.733415][ T5107]  ? blkdev_iopoll+0x100/0x100
[  285.738174][ T5107]  __se_sys_ioctl+0x121/0x1a0
[  285.742859][ T5107]  __x64_sys_ioctl+0x7b/0x90
[  285.747452][ T5107]  do_syscall_64+0x31/0x40
[  285.751927][ T5107]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  285.757829][ T5107] RIP: 0033:0x7f67d201952b
[  285.762225][ T5107] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  285.781892][ T5107] RSP: 002b:00007f67d0660dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  285.790321][ T5107] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f67d201952b
[  285.798337][ T5107] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  285.806321][ T5107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000010597
[  285.814338][ T5107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  285.822322][ T5107] R13: 00007f67d0660ef0 R14: 00007f67d0660eb0 R15: 00007f67c8241000
[  285.830315][ T5107] ---[ end trace 12ab8701694640b5 ]---
[  285.848039][ T5107] F2FS-fs (loop1048579): Test dummy encryption mode enabled
[  285.873280][ T5107] F2FS-fs (loop1048579): invalid crc value
[  285.881990][ T5107] F2FS-fs (loop1048579): Current segment's next free block offset is inconsistent with bitmap, logtype:1, segno:1, type:0, next_blkoff:0, blkofs:1
[  285.897557][ T5107] F2FS-fs (loop1048579): Failed to initialize F2FS segment manager (-117)
[  286.176640][   T24] audit: type=1400 audit(1751669494.061:3543): avc:  denied  { ioctl } for  pid=5129 comm="syz.9.1360" path="socket:[34873]" dev="sockfs" ino=34873 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  286.573450][   T24] audit: type=1400 audit(1751669494.190:3544): avc:  denied  { map } for  pid=5146 comm="syz.7.1361" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.645839][ T5154] syz.7.1361[5154] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  286.645913][ T5154] syz.7.1361[5154] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  286.719974][ T5154] EXT4-fs (loop7): Ignoring removed bh option
[  286.745510][ T5154] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  286.765066][ T5154] EXT4-fs (loop7): 1 truncate cleaned up
[  286.770738][ T5154] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,bh,min_batch_time=0x0000000000000004,,errors=continue
[  286.836718][ T5154] EXT4-fs error (device loop7): __ext4_iget:5007: inode #12: block 2: comm syz.7.1361: invalid block
[  286.850978][ T5154] EXT4-fs error (device loop7): __ext4_iget:5007: inode #12: block 2: comm syz.7.1361: invalid block
[  286.863811][ T5154] EXT4-fs error (device loop7): __ext4_iget:5007: inode #12: block 2: comm syz.7.1361: invalid block
[  286.945746][ T5158] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1364'.
[  287.126394][ T5166] netlink: 'syz.4.1365': attribute type 12 has an invalid length.
[  287.136951][ T5166] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1365'.
[  287.184270][   T24] audit: type=1400 audit(1751669495.166:3545): avc:  denied  { accept } for  pid=5172 comm="syz.8.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  287.208819][ T5173] IPv6: NLM_F_CREATE should be specified when creating new route
[  287.217367][ T5179] tipc: Started in network mode
[  287.222622][ T5179] tipc: Own node identity 52889834fbcf, cluster identity 4711
[  287.233517][ T5179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.243758][ T5170] tipc: Resetting bearer <eth:syzkaller0>
[  287.260803][ T5170] tipc: Disabling bearer <eth:syzkaller0>
[  287.268039][ T5176] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,delalloc,errors=remount-ro,
[  287.407854][ T5169] F2FS-fs (loop9): Mismatch start address, segment0(4294377984) cp_blkaddr(4294967295)
[  287.424619][ T5189] ------------[ cut here ]------------
[  287.430600][ T5189] WARNING: CPU: 1 PID: 5189 at fs/sysfs/group.c:116 internal_create_group+0xe4/0xcf0
[  287.431330][ T5173] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,init_itable=0x0000000000000001,quota,,errors=continue
[  287.440418][ T5189] Modules linked in:
[  287.460083][ T5189] CPU: 1 PID: 5189 Comm: syz.3.1372 Tainted: G        W         5.10.238-syzkaller-00008-g59e9a7228857 #0
[  287.472621][ T5169] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  287.485603][ T5173] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  287.520283][   T24] audit: type=1326 audit(1751669495.520:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaedfa1929 code=0x7ffc0000
[  287.544962][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  287.556975][ T5169] F2FS-fs (loop9): invalid crc value
[  287.562671][ T5169] F2FS-fs (loop9): invalid crc value
[  287.568976][ T5169] F2FS-fs (loop9): Failed to get valid F2FS checkpoint
[  287.579532][ T5189] RIP: 0010:internal_create_group+0xe4/0xcf0
[  287.586435][ T5189] Code: 00 74 08 48 89 df e8 6b c0 d7 ff 48 8b 03 83 7c 24 1c 00 74 22 48 85 c0 0f 84 ef 0b 00 00 e8 f3 cf 9d ff eb 20 e8 ec cf 9d ff <0f> 0b 41 be ea ff ff ff e9 40 0b 00 00 48 85 c0 0f 84 dd 0b 00 00
[  287.606892][   T24] audit: type=1326 audit(1751669495.520:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaedfa1929 code=0x7ffc0000
[  287.612975][ T5189] RSP: 0018:ffffc9000104f140 EFLAGS: 00010287
[  287.630645][   T24] audit: type=1326 audit(1751669495.520:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaedfa1929 code=0x7ffc0000
[  287.640549][ T5189] 
[  287.660377][   T24] audit: type=1326 audit(1751669495.520:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaedfa1929 code=0x7ffc0000
[  287.663094][ T5176] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  287.687209][   T24] audit: type=1326 audit(1751669495.520:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaedfa1929 code=0x7ffc0000
[  287.700557][ T5189] RAX: ffffffff81c5d01c RBX: ffff888126d04098 RCX: 0000000000080000
[  287.723831][   T24] audit: type=1326 audit(1751669495.520:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5175 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaedfa1929 code=0x7ffc0000
[  287.732140][ T5176] EXT4-fs (loop4): Remounting filesystem read-only
[  287.755275][ T5189] RDX: ffffc9000187a000 RSI: 0000000000003187 RDI: 0000000000003188
[  287.769884][ T5189] RBP: ffffc9000104f248 R08: dffffc0000000000 R09: ffffed102157e9d4
[  287.777968][ T5189] R10: ffffed102157e9d4 R11: 1ffff1102157e9d3 R12: 1ffff92000209e38
[  287.786124][ T5189] R13: dffffc0000000000 R14: ffffffff866335e0 R15: 1ffff11024da0813
[  287.794151][ T5189] FS:  00007f67d06826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  287.803172][ T5189] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  287.809808][ T5189] CR2: 0000000000000000 CR3: 0000000114768000 CR4: 00000000003506a0
[  287.818147][ T5189] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006
[  287.826337][ T5189] DR3: 0000000000000006 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  287.834430][ T5189] Call Trace:
[  287.837797][ T5189]  ? rt_mutex_setprio+0xb40/0xb40
[  287.842807][ T5189]  ? sysfs_create_group+0x30/0x30
[  287.847859][ T5189]  ? __kasan_check_write+0x14/0x20
[  287.852979][ T5189]  sysfs_create_group+0x1f/0x30
[  287.857927][ T5189]  loop_configure+0xc2f/0x1260
[  287.862682][ T5189]  lo_ioctl+0x76d/0x1a80
[  287.866948][ T5189]  ? lo_release+0x1f0/0x1f0
[  287.871446][ T5189]  ? 0xffffffffa0034000
[  287.875692][ T5189]  ? is_bpf_text_address+0x177/0x190
[  287.880990][ T5189]  ? __kernel_text_address+0xa0/0x100
[  287.886390][ T5189]  ? unwind_get_return_address+0x4d/0x90
[  287.892301][ T5189]  ? stack_trace_save+0xe0/0xe0
[  287.897232][ T5189]  ? arch_stack_walk+0xee/0x140
[  287.902150][ T5189]  ? __kasan_check_write+0x14/0x20
[  287.907300][ T5189]  ? kobject_get_unless_zero+0x15e/0x1e0
[  287.913049][ T5189]  ? __kobject_del+0x2f0/0x2f0
[  287.917817][ T5189]  ? __kasan_check_write+0x14/0x20
[  287.923075][ T5189]  ? mutex_lock+0x8c/0xe0
[  287.927421][ T5189]  ? mutex_trylock+0xa0/0xa0
[  287.932128][ T5189]  ? bdev_check_media_change+0x350/0x350
[  287.937760][ T5189]  ? __kasan_check_write+0x14/0x20
[  287.942885][ T5189]  ? bdev_check_media_change+0x350/0x350
[  287.948588][ T5189]  ? __kasan_check_write+0x14/0x20
[  287.953694][ T5189]  ? _raw_spin_lock+0x8e/0xe0
[  287.958417][ T5189]  ? _raw_spin_trylock_bh+0x130/0x130
[  287.964205][ T5189]  ? __kasan_check_write+0x14/0x20
[  287.970150][ T5189]  ? __kasan_check_write+0x14/0x20
[  287.975280][ T5189]  ? __kasan_check_write+0x14/0x20
[  287.980676][ T5189]  ? disk_unblock_events+0x51/0x60
[  287.985955][ T5189]  ? 0xffffffffa0034000
[  287.990122][ T5189]  ? is_bpf_text_address+0x177/0x190
[  287.995932][ T5189]  ? __kernel_text_address+0xa0/0x100
[  288.001450][ T5189]  ? unwind_get_return_address+0x4d/0x90
[  288.007153][ T5189]  ? stack_trace_save+0xe0/0xe0
[  288.012043][ T5189]  ? arch_stack_walk+0xee/0x140
[  288.017177][ T5189]  ? memcpy+0x56/0x70
[  288.021172][ T5189]  ? avc_has_extended_perms+0x7f0/0xc30
[  288.026768][ T5189]  ? avc_ss_reset+0x280/0x280
[  288.031449][ T5189]  ? kasan_set_track+0x5b/0x70
[  288.036419][ T5189]  ? __kasan_slab_free+0x11/0x20
[  288.041461][ T5189]  ? slab_free_freelist_hook+0xc5/0x190
[  288.047169][ T5189]  ? kmem_cache_free+0x100/0x2d0
[  288.052279][ T5189]  ? putname+0xfe/0x150
[  288.056441][ T5189]  ? do_sys_openat2+0x207/0x6d0
[  288.061369][ T5189]  ? blkdev_common_ioctl+0xf90/0x1a80
[  288.066736][ T5189]  ? blkdev_bszset+0x1e0/0x1e0
[  288.071510][ T5189]  ? do_vfs_ioctl+0x766/0x1510
[  288.076280][ T5189]  ? __ia32_compat_sys_ioctl+0x7b0/0x7b0
[  288.081958][ T5189]  ? has_cap_mac_admin+0x330/0x330
[  288.087068][ T5189]  ? __kasan_slab_free+0x11/0x20
[  288.092016][ T5189]  ? slab_free_freelist_hook+0xc5/0x190
[  288.097613][ T5189]  ? putname+0xfe/0x150
[  288.101750][ T5189]  ? kmem_cache_free+0x100/0x2d0
[  288.106693][ T5189]  ? selinux_file_ioctl+0x377/0x480
[  288.111892][ T5189]  ? lo_release+0x1f0/0x1f0
[  288.116446][ T5189]  blkdev_ioctl+0x2d2/0x5b0
[  288.120961][ T5189]  ? blkdev_compat_ptr_ioctl+0xc0/0xc0
[  288.126433][ T5189]  ? __fget_files+0x2c4/0x320
[  288.131123][ T5189]  block_ioctl+0xae/0x100
[  288.135500][ T5189]  ? blkdev_iopoll+0x100/0x100
[  288.140260][ T5189]  __se_sys_ioctl+0x121/0x1a0
[  288.145101][ T5189]  __x64_sys_ioctl+0x7b/0x90
[  288.149694][ T5189]  do_syscall_64+0x31/0x40
[  288.154202][ T5189]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  288.160094][ T5189] RIP: 0033:0x7f67d201952b
[  288.164541][ T5189] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  288.184210][ T5189] RSP: 002b:00007f67d0681dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  288.192641][ T5189] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f67d201952b
[  288.200673][ T5189] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  288.208642][ T5189] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001ea
[  288.216647][ T5189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  288.224669][ T5189] R13: 00007f67d0681ef0 R14: 00007f67d0681eb0 R15: 00007f67c8262000
[  288.232674][ T5189] ---[ end trace 12ab8701694640b6 ]---
[  288.292308][ T5173] EXT4-fs error (device loop8) in ext4_do_update_inode:5335: error 27
[  288.300823][ T5173] EXT4-fs error (device loop8): ext4_dirty_inode:6142: inode #2: comm syz.8.1370: mark_inode_dirty error
[  288.312502][ T5173] EXT4-fs error (device loop8) in ext4_do_update_inode:5335: error 27
[  288.320889][ T5173] EXT4-fs error (device loop8): __ext4_ext_dirty:182: inode #2: comm syz.8.1370: mark_inode_dirty error
[  288.336980][   T24] kauditd_printk_skb: 2 callbacks suppressed
[  288.336992][   T24] audit: type=1400 audit(1751669496.400:3554): avc:  denied  { name_bind } for  pid=5172 comm="syz.8.1370" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  288.364112][   T24] audit: type=1400 audit(1751669496.400:3555): avc:  denied  { node_bind } for  pid=5172 comm="syz.8.1370" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  288.386197][   T24] audit: type=1400 audit(1751669496.411:3556): avc:  denied  { mounton } for  pid=5172 comm="syz.8.1370" path="/48/bus/file0" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  288.726899][ T5189] overlayfs: unrecognized mount option "uuid=null" or missing value
[  289.895792][  T650] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  289.923214][ T5201] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,,errors=continue
[  289.933287][ T5201] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.951392][ T5209] ------------[ cut here ]------------
[  289.956955][ T5209] WARNING: CPU: 1 PID: 5209 at fs/sysfs/group.c:116 internal_create_group+0xe4/0xcf0
[  289.966492][ T5209] Modules linked in:
[  289.970483][ T5209] CPU: 1 PID: 5209 Comm: syz.3.1376 Tainted: G        W         5.10.238-syzkaller-00008-g59e9a7228857 #0
[  289.981814][ T5209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  289.991936][ T5209] RIP: 0010:internal_create_group+0xe4/0xcf0
[  289.997953][ T5209] Code: 00 74 08 48 89 df e8 6b c0 d7 ff 48 8b 03 83 7c 24 1c 00 74 22 48 85 c0 0f 84 ef 0b 00 00 e8 f3 cf 9d ff eb 20 e8 ec cf 9d ff <0f> 0b 41 be ea ff ff ff e9 40 0b 00 00 48 85 c0 0f 84 dd 0b 00 00
[  290.017752][ T5209] RSP: 0018:ffffc90000c17140 EFLAGS: 00010287
[  290.023871][ T5209] RAX: ffffffff81c5d01c RBX: ffff888126d04098 RCX: 0000000000080000
[  290.031886][ T5209] RDX: ffffc90002d91000 RSI: 000000000000622c RDI: 000000000000622d
[  290.039904][ T5209] RBP: ffffc90000c17248 R08: dffffc0000000000 R09: ffffed102157e9d4
[  290.047911][ T5209] R10: ffffed102157e9d4 R11: 1ffff1102157e9d3 R12: 1ffff92000182e38
[  290.055986][ T5209] R13: dffffc0000000000 R14: ffffffff866335e0 R15: 1ffff11024da0813
[  290.064035][ T5209] FS:  00007f67d06406c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  290.073008][ T5209] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  290.079650][ T5209] CR2: 00007fe5ac191e78 CR3: 000000010b017000 CR4: 00000000003506a0
[  290.087691][ T5209] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006
[  290.095717][ T5209] DR3: 0000000000000006 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  290.103724][ T5209] Call Trace:
[  290.107041][ T5209]  ? irqentry_exit+0x56/0x60
[  290.111671][ T5209]  ? sysvec_reschedule_ipi+0x69/0x70
[  290.116988][ T5209]  ? asm_sysvec_reschedule_ipi+0x12/0x20
[  290.122660][ T5209]  ? sysfs_create_group+0x30/0x30
[  290.127706][ T5209]  ? __loop_update_dio+0x460/0x610
[  290.132857][ T5209]  sysfs_create_group+0x1f/0x30
[  290.137733][ T5209]  loop_configure+0xc2f/0x1260
[  290.142545][ T5209]  lo_ioctl+0x76d/0x1a80
[  290.146815][ T5209]  ? _raw_spin_unlock_irq+0x4e/0x70
[  290.152059][ T5209]  ? finish_task_switch+0x12e/0x5a0
[  290.157296][ T5209]  ? lo_release+0x1f0/0x1f0
[  290.161820][ T5209]  ? _raw_spin_lock+0x8e/0xe0
[  290.166529][ T5209]  ? _raw_spin_trylock_bh+0x130/0x130
[  290.171928][ T5209]  ? __kasan_check_write+0x14/0x20
[  290.177080][ T5209]  ? __switch_to+0x50f/0xfc0
[  290.181690][ T5209]  ? plist_check_list+0x240/0x270
[  290.186744][ T5209]  ? compat_start_thread+0x80/0x80
[  290.191885][ T5209]  ? __kasan_check_write+0x14/0x20
[  290.197034][ T5209]  ? __switch_to+0x50f/0xfc0
[  290.201646][ T5209]  ? plist_check_list+0x240/0x270
[  290.206755][ T5209]  ? compat_start_thread+0x80/0x80
[  290.211892][ T5209]  ? plist_del+0x3df/0x3f0
[  290.216349][ T5209]  ? _raw_spin_unlock_irq+0x4e/0x70
[  290.221570][ T5209]  ? finish_task_switch+0x12e/0x5a0
[  290.226799][ T5209]  ? switch_mm_irqs_off+0x30c/0x9a0
[  290.232038][ T5209]  ? __switch_to_asm+0x34/0x60
[  290.236825][ T5209]  ? __schedule+0xb4f/0x1310
[  290.241450][ T5209]  ? release_firmware_map_entry+0x190/0x190
[  290.247364][ T5209]  ? release_firmware_map_entry+0x190/0x190
[  290.253293][ T5209]  ? __kasan_check_read+0x11/0x20
[  290.258341][ T5209]  ? preempt_schedule_irq+0xbb/0x110
[  290.263660][ T5209]  ? preempt_schedule_notrace+0x110/0x110
[  290.269414][ T5209]  ? __kasan_check_read+0x11/0x20
[  290.274455][ T5209]  ? preempt_schedule_irq+0xbb/0x110
[  290.279791][ T5209]  ? irqentry_exit+0x56/0x60
[  290.284403][ T5209]  ? sysvec_reschedule_ipi+0x69/0x70
[  290.289739][ T5209]  ? asm_sysvec_reschedule_ipi+0x12/0x20
[  290.295395][ T5209]  ? avc_has_extended_perms+0x132/0xc30
[  290.300980][ T5209]  ? __kasan_check_write+0x14/0x20
[  290.306129][ T5209]  ? __switch_to+0x50f/0xfc0
[  290.310742][ T5209]  ? plist_check_list+0x240/0x270
[  290.315814][ T5209]  ? compat_start_thread+0x80/0x80
[  290.320951][ T5209]  ? plist_del+0x3df/0x3f0
[  290.325447][ T5209]  ? blkdev_common_ioctl+0xf90/0x1a80
[  290.330839][ T5209]  ? blkdev_bszset+0x1e0/0x1e0
[  290.335637][ T5209]  ? preempt_schedule_irq+0xbb/0x110
[  290.340944][ T5209]  ? preempt_schedule_notrace+0x110/0x110
[  290.346704][ T5209]  ? __ia32_compat_sys_ioctl+0x7b0/0x7b0
[  290.352358][ T5209]  ? irqentry_exit+0x56/0x60
[  290.357454][ T5209]  ? sysvec_reschedule_ipi+0x69/0x70
[  290.362792][ T5209]  ? asm_sysvec_reschedule_ipi+0x12/0x20
[  290.368448][ T5209]  ? blkdev_ioctl+0x87/0x5b0
[  290.373090][ T5209]  ? __sanitizer_cov_trace_switch+0x54/0xe0
[  290.379015][ T5209]  ? lo_release+0x1f0/0x1f0
[  290.383556][ T5209]  blkdev_ioctl+0x2d2/0x5b0
[  290.388083][ T5209]  ? blkdev_compat_ptr_ioctl+0xc0/0xc0
[  290.393579][ T5209]  ? __fget_files+0x2c4/0x320
[  290.398486][ T5209]  block_ioctl+0xae/0x100
[  290.402859][ T5209]  ? blkdev_iopoll+0x100/0x100
[  290.407644][ T5209]  __se_sys_ioctl+0x121/0x1a0
[  290.412370][ T5209]  __x64_sys_ioctl+0x7b/0x90
[  290.416993][ T5209]  do_syscall_64+0x31/0x40
[  290.421447][ T5209]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  290.427379][ T5209] RIP: 0033:0x7f67d201952b
[  290.431815][ T5209] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  290.451454][ T5209] RSP: 002b:00007f67d063fdc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  290.459916][ T5209] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f67d201952b
[  290.467927][ T5209] RDX: 0000000000000008 RSI: 0000000000004c00 RDI: 0000000000000009
[  290.475953][ T5209] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000559
[  290.484042][ T5209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  290.492038][ T5209] R13: 00007f67d063fef0 R14: 00007f67d063feb0 R15: 00007f67c8220000
[  290.500056][ T5209] ---[ end trace 12ab8701694640b7 ]---
[  290.645416][ T5209] EXT4-fs (loop1048579): mounted filesystem without journal. Opts: nobarrier,,errors=continue
[  290.656157][ T5209] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.967260][  T650] usb 9-1: Using ep0 maxpacket: 32
[  290.993503][ T5216] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  291.138049][ T5225] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1379'.
[  291.210205][  T650] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.376416][  T650] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.396585][  T650] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  291.405693][  T650] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.414371][  T650] usb 9-1: config 0 descriptor??
[  291.440331][ T5231] syz.7.1380[5231] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  291.440390][ T5231] syz.7.1380[5231] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  291.471645][  T650] hub 9-1:0.0: USB hub found
[  291.488184][ T5231] EXT4-fs (loop7): Ignoring removed bh option
[  291.494364][ T5231] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  291.523352][ T5231] EXT4-fs (loop7): 1 truncate cleaned up
[  291.529077][ T5231] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,bh,min_batch_time=0x0000000000000004,,errors=continue
[  291.567006][ T5231] EXT4-fs error (device loop7): __ext4_iget:5007: inode #12: block 2: comm syz.7.1380: invalid block
[  291.578554][ T5231] EXT4-fs error (device loop7): __ext4_iget:5007: inode #12: block 2: comm syz.7.1380: invalid block
[  291.589625][  T650] hub 9-1:0.0: config failed, can't read hub descriptor (err -22)
[  291.598865][ T5231] EXT4-fs error (device loop7): __ext4_iget:5007: inode #12: block 2: comm syz.7.1380: invalid block
[  291.613323][ T5235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.620902][ T5234] tipc: Resetting bearer <eth:syzkaller0>
[  291.635760][ T5234] tipc: Disabling bearer <eth:syzkaller0>
[  291.694375][  T650] usbhid 9-1:0.0: can't add hid device: -71
[  291.700471][  T650] usbhid: probe of 9-1:0.0 failed with error -71
[  291.741323][  T650] usb 9-1: USB disconnect, device number 5
[  292.262211][ T5244] overlayfs: unrecognized mount option "uuid=null" or missing value
[  292.723565][ T5259] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1387'.
[  292.777049][ T5258] ------------[ cut here ]------------
[  292.782603][ T5258] WARNING: CPU: 1 PID: 5258 at fs/sysfs/group.c:116 internal_create_group+0xe4/0xcf0
[  292.792114][ T5258] Modules linked in:
[  292.796155][ T5258] CPU: 1 PID: 5258 Comm: syz.3.1388 Tainted: G        W         5.10.238-syzkaller-00008-g59e9a7228857 #0
[  292.807465][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  292.817630][ T5258] RIP: 0010:internal_create_group+0xe4/0xcf0
[  292.823673][ T5258] Code: 00 74 08 48 89 df e8 6b c0 d7 ff 48 8b 03 83 7c 24 1c 00 74 22 48 85 c0 0f 84 ef 0b 00 00 e8 f3 cf 9d ff eb 20 e8 ec cf 9d ff <0f> 0b 41 be ea ff ff ff e9 40 0b 00 00 48 85 c0 0f 84 dd 0b 00 00
[  292.843346][ T5258] RSP: 0018:ffffc9000105f140 EFLAGS: 00010283
[  292.849458][ T5258] RAX: ffffffff81c5d01c RBX: ffff888126d04098 RCX: 0000000000080000
[  292.857490][ T5258] RDX: ffffc90002d91000 RSI: 0000000000006000 RDI: 0000000000006001
[  292.865515][ T5258] RBP: ffffc9000105f248 R08: dffffc0000000000 R09: ffffed102157e9d4
[  292.873555][ T5258] R10: ffffed102157e9d4 R11: 1ffff1102157e9d3 R12: 1ffff9200020be38
[  292.881589][ T5258] R13: dffffc0000000000 R14: ffffffff866335e0 R15: 1ffff11024da0813
[  292.889644][ T5258] FS:  00007f67d06406c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  292.898860][ T5258] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  292.905484][ T5258] CR2: 000055556f3024a8 CR3: 00000001163f0000 CR4: 00000000003506a0
[  292.913537][ T5258] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006
[  292.921550][ T5258] DR3: 0000000000000006 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  292.929559][ T5258] Call Trace:
[  292.932916][ T5258]  ? irqentry_exit+0x56/0x60
[  292.937547][ T5258]  ? sysvec_reschedule_ipi+0x69/0x70
[  292.942866][ T5258]  ? asm_sysvec_reschedule_ipi+0x12/0x20
[  292.948555][ T5258]  ? sysfs_create_group+0x30/0x30
[  292.953625][ T5258]  ? __kasan_check_write+0x14/0x20
[  292.958772][ T5258]  sysfs_create_group+0x1f/0x30
[  292.963680][ T5258]  loop_configure+0xc2f/0x1260
[  292.968499][ T5258]  lo_ioctl+0x76d/0x1a80
[  292.972795][ T5258]  ? lo_release+0x1f0/0x1f0
[  292.977334][ T5258]  ? 0xffffffffa002c478
[  292.981526][ T5258]  ? is_bpf_text_address+0x177/0x190
[  292.986836][ T5258]  ? __kernel_text_address+0xa0/0x100
[  292.992252][ T5258]  ? unwind_get_return_address+0x4d/0x90
[  292.997916][ T5258]  ? stack_trace_save+0xe0/0xe0
[  293.002804][ T5258]  ? arch_stack_walk+0xee/0x140
[  293.007739][ T5258]  ? __kasan_check_write+0x14/0x20
[  293.012934][ T5258]  ? kobject_get_unless_zero+0x15e/0x1e0
[  293.018642][ T5258]  ? __kobject_del+0x2f0/0x2f0
[  293.023440][ T5258]  ? __kasan_check_write+0x14/0x20
[  293.028593][ T5258]  ? mutex_lock+0x8c/0xe0
[  293.032960][ T5258]  ? mutex_trylock+0xa0/0xa0
[  293.037634][ T5258]  ? bdev_check_media_change+0x350/0x350
[  293.043274][ T5258]  ? __kasan_check_write+0x14/0x20
[  293.048415][ T5258]  ? bdev_check_media_change+0x350/0x350
[  293.054061][ T5258]  ? __kasan_check_write+0x14/0x20
[  293.059196][ T5258]  ? _raw_spin_lock+0x8e/0xe0
[  293.063878][ T5258]  ? _raw_spin_trylock_bh+0x130/0x130
[  293.069276][ T5258]  ? __kasan_check_write+0x14/0x20
[  293.074468][ T5258]  ? __kasan_check_write+0x14/0x20
[  293.117538][ T5258]  ? __kasan_check_write+0x14/0x20
[  293.122721][ T5258]  ? disk_unblock_events+0x51/0x60
[  293.127871][ T5258]  ? 0xffffffffa002c478
[  293.132108][ T5258]  ? is_bpf_text_address+0x177/0x190
[  293.137476][ T5258]  ? __kernel_text_address+0xa0/0x100
[  293.142934][ T5258]  ? unwind_get_return_address+0x4d/0x90
[  293.148637][ T5258]  ? stack_trace_save+0xe0/0xe0
[  293.153523][ T5258]  ? arch_stack_walk+0xee/0x140
[  293.158436][ T5258]  ? memcpy+0x56/0x70
[  293.162446][ T5258]  ? avc_has_extended_perms+0x7f0/0xc30
[  293.168025][ T5258]  ? avc_ss_reset+0x280/0x280
[  293.172723][ T5258]  ? kasan_set_track+0x5b/0x70
[  293.177526][ T5258]  ? __kasan_slab_free+0x11/0x20
[  293.182485][ T5258]  ? slab_free_freelist_hook+0xc5/0x190
[  293.188097][ T5258]  ? kmem_cache_free+0x100/0x2d0
[  293.193055][ T5258]  ? putname+0xfe/0x150
[  293.197253][ T5258]  ? do_sys_openat2+0x207/0x6d0
[  293.202162][ T5258]  ? blkdev_common_ioctl+0xf90/0x1a80
[  293.207566][ T5258]  ? blkdev_bszset+0x1e0/0x1e0
[  293.212354][ T5258]  ? do_vfs_ioctl+0x766/0x1510
[  293.217170][ T5258]  ? __ia32_compat_sys_ioctl+0x7b0/0x7b0
[  293.222825][ T5258]  ? has_cap_mac_admin+0x330/0x330
[  293.227980][ T5258]  ? __kasan_slab_free+0x11/0x20
[  293.232955][ T5258]  ? slab_free_freelist_hook+0xc5/0x190
[  293.238523][ T5258]  ? putname+0xfe/0x150
[  293.242735][ T5258]  ? kmem_cache_free+0x100/0x2d0
[  293.247695][ T5258]  ? selinux_file_ioctl+0x377/0x480
[  293.252941][ T5258]  ? lo_release+0x1f0/0x1f0
[  293.257462][ T5258]  blkdev_ioctl+0x2d2/0x5b0
[  293.261998][ T5258]  ? blkdev_compat_ptr_ioctl+0xc0/0xc0
[  293.267474][ T5258]  ? __fget_files+0x2c4/0x320
[  293.272382][ T5258]  block_ioctl+0xae/0x100
[  293.276748][ T5258]  ? blkdev_iopoll+0x100/0x100
[  293.281553][ T5258]  __se_sys_ioctl+0x121/0x1a0
[  293.286264][ T5258]  __x64_sys_ioctl+0x7b/0x90
[  293.291037][ T5258]  do_syscall_64+0x31/0x40
[  293.295498][ T5258]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  293.301442][ T5258] RIP: 0033:0x7f67d201952b
[  293.305893][ T5258] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  293.325573][ T5258] RSP: 002b:00007f67d063fdc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  293.334046][ T5258] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f67d201952b
[  293.342084][ T5258] RDX: 0000000000000008 RSI: 0000000000004c00 RDI: 0000000000000009
[  293.350097][ T5258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000559
[  293.358114][ T5258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  293.366119][ T5258] R13: 00007f67d063fef0 R14: 00007f67d063feb0 R15: 00007f67c8220000
[  293.374175][ T5258] ---[ end trace 12ab8701694640b8 ]---
[  293.623168][ T5266] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  293.662033][ T5258] EXT4-fs (loop1048579): mounted filesystem without journal. Opts: nobarrier,,errors=continue
[  293.672472][ T5258] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.740343][   T24] audit: type=1400 audit(1751669502.194:3557): avc:  denied  { load_policy } for  pid=5271 comm="syz.9.1392" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  293.764575][ T5273] SELinux: ebitmap: truncated map
[  293.773964][ T5273] SELinux: failed to load policy
[  293.792346][ T5272] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  293.922085][ T5272] EXT4-fs (loop8): mounted filesystem without journal. Opts: commit=0x0000000000000005,inode_readahead_blks=0x0000000000000800,usrjquota=,nomblk_io_submit,,errors=continue
[  293.944705][ T5272] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  294.099482][ T5283] xt_hashlimit: size too large, truncated to 1048576
[  294.191887][ T5286] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1395'.
[  294.526410][   T24] audit: type=1400 audit(1751669503.041:3558): avc:  denied  { mount } for  pid=5279 comm="syz.3.1394" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  295.220792][   T24] audit: type=1400 audit(1751669503.792:3559): avc:  denied  { unmount } for  pid=4638 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  295.530992][ T5303] overlayfs: unrecognized mount option "uuid=null" or missing value
[  295.756701][ T5315] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,dioread_lock,,errors=continue
[  295.770000][ T5315] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  296.199485][ T5326] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,,errors=continue
[  296.209617][ T5326] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.237490][ T5315] device pim6reg1 entered promiscuous mode
[  297.248249][   T24] audit: type=1400 audit(1751669505.959:3560): avc:  denied  { ioctl } for  pid=5336 comm="syz.3.1407" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35161 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  297.304419][   T24] audit: type=1400 audit(1751669505.992:3561): avc:  denied  { read } for  pid=5336 comm="syz.3.1407" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  297.526059][   T25] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  297.969507][ T5357] ==================================================================
[  297.977600][ T5357] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280
[  297.985742][ T5357] Read of size 8 at addr ffff88812c33ccc0 by task syz.8.1412/5357
[  297.993523][ T5357] 
[  297.995849][ T5357] CPU: 1 PID: 5357 Comm: syz.8.1412 Tainted: G        W         5.10.238-syzkaller-00008-g59e9a7228857 #0
[  298.007117][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  298.017170][ T5357] Call Trace:
[  298.020461][ T5357]  __dump_stack+0x21/0x24
[  298.024781][ T5357]  dump_stack_lvl+0x169/0x1d8
[  298.029447][ T5357]  ? show_regs_print_info+0x18/0x18
[  298.034636][ T5357]  ? thaw_kernel_threads+0x220/0x220
[  298.039914][ T5357]  print_address_description+0x7f/0x2c0
[  298.045449][ T5357]  ? tc_setup_flow_action+0x842/0x3280
[  298.050905][ T5357]  kasan_report+0xe2/0x130
[  298.055309][ T5357]  ? flow_action_cookie_create+0x28/0x90
[  298.060929][ T5357]  ? tc_setup_flow_action+0x842/0x3280
[  298.066379][ T5357]  __asan_report_load8_noabort+0x14/0x20
[  298.072150][ T5357]  tc_setup_flow_action+0x842/0x3280
[  298.077444][ T5357]  ? __kmalloc+0x1a7/0x330
[  298.081855][ T5357]  ? flow_rule_alloc+0x32/0x2c0
[  298.086699][ T5357]  mall_replace_hw_filter+0x293/0x810
[  298.092059][ T5357]  ? pcpu_block_update_hint_alloc+0x8bc/0xc50
[  298.098128][ T5357]  ? mall_set_parms+0x410/0x410
[  298.102970][ T5357]  ? tcf_exts_destroy+0xb0/0xb0
[  298.107945][ T5357]  ? pcpu_alloc+0xf8a/0x16b0
[  298.112543][ T5357]  ? mall_set_parms+0x19d/0x410
[  298.117390][ T5357]  mall_change+0x528/0x750
[  298.121799][ T5357]  ? __kasan_check_write+0x14/0x20
[  298.126908][ T5357]  ? mall_get+0xa0/0xa0
[  298.131058][ T5357]  ? tcf_chain_tp_insert_unique+0xac1/0xc10
[  298.136942][ T5357]  ? nla_strcmp+0xf4/0x140
[  298.141352][ T5357]  tc_new_tfilter+0x13f6/0x1a10
[  298.146192][ T5357]  ? mall_get+0xa0/0xa0
[  298.150338][ T5357]  ? tcf_gate_entry_destructor+0x20/0x20
[  298.155959][ T5357]  ? security_capable+0x87/0xb0
[  298.160800][ T5357]  ? ns_capable+0x8c/0xf0
[  298.165129][ T5357]  ? netlink_net_capable+0x125/0x160
[  298.170408][ T5357]  ? tcf_gate_entry_destructor+0x20/0x20
[  298.176031][ T5357]  rtnetlink_rcv_msg+0x800/0xb90
[  298.180965][ T5357]  ? rtnetlink_bind+0x80/0x80
[  298.185629][ T5357]  ? arch_stack_walk+0xee/0x140
[  298.190471][ T5357]  ? stack_trace_save+0x98/0xe0
[  298.195418][ T5357]  ? stack_trace_snprint+0xf0/0xf0
[  298.200529][ T5357]  ? memcpy+0x56/0x70
[  298.204505][ T5357]  ? avc_has_perm+0x234/0x360
[  298.209176][ T5357]  ? __kasan_slab_alloc+0xbd/0xf0
[  298.214190][ T5357]  ? slab_post_alloc_hook+0x5d/0x2f0
[  298.219466][ T5357]  ? ___sys_sendmsg+0x1f0/0x260
[  298.224313][ T5357]  ? avc_has_perm_noaudit+0x240/0x240
[  298.229680][ T5357]  ? selinux_nlmsg_lookup+0x3fb/0x4a0
[  298.235132][ T5357]  netlink_rcv_skb+0x1e0/0x430
[  298.239892][ T5357]  ? rtnetlink_bind+0x80/0x80
[  298.244556][ T5357]  ? netlink_ack+0xb80/0xb80
[  298.249134][ T5357]  ? __netlink_lookup+0x387/0x3b0
[  298.254154][ T5357]  rtnetlink_rcv+0x1c/0x20
[  298.258558][ T5357]  netlink_unicast+0x87c/0xa40
[  298.263309][ T5357]  netlink_sendmsg+0x88d/0xb30
[  298.268058][ T5357]  ? netlink_getsockopt+0x530/0x530
[  298.273247][ T5357]  ? security_socket_sendmsg+0x82/0xa0
[  298.278701][ T5357]  ? netlink_getsockopt+0x530/0x530
[  298.283885][ T5357]  ____sys_sendmsg+0x5a2/0x8c0
[  298.288642][ T5357]  ? __sys_sendmsg_sock+0x40/0x40
[  298.293652][ T5357]  ? import_iovec+0x7c/0xb0
[  298.298152][ T5357]  ___sys_sendmsg+0x1f0/0x260
[  298.302818][ T5357]  ? __sys_sendmsg+0x250/0x250
[  298.307574][ T5357]  ? __fdget+0x1a1/0x230
[  298.311804][ T5357]  __x64_sys_sendmsg+0x1e2/0x2a0
[  298.316728][ T5357]  ? ___sys_sendmsg+0x260/0x260
[  298.321570][ T5357]  ? switch_fpu_return+0x197/0x340
[  298.326673][ T5357]  do_syscall_64+0x31/0x40
[  298.331081][ T5357]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  298.336962][ T5357] RIP: 0033:0x7f2f696ac929
[  298.341364][ T5357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.360958][ T5357] RSP: 002b:00007f2f67d15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  298.369361][ T5357] RAX: ffffffffffffffda RBX: 00007f2f698d3fa0 RCX: 00007f2f696ac929
[  298.377329][ T5357] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006
[  298.385291][ T5357] RBP: 00007f2f6972eb39 R08: 0000000000000000 R09: 0000000000000000
[  298.393254][ T5357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  298.401217][ T5357] R13: 0000000000000000 R14: 00007f2f698d3fa0 R15: 00007fff589d2ca8
[  298.409176][ T5357] 
[  298.411495][ T5357] Allocated by task 5357:
[  298.415819][ T5357]  __kasan_kmalloc+0xda/0x110
[  298.420481][ T5357]  __kmalloc+0x1a7/0x330
[  298.424710][ T5357]  tcf_idr_create+0x5f/0x790
[  298.429283][ T5357]  tcf_idr_create_from_flags+0x61/0x70
[  298.434727][ T5357]  tcf_gact_init+0x2b4/0x520
[  298.439307][ T5357]  tcf_action_init_1+0x3e1/0x670
[  298.444232][ T5357]  tcf_action_init+0x1e6/0x700
[  298.448984][ T5357]  tcf_exts_validate+0x215/0x510
[  298.453913][ T5357]  mall_set_parms+0x4b/0x410
[  298.458575][ T5357]  mall_change+0x45c/0x750
[  298.462979][ T5357]  tc_new_tfilter+0x13f6/0x1a10
[  298.467815][ T5357]  rtnetlink_rcv_msg+0x800/0xb90
[  298.472737][ T5357]  netlink_rcv_skb+0x1e0/0x430
[  298.477483][ T5357]  rtnetlink_rcv+0x1c/0x20
[  298.481887][ T5357]  netlink_unicast+0x87c/0xa40
[  298.486640][ T5357]  netlink_sendmsg+0x88d/0xb30
[  298.491387][ T5357]  ____sys_sendmsg+0x5a2/0x8c0
[  298.496136][ T5357]  ___sys_sendmsg+0x1f0/0x260
[  298.500804][ T5357]  __x64_sys_sendmsg+0x1e2/0x2a0
[  298.505727][ T5357]  do_syscall_64+0x31/0x40
[  298.510134][ T5357]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  298.516010][ T5357] 
[  298.518324][ T5357] Last potentially related work creation:
[  298.524030][ T5357]  kasan_save_stack+0x3a/0x60
[  298.528696][ T5357]  __kasan_record_aux_stack+0xd2/0x100
[  298.534138][ T5357]  kasan_record_aux_stack_noalloc+0xb/0x10
[  298.539932][ T5357]  call_rcu+0x105/0x1040
[  298.544166][ T5357]  neigh_parms_release+0x1cb/0x200
[  298.549264][ T5357]  inetdev_event+0x81c/0x1030
[  298.553928][ T5357]  raw_notifier_call_chain+0x90/0x100
[  298.559373][ T5357]  unregister_netdevice_many+0xf8b/0x1980
[  298.565076][ T5357]  default_device_exit_batch+0x330/0x390
[  298.570692][ T5357]  cleanup_net+0x5fb/0xb70
[  298.575097][ T5357]  process_one_work+0x6e1/0xba0
[  298.579932][ T5357]  worker_thread+0xa6a/0x13b0
[  298.584596][ T5357]  kthread+0x346/0x3d0
[  298.588648][ T5357]  ret_from_fork+0x1f/0x30
[  298.593043][ T5357] 
[  298.595366][ T5357] The buggy address belongs to the object at ffff88812c33cc00
[  298.595366][ T5357]  which belongs to the cache kmalloc-192 of size 192
[  298.609405][ T5357] The buggy address is located 0 bytes to the right of
[  298.609405][ T5357]  192-byte region [ffff88812c33cc00, ffff88812c33ccc0)
[  298.623021][ T5357] The buggy address belongs to the page:
[  298.628646][ T5357] page:ffffea0004b0cf00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812c33ce00 pfn:0x12c33c
[  298.640169][ T5357] flags: 0x4000000000000200(slab)
[  298.645184][ T5357] raw: 4000000000000200 ffffea0004b0ca00 0000000900000009 ffff888100043380
[  298.653756][ T5357] raw: ffff88812c33ce00 0000000080100009 00000001ffffffff 0000000000000000
[  298.662320][ T5357] page dumped because: kasan: bad access detected
[  298.668718][ T5357] page_owner tracks the page as allocated
[  298.674432][ T5357] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 3475, ts 196788642443, free_ts 157918215027
[  298.690563][ T5357]  prep_new_page+0x179/0x180
[  298.695152][ T5357]  get_page_from_freelist+0x2235/0x23d0
[  298.700686][ T5357]  __alloc_pages_nodemask+0x268/0x5f0
[  298.706048][ T5357]  new_slab+0x84/0x3f0
[  298.710105][ T5357]  ___slab_alloc+0x2a6/0x450
[  298.714685][ T5357]  __slab_alloc+0x63/0xa0
[  298.719000][ T5357]  kmem_cache_alloc_trace+0x1b3/0x2e0
[  298.724360][ T5357]  kset_create_and_add+0x59/0x2b0
[  298.729373][ T5357]  netdev_register_kobject+0x1a5/0x320
[  298.734820][ T5357]  register_netdevice+0xddd/0x13c0
[  298.739917][ T5357]  veth_newlink+0x641/0xbb0
[  298.744412][ T5357]  rtnl_newlink+0x11bd/0x1640
[  298.749073][ T5357]  rtnetlink_rcv_msg+0x9db/0xb90
[  298.753995][ T5357]  netlink_rcv_skb+0x1e0/0x430
[  298.758746][ T5357]  rtnetlink_rcv+0x1c/0x20
[  298.763152][ T5357]  netlink_unicast+0x87c/0xa40
[  298.767899][ T5357] page last free stack trace:
[  298.772569][ T5357]  __free_pages_ok+0x7fc/0x820
[  298.777326][ T5357]  __free_pages+0xdd/0x380
[  298.781729][ T5357]  __free_slab+0xcf/0x190
[  298.786048][ T5357]  discard_slab+0x29/0x40
[  298.790366][ T5357]  __slab_free+0x313/0x3a0
[  298.794767][ T5357]  ___cache_free+0x111/0x130
[  298.799344][ T5357]  qlink_free+0x50/0x90
[  298.803488][ T5357]  qlist_free_all+0x5f/0xb0
[  298.807978][ T5357]  kasan_quarantine_reduce+0x14a/0x160
[  298.813422][ T5357]  __kasan_slab_alloc+0x2f/0xf0
[  298.818261][ T5357]  slab_post_alloc_hook+0x5d/0x2f0
[  298.823357][ T5357]  kmem_cache_alloc_trace+0x160/0x2e0
[  298.828714][ T5357]  kernfs_iop_get_link+0x66/0x600
[  298.833725][ T5357]  vfs_readlink+0x171/0x3d0
[  298.838212][ T5357]  do_readlinkat+0x23b/0x480
[  298.842786][ T5357]  __x64_sys_readlink+0x7f/0x90
[  298.847618][ T5357] 
[  298.849931][ T5357] Memory state around the buggy address:
[  298.855635][ T5357]  ffff88812c33cb80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  298.863679][ T5357]  ffff88812c33cc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  298.871725][ T5357] >ffff88812c33cc80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  298.879767][ T5357]                                            ^
[  298.885902][ T5357]  ffff88812c33cd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  298.893952][ T5357]  ffff88812c33cd80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  298.901999][ T5357] ==================================================================
[  298.910044][ T5357] Disabling lock debugging due to kernel taint
[  298.931447][   T24] audit: type=1400 audit(1751669507.762:3562): avc:  denied  { read } for  pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  298.975106][   T24] audit: type=1400 audit(1751669507.762:3563): avc:  denied  { search } for  pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  298.996636][   T24] audit: type=1400 audit(1751669507.762:3564): avc:  denied  { write } for  pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  299.018585][   T24] audit: type=1400 audit(1751669507.762:3565): avc:  denied  { add_name } for  pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  299.048467][   T24] audit: type=1400 audit(1751669507.762:3566): avc:  denied  { create } for  pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  299.087682][   T24] audit: type=1400 audit(1751669507.762:3567): avc:  denied  { append open } for  pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  299.111076][   T24] audit: type=1400 audit(1751669507.794:3568): avc:  denied  { getattr } for  pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  299.160126][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.171176][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.181231][   T25] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  299.190392][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.210210][   T25] usb 8-1: config 0 descriptor??
[  299.654621][   T25] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  299.661595][   T25] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x2
[  299.669218][   T25] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0
[  299.850357][   T25] cp2112 0003:10C4:EA90.001F: Part Number: 0x00 Device Version: 0x00
[  300.658794][ T4405] usb 8-1: USB disconnect, device number 12