last executing test programs:

1m12.270644381s ago: executing program 32 (id=77):
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff)
symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='1\n\x00', 0x3)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9)
close(r2)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='dummy_udc.0\n', 0xc)
close(r3)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000540), 0x15, 0x2)
syz_open_dev$usbfs(&(0x7f0000000580), 0x1f, 0x2)

1m8.204066101s ago: executing program 5 (id=148):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r2, &(0x7f0000000c00)='1\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff)
write(r3, &(0x7f0000000e00)='1\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001000)='8\x00', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000001200)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff)
mount(&(0x7f0000002100)=@filename='none\x00', &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r6, &(0x7f0000001600)='dummy_udc.0', 0xb)
close(r6)
nanosleep(&(0x7f0000001700)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)
read(r7, &(0x7f0000002500), 0x64)

1m7.716286123s ago: executing program 3 (id=159):
syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x2)

1m7.716167763s ago: executing program 3 (id=160):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80), 0x1, 0x54d, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNFlGk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvedNmatFmXrZn5fOC259x703NPzv2enpOTkACG1mT2oxDxakR8m0Qcajs2GvnByfXz1h5cm8u2JBqNz/5KIsn3tc5P8t/jeeaViPjt64gThc3l1lZWF0vlcrqU56fqlctTtZXVkxcrpYV0Ib00Mzt7+p3Zmfffe7dvdX3z3D8/fHrno9PfHFv7/pd7h28lcSYO5sfa6/EUrrdnJmMyf07G4sxjJ073obBBkuz2BbAjI3mcj0XWBxyKkTzqgf+/ryKiAQypRPzDkGqNA1pz+z7Ng18Y9z9cnwBtrv/o+msjsa85NzqwljwyM8rmuxN9KD8r49c/b9/Ktujf6xAA27p+IyJOjY5u7v+SvP/buVM9nPN4Gfo/eH7uZOOftzqNfwob45/oMP4Z7xC7O7F9/Bfu9aGYrrLx3wcdx78bi1YTI3nupeaYbyy5cLGcZn3byxFxPMb2Zvmt1nNOr91tdDvWPv7Ltqz81lgwv457o3sffcx8qV56mjq3u38j4rWO499ko/2TDu2fPR/neizjaHr79W7Htq//s9X4OeKNju3/cEUr2Xp9cqp5P0y17orN/r559Pdu5e92/bP2P7B1/SeS9vXa2pOX8dO+f9Nux3Z6/+9JPm+m9+T7rpbq9aXpiD3JJ5v3zzx8bCvfOj+r//FjW/d/ne7//RHxRY/1v3nkZtdTB6H955+o/Z88cffjL3/sVn5v7f92M3U839NL/9frBT7NcwcAAAAAAACDphARByMpFDfShUKxuP7+jiNxoFCu1uonLlSXL81H87OyEzFWaK10j7e9H2I6fz9sKz/zWH42Ig5HxHcj+5v54ly1PL/blQcAAAAAAAAAAAAAAAAAAIABMd7l8/+ZP0Z2++qAZ85XfsPw2jb++/FNT8BA8v8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq3Nnz2ZbY+3BtbksP39lZXmxeuXkfFpbLFaW54pz1aXLxYVqdaGcFueqle3+XrlavTw9E8tXp+pprT5VW1k9X6kuX6qfv1gpLaTn07HnUisAAAAAAAAAAAAAAAAAAAB4sdRWVhdL5XK6JCGxo8ToYFyGRJ8Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//y284sw==")
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x40005, 0xffffffffffffffff, 0xe, 0x29, "220300030000000000000043a56dbc3a9ae8bc4fcca15548328cb3e74d080000001383565e1d61471a2d2dfe0000000000000000000000040000000000821700", "04106d0c31ef6c1f02a4aa6d0c5aa9263626c0240010f9db74161ccff2c5cf5e", [0x5, 0xff]})
r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80)
getdents(r1, 0x0, 0x0)

1m7.608567055s ago: executing program 3 (id=162):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r2, &(0x7f0000000c00)='1\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff)
write(r3, &(0x7f0000000e00)='1\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001000)='8\x00', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000001200)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff)
mount(&(0x7f0000002100)=@filename='none\x00', &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r6, &(0x7f0000001600)='dummy_udc.0', 0xb)
close(r6)
nanosleep(&(0x7f0000001700)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)
read(r7, &(0x7f0000002500), 0x64)

1m7.357195121s ago: executing program 5 (id=171):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='100', 0x3)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)

1m6.292356068s ago: executing program 5 (id=172):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
pwrite64(r1, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(0x0, 0x0)
process_madvise(r2, 0x0, 0x0, 0x15, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000)

1m6.248189279s ago: executing program 3 (id=173):
syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505", @ANYRESDEC], 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_iso={0x0, {0x5}, 0x3, 0x80, 0x0, 0x0, 0x2, 0x6512c6de, 0x4, 0xc, 0x100, 0x0})
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040))

1m5.959222386s ago: executing program 5 (id=177):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

1m5.872653188s ago: executing program 5 (id=180):
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x101002)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000300)=[0x8, 0x1])

1m4.892253993s ago: executing program 4 (id=188):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x32, 0x62, 0x30, 0x30, 0x30, 0x30, 0x38, 0x32, 0x38, 0x39, 0x30, 0x30, 0x32, 0x30, 0x31, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x28}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
keyctl$set_timeout(0xf, r1, 0x9)

1m4.790465835s ago: executing program 4 (id=190):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='./proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000100)='\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x800, 0x0)
read(r0, &(0x7f0000000200), 0x1000)

1m4.790351465s ago: executing program 4 (id=191):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='tsc\x00', 0x4)
write(r0, &(0x7f0000000280)='hpet\x00', 0x5)
write(r0, &(0x7f00000002c0)='acpi_pm\x00', 0x8)
write(r0, &(0x7f0000000340)='kvm-clock\x00', 0xa)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000200)={0x0, &(0x7f0000000300)=[@cpuid={0x64, 0x18, {0x1}}], 0x18})
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m4.724256467s ago: executing program 3 (id=193):
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x80, 0x105c2, &(0x7f0000020b80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x20000000)

1m4.620079799s ago: executing program 4 (id=195):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'veth1_to_hsr\x00', &(0x7f00000001c0)=@ethtool_cmd={0xf, 0x5, 0x3, 0x7e, 0xe, 0x6, 0xa, 0x49, 0x6, 0x4, 0x2, 0x400000, 0xfffe, 0x40, 0x8, 0x2, [0x0, 0x101]}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m4.619901799s ago: executing program 4 (id=196):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r2, &(0x7f0000000c00)='1\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff)
write(r3, &(0x7f0000000e00)='1\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001000)='8\x00', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000001200)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff)
mount(&(0x7f0000002100)=@filename='none\x00', &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r6, &(0x7f0000001600)='dummy_udc.0', 0xb)
close(r6)
nanosleep(&(0x7f0000001700)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)
read(r7, &(0x7f0000002500), 0x64)

1m4.327946616s ago: executing program 5 (id=200):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='10', 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='100', 0x3)
getpid()
unshare(0x66000080)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="32010000000000102505a8a44000010203010902"], 0x0)

1m3.484478767s ago: executing program 4 (id=203):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24000000)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1fc}]})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

57.66622322s ago: executing program 3 (id=204):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@alu={0x4, 0x0, 0x8, 0x3, 0x8, 0x1, 0xffffffffffffffff}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4c9, 0xffff, 0x9dfe, 0x5, "8003e3ffff072000"})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4000000, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x4)

12.919629582s ago: executing program 33 (id=202):
mkdir(&(0x7f0000000040)='./mnt_nfs\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt_nfs\x00', &(0x7f0000000100)='nfs4\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,port=2049,proto=udp,clientaddr=127.0.0.1\x00')

12.691480367s ago: executing program 34 (id=201):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005480)=@delchain={0x1c8, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x42}}, @filter_kind_options=@f_basic={{0xa}, {0x17c, 0x2, [@TCA_BASIC_ACT={0x178, 0x3, [@m_sample={0x7c, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x3d, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d8db6ee7a95acb45665d419103d3630ef3c99f372"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0xf8, 0x5, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xc0000000, 0xffffffffffffffff, 0x2, 0xe}, 0x7}}]}, {0xaa, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c443d003af1f22d796733e174a55728b309ff94c380276aa4c273687acbac759cf82dcb64f9e61b78c605fb9edbb86dd5ae3f174ba8489176ed907a788dd2e877be404d047e0ef287164365312e1579e808483983c2580a15ec224a6752e7166875eb90c4f59f87bf"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

12.670005678s ago: executing program 35 (id=200):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='10', 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='100', 0x3)
getpid()
unshare(0x66000080)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="32010000000000102505a8a44000010203010902"], 0x0)

12.58656629s ago: executing program 36 (id=204):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@alu={0x4, 0x0, 0x8, 0x3, 0x8, 0x1, 0xffffffffffffffff}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4c9, 0xffff, 0x9dfe, 0x5, "8003e3ffff072000"})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4000000, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x4)

12.545986791s ago: executing program 37 (id=203):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24000000)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1fc}]})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

10.771839605s ago: executing program 6 (id=205):
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket(0x10, 0x3, 0x0)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b})
epoll_pwait(r3, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
sendfile(r4, r6, 0x0, 0x81)
r7 = dup3(r1, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000300)={0x200f})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0xc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffc, 0xc000, 0x800, 0xb4}, 0x0, 0x0, 0x0)

10.584158219s ago: executing program 6 (id=211):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

10.443658503s ago: executing program 6 (id=213):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r2, &(0x7f0000000c00)='1\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff)
write(r3, &(0x7f0000000e00)='1\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001000)='8\x00', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff)
close(r5)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff)
mount(&(0x7f0000002100)=@filename='none\x00', &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r6, &(0x7f0000001600)='dummy_udc.0', 0xb)
close(r6)
nanosleep(&(0x7f0000001700)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)
read(r7, &(0x7f0000002500), 0x64)

10.038171113s ago: executing program 7 (id=214):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r2, &(0x7f0000000c00)='1\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff)
write(r3, &(0x7f0000000e00)='1\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001000)='8\x00', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000001200)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff)
mount(&(0x7f0000002100)=@filename='none\x00', &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r6, &(0x7f0000001600)='dummy_udc.0', 0xb)
close(r6)
nanosleep(&(0x7f0000001700)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)
read(r7, &(0x7f0000002500), 0x64)

9.512668496s ago: executing program 6 (id=223):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b1, 0x0, 0x4000000000000008}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x4f})

9.482573536s ago: executing program 38 (id=223):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b1, 0x0, 0x4000000000000008}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x4f})

9.192329754s ago: executing program 7 (id=225):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0)
write(r0, &(0x7f0000000000)='2\x00', 0x2)

9.111843256s ago: executing program 7 (id=226):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000140)=@tcp6, 0x1}, 0x20)

9.111637116s ago: executing program 7 (id=227):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000300), 0xf7, 0x551, &(0x7f0000000cc0)="$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")
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x9, 0x10002})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000)
fcntl$setsig(r0, 0xa, 0x21)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f000000e280)={0x2020}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8774da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b00700000000000000eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e6b45101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdf06375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d68f1c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361b851de34ccb3c8071b96f1128d7ee79b41246e5628e70272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0ff22321e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db0be03000069b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6beffffffff5e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990eb02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf21dad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d1150129176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040fa0200000000000000002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa8875000000000000004643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8)
fchown(r2, 0x0, 0x0)
close(0x4)

8.168055129s ago: executing program 7 (id=232):
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = syz_clone(0x208e0100, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00')
pread64(r4, &(0x7f0000000500)=""/15, 0xf, 0x40000000007)

8.10712713s ago: executing program 7 (id=234):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r2, &(0x7f0000000c00)='1\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff)
write(r3, &(0x7f0000000e00)='1\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001000)='8\x00', 0x2)
close(r4)
write(0xffffffffffffffff, &(0x7f0000001200)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f)
close(0xffffffffffffffff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff)
mount(&(0x7f0000002100)=@filename='none\x00', &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000001600)='dummy_udc.0', 0xb)
close(r5)
nanosleep(&(0x7f0000001700)={0x1}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)
read(r6, &(0x7f0000002500), 0x64)

8.035529022s ago: executing program 39 (id=234):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r2, &(0x7f0000000c00)='1\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff)
write(r3, &(0x7f0000000e00)='1\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001000)='8\x00', 0x2)
close(r4)
write(0xffffffffffffffff, &(0x7f0000001200)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f)
close(0xffffffffffffffff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff)
mount(&(0x7f0000002100)=@filename='none\x00', &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000001600)='dummy_udc.0', 0xb)
close(r5)
nanosleep(&(0x7f0000001700)={0x1}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)
read(r6, &(0x7f0000002500), 0x64)

2.032123829s ago: executing program 2 (id=335):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
r2 = epoll_create1(0x80000)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x634, 0x0, 0x83, "000000004a8155bd00"})
r3 = syz_open_pts(r1, 0x40)
r4 = dup3(r3, r1, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)={0x80000001})
close_range(r0, 0xffffffffffffffff, 0x0)

1.716733158s ago: executing program 2 (id=343):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x2040400)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xbda8ee4cc7852c63, 0x204031, 0xffffffffffffffff, 0x42791000)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r2, &(0x7f0000000e00)=""/4095, 0xfff)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000580)}, 0x7f}], 0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000900)='.', 0x1, 0x12, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004a00003c0000000000019078ac1e0001ac1414bb44140a010000000000000001ac1e0001000000050d0090780000fffe00000002000000000000000009100f30b87186d14a46e31bfb4904d284c6533bf077a22a055c32830f4a78b695d0085569862fe6336ff0235193a223ff2584f750e32b5b6071e3a6a20d3fe615993c05b5192306af15cdba08e1810aad0067f7390876c5441aea3bcd3976adc9d5"], 0x0)
getsockopt(r0, 0x7, 0x0, &(0x7f00000002c0)=""/253, &(0x7f00000003c0)=0xfd)

1.588026241s ago: executing program 2 (id=348):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x401, @local, 0xf}, {0xa, 0x4e20, 0x7c, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x1ae}, 0x0, {[0x4, 0x3, 0x0, 0x9, 0x4, 0xfffff9b9, 0x4, 0x3]}}, 0x5c)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00')
r2 = epoll_create(0x10000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x9000000d})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20)
mount$fuseblk(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20, &(0x7f0000000300)=ANY=[])

1.586995431s ago: executing program 2 (id=350):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a)
r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x22883, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1.373097426s ago: executing program 8 (id=357):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000200)=@setlink={0x40, 0x13, 0x5, 0x0, 0x10, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40601}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000)

1.260554729s ago: executing program 8 (id=360):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0xffffffffffffff07)

1.260056539s ago: executing program 8 (id=363):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r2, &(0x7f0000000c00)='1\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff)
write(r3, &(0x7f0000000e00)='1\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001000)='8\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000001200)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f)
close(r5)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff)
mount(&(0x7f0000002100)=@filename='none\x00', &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r6, &(0x7f0000001600)='dummy_udc.0', 0xb)
close(r6)
nanosleep(&(0x7f0000001700)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)
read(r7, &(0x7f0000002500), 0x64)

1.20471926s ago: executing program 1 (id=365):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
recvfrom(r1, 0x0, 0x0, 0x32, 0x0, 0x0)

936.123907ms ago: executing program 9 (id=367):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

414.140109ms ago: executing program 8 (id=371):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x4c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0c}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x4c}}, 0x0)

398.5112ms ago: executing program 8 (id=372):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)

344.148202ms ago: executing program 8 (id=374):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000002340)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYBLOB="2751076a8b829ac4a1a9aec0ab8b9081abb1d62becfaad87ab2073e8af8965853391ade34c6016569e7c972d0747e109ead98e69fc7d265eea7c001d65fa6c2e5ed2c19b66a438eae507d71e4797d78abdf618eb1d08fe195d86dc13c648bfdbb9f974d7c0fea613f2fe001d0d84955bc33b7784cf4d974b6ec94b9899c5fb0148462b5bf11f00ac5532de292514e683556272765de02e08f1db0943cdaf838ef040d1edb731d4c4885afc0a5e4ad4f38bfec668612e0c3d49131705969aeb40d9bbc0a0d6279d9790d87488e3c5b42d3e3e5360eab12ec0786bc3e8c7aafe1eca0c199dc72a6b7ff4d6bee7304c532fa1dd91", @ANYRES64=r1, @ANYRES64=r1, @ANYBLOB="a93d5a0ba718f57231e11dc57c5e1d5b3ce586d5f1086ef81da6038279bddc7ed76fbbde9dd67aafb1516f91d35ecc0bffa421ea075528f25ebde6c73a9e441cc32d308ea696f2ab693e6de5bdb65d3410b5e65907934fe52f5de755e74e1712bb30a2d69b071f3b561e22e39fab8de8ff8270f88ccc74097a3d59190660362566220f1b7a78f8b3a2c28ef3b7f12d4e080a2faad82b232f2255736697ed3fb41c567ef83afb126c207d0892d9d9b641acef91301ce13c8b8341ef5d35e34f993ca7988ee866f3135bc22c6677af1f4ad2f568a03a7c355d2227fda61cc4a21e5e5f017c51fb784179f5154c158e048e2f633465f5d36fe01db6429971f1f084181e8e4a6beeea11ac7f9cd2d35caf1312c09f8ebfed5c935c61ed9e25ec9e4171ea2dad928f05c07db96da1a6abb7fd633d1fcd730250910e4e09f071029fc4384bd01f6e5224dfc08e7168d70e2580004ade2f52339b61ee471209e2c4d11be3cfaeb6f72fbe15842f0259f215a3626532f973787b57bd7dce780778a90c0ff45cbf4a9604c419f854926e5434f4f9c6af75cdaeaa1c5e4be2056f1d143190fde8c1d135ff6586ee0ce5764f566048c41c3fe457db114347b226c1b311903cfeaa5b010c52755e7293b78107f3bb498970eb05eb53e1d715207986699b25036506c93c4d8a56646a424e13f796bc137f409ef0f5b1732484bfad4436d93d01d4d865ef8c8ff6cc127d98ccae198090e198fa8f25021516c8053600f8deab5f3bbcd6b350e2072e58b3bf81c6817d9013f633d4085cd43d9edfa5d03002c94bcc748ade3a12efcf46ce660391495b2a8b1f0aaa0c82275a62a61c94ade689cebd5b55864848a6cc430c0c8e67001f0d006aa5a0be6628dcbb88b17b16cf947ad22011974af22a090eec5f4b6544b50bb31547c6a0bff723d6de1bcc0d9851b726f73e1c64a055859cb9c7c3267b484246e442c96484e595e3d562ccc567681c7866f3daec761768616a95c56d40f98fbf6ea3e8cd815bef9bcbacbde13e18226c998c667ee307"])

343.966462ms ago: executing program 1 (id=375):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1})
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r3})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000004c0)={@remote, @dev={0xfe, 0x80, '\x00', 0x2b}, @private1, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86120186, r5})

325.298582ms ago: executing program 1 (id=377):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
close(0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}]}, 0x50}}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0)

275.759653ms ago: executing program 1 (id=379):
timer_create(0xfffffffd, 0x0, &(0x7f0000000040))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
timer_delete(0x0)

275.584513ms ago: executing program 2 (id=380):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x28, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@flag='rw'}]}})

272.337133ms ago: executing program 2 (id=381):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r2, &(0x7f0000000c00)='1\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff)
write(r3, &(0x7f0000000e00)='1\x00', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
write(r4, &(0x7f0000001000)='8\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff)
write(r5, &(0x7f0000001200)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f)
close(r5)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff)
mount(&(0x7f0000002100)=@filename='none\x00', &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
write(r6, &(0x7f0000001600)='dummy_udc.0', 0xb)
close(r6)
nanosleep(&(0x7f0000001700)={0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0)
read(r7, &(0x7f0000002500), 0x64)

201.520845ms ago: executing program 0 (id=382):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @private=0xa010100}})

132.244206ms ago: executing program 0 (id=383):
r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x51, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x62, 0x30, 0x30, 0x6e, 0x32, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1)

132.091386ms ago: executing program 1 (id=384):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(0x0)
mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x8, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

131.889216ms ago: executing program 0 (id=385):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c)
setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000440), 0x4)

131.765826ms ago: executing program 0 (id=386):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x0, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
sendto$packet(r7, &(0x7f0000000540)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @remote}, 0x14)

126.390807ms ago: executing program 9 (id=387):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2)
preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000300)=""/101, 0x65}, {&(0x7f00000003c0)=""/143, 0x8f}], 0x2, 0x43b, 0x0)

96.309558ms ago: executing program 9 (id=388):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x4050404)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x4e24}, 0x1c)

23.939129ms ago: executing program 9 (id=389):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x7, 0x0, 0xfffff00c}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)

23.743509ms ago: executing program 0 (id=390):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb)
r2 = creat(0x0, 0x20)
splice(r0, 0x0, r2, 0x0, 0x8000, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0)
write$cgroup_pid(r3, 0x0, 0x0)
r4 = geteuid()
getresgid(0x0, 0x0, &(0x7f00000000c0))
fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="000000001400030004000000000000000081c3465800000014000100ff0000060000000000c8327d14477e417f7fee072c38cbd8000000", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
write$P9_RSTATu(r3, &(0x7f0000000180)={0x58, 0x7d, 0x1, {{0x0, 0x3a, 0x3, 0x101, {0x10, 0x3, 0x3}, 0x80000000, 0x5bd8, 0x4, 0xc47, 0x2, ',*', 0x4, '/!\xbb.', 0x0, '', 0x1, '-'}, 0x9, '&-%%+)*#-', r4, 0x0, r5}}, 0x58)

23.664189ms ago: executing program 9 (id=391):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)
recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0)

7.772459ms ago: executing program 0 (id=392):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x1, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)

124.15µs ago: executing program 1 (id=393):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00')
r1 = openat(r0, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='\\010\\x00000001 2147483647 /tmp\n', 0x1f)

0s ago: executing program 9 (id=394):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}, [@alu={0x4, 0x0, 0x3, 0x0, 0x7, 0xfffffffffffffff8, 0x4}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100}, 0x94)

kernel console output (not intermixed with test programs):

84.065375][    C1]  ? prot_none_test+0x10/0x10
[   84.070066][    C1]  ? debug_smp_processor_id+0x17/0x20
[   84.075446][    C1]  __x64_sys_mprotect+0x80/0x90
[   84.080299][    C1]  x64_sys_call+0x912/0x9a0
[   84.084806][    C1]  do_syscall_64+0x4c/0xa0
[   84.089218][    C1]  ? clear_bhb_loop+0x50/0xa0
[   84.093896][    C1]  ? clear_bhb_loop+0x50/0xa0
[   84.098582][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   84.104474][    C1] RIP: 0033:0x7f58fe9a2d97
[   84.108894][    C1] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.128501][    C1] RSP: 002b:00007ffd9228f4c8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[   84.136931][    C1] RAX: ffffffffffffffda RBX: 00007f58fd3ba6c0 RCX: 00007f58fe9a2d97
[   84.144907][    C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f58fd39b000
[   84.152880][    C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[   84.160856][    C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd9228f620
[   84.168830][    C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[   84.176810][    C1]  </TASK>
[   84.179847][    C0] CPU: 0 PID: 277 Comm: syz-executor Not tainted syzkaller #0
[   84.180857][    C1] FAULT_INJECTION: forcing a failure.
[   84.180857][    C1] name failslab, interval 1, probability 10, space 0, times 12
[   84.187325][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   84.210113][    C0] Call Trace:
[   84.213397][    C0]  <IRQ>
[   84.216245][    C0]  __dump_stack+0x21/0x30
[   84.220588][    C0]  dump_stack_lvl+0x110/0x170
[   84.225280][    C0]  ? show_regs_print_info+0x20/0x20
[   84.230484][    C0]  ? prandom_u32+0x24d/0x290
[   84.235103][    C0]  dump_stack+0x15/0x20
[   84.239261][    C0]  should_fail+0x3ab/0x500
[   84.243683][    C0]  __should_failslab+0xa4/0xe0
[   84.248468][    C0]  should_failslab+0x9/0x20
[   84.252992][    C0]  slab_pre_alloc_hook+0x39/0xd0
[   84.257934][    C0]  ? __alloc_skb+0xe4/0x730
[   84.262444][    C0]  kmem_cache_alloc+0x44/0x260
[   84.267213][    C0]  __alloc_skb+0xe4/0x730
[   84.271551][    C0]  ndisc_send_rs+0x310/0x960
[   84.276160][    C0]  addrconf_rs_timer+0x35a/0x600
[   84.281112][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   84.287185][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   84.293253][    C0]  call_timer_fn+0x38/0x290
[   84.297757][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   84.303846][    C0]  __run_timers+0x637/0x9a0
[   84.308360][    C0]  ? calc_index+0x200/0x200
[   84.312868][    C0]  ? sched_clock_cpu+0x18/0x3d0
[   84.317723][    C0]  run_timer_softirq+0x6a/0xf0
[   84.322502][    C0]  handle_softirqs+0x250/0x560
[   84.327273][    C0]  __irq_exit_rcu+0x52/0xf0
[   84.331776][    C0]  irq_exit_rcu+0x9/0x10
[   84.336020][    C0]  common_interrupt+0xbe/0xe0
[   84.340705][    C0]  </IRQ>
[   84.343644][    C0]  <TASK>
[   84.346573][    C0]  asm_common_interrupt+0x27/0x40
[   84.351602][    C0] RIP: 0010:kasan_check_range+0x5f/0x2a0
[   84.357268][    C0] Code: 02 00 00 49 bd 01 00 00 00 00 fc ff df 49 89 fe 49 c1 ee 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1 <49> c1 e9 03 4b 8d 1c 29 49 89 dc 4d 29 dc 49 83 fc 10 7f 29 4d 85
[   84.376887][    C0] RSP: 0018:ffffc90000a87548 EFLAGS: 00000a02
[   84.382966][    C0] RAX: ffffffff81b11201 RBX: ffff88811ec1a600 RCX: ffffffff81b112b7
[   84.390941][    C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88811ec1a638
[   84.398938][    C0] RBP: ffffc90000a87570 R08: ffff88811ec1a63f R09: ffff88811ec1a63f
[   84.406914][    C0] R10: dffffc0000000000 R11: ffffed1023d834c7 R12: ffffc90000a878a8
[   84.414903][    C0] R13: dffffc0000000001 R14: 1ffff11023d834c7 R15: 0000000000000002
[   84.422879][    C0]  ? flush_delayed_fput+0x71/0x80
[   84.427914][    C0]  ? fput_many+0x27/0x1a0
[   84.432252][    C0]  __kasan_check_write+0x14/0x20
[   84.437189][    C0]  fput_many+0x27/0x1a0
[   84.441348][    C0]  fput+0x1a/0x20
[   84.444987][    C0]  poll_freewait+0xc5/0x220
[   84.449486][    C0]  do_select+0x1602/0x16b0
[   84.453924][    C0]  ? core_sys_select+0x700/0x700
[   84.458880][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   84.465133][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   84.471366][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   84.477608][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   84.483850][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   84.490096][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   84.496346][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   84.502600][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   84.508854][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   84.515098][    C0]  ? inet_recvmsg+0x153/0x470
[   84.519792][    C0]  ? check_stack_object+0x133/0x150
[   84.525011][    C0]  ? check_stack_object+0x10f/0x150
[   84.530217][    C0]  core_sys_select+0x4f8/0x700
[   84.534992][    C0]  ? poll_select_set_timeout+0x160/0x160
[   84.540631][    C0]  ? sigprocmask+0x1b0/0x1b0
[   84.545232][    C0]  ? net_rx_action+0x85b/0x910
[   84.550006][    C0]  __se_sys_pselect6+0x274/0x340
[   84.554965][    C0]  ? __x64_sys_pselect6+0x100/0x100
[   84.560169][    C0]  ? ksys_read+0x1eb/0x260
[   84.564593][    C0]  ? __kasan_check_write+0x14/0x20
[   84.569705][    C0]  __x64_sys_pselect6+0xe5/0x100
[   84.574652][    C0]  x64_sys_call+0x760/0x9a0
[   84.579152][    C0]  do_syscall_64+0x4c/0xa0
[   84.583567][    C0]  ? clear_bhb_loop+0x50/0xa0
[   84.588251][    C0]  ? clear_bhb_loop+0x50/0xa0
[   84.592928][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   84.598822][    C0] RIP: 0033:0x7f8149096117
[   84.603242][    C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   84.623012][    C0] RSP: 002b:00007fff711ed7a0 EFLAGS: 00000202 ORIG_RAX: 000000000000010e
[   84.631451][    C0] RAX: ffffffffffffffda RBX: 00005555786ba500 RCX: 00007f8149096117
[   84.639430][    C0] RDX: 0000000000000000 RSI: 00007fff711ed8c0 RDI: 0000000000000026
[   84.647404][    C0] RBP: 00007fff711edd20 R08: 00007fff711ed7e0 R09: 00007fff711ed7f0
[   84.655407][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff711edb60
[   84.663379][    C0] R13: 00007fff711ed950 R14: 585858582e7a7973 R15: 00007fff711edd90
[   84.671364][    C0]  </TASK>
[   84.674382][    C1] CPU: 1 PID: 854 Comm: syz.5.200 Not tainted syzkaller #0
[   84.674838][    C0] FAULT_INJECTION: forcing a failure.
[   84.674838][    C0] name failslab, interval 1, probability 10, space 0, times 11
[   84.681700][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   84.681715][    C1] Call Trace:
[   84.681721][    C1]  <IRQ>
[   84.681728][    C1]  __dump_stack+0x21/0x30
[   84.714940][    C1]  dump_stack_lvl+0x110/0x170
[   84.719631][    C1]  ? show_regs_print_info+0x20/0x20
[   84.724828][    C1]  ? prandom_u32+0x24d/0x290
[   84.729430][    C1]  dump_stack+0x15/0x20
[   84.733603][    C1]  should_fail+0x3ab/0x500
[   84.738027][    C1]  __should_failslab+0xa4/0xe0
[   84.742796][    C1]  should_failslab+0x9/0x20
[   84.747301][    C1]  slab_pre_alloc_hook+0x39/0xd0
[   84.752235][    C1]  ? __alloc_skb+0xe4/0x730
[   84.756739][    C1]  kmem_cache_alloc+0x44/0x260
[   84.761509][    C1]  __alloc_skb+0xe4/0x730
[   84.765855][    C1]  ndisc_send_rs+0x310/0x960
[   84.770456][    C1]  addrconf_rs_timer+0x35a/0x600
[   84.775408][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   84.781483][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   84.787562][    C1]  call_timer_fn+0x38/0x290
[   84.792086][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   84.798169][    C1]  __run_timers+0x637/0x9a0
[   84.802674][    C1]  ? calc_index+0x200/0x200
[   84.807182][    C1]  ? sched_clock_cpu+0x18/0x3d0
[   84.812039][    C1]  run_timer_softirq+0x6a/0xf0
[   84.816811][    C1]  handle_softirqs+0x250/0x560
[   84.821588][    C1]  __irq_exit_rcu+0x52/0xf0
[   84.826099][    C1]  irq_exit_rcu+0x9/0x10
[   84.830353][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   84.836000][    C1]  </IRQ>
[   84.838940][    C1]  <TASK>
[   84.841888][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   84.847887][    C1] RIP: 0010:kasan_check_range+0xc/0x2a0
[   84.853449][    C1] Code: 8a 05 03 31 c0 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 c0 01 00 00 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 49 89 f8 49 01 f0 0f 82 1d 02
[   84.873058][    C1] RSP: 0018:ffffc90000ca7970 EFLAGS: 00000202
[   84.879137][    C1] RAX: ffffffff81524201 RBX: ffffffff8564bda0 RCX: ffffffff8152421c
[   84.887144][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff86711f80
[   84.895126][    C1] RBP: ffffc90000ca7980 R08: 0000000000000003 R09: 0000000000000004
[   84.903102][    C1] R10: dffffc0000000000 R11: fffffbfff0ce23f0 R12: dffffc0000000000
[   84.911085][    C1] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92000194f34
[   84.919072][    C1]  ? __printk_wait_on_cpu_lock+0x1/0x40
[   84.924634][    C1]  ? __printk_wait_on_cpu_lock+0x1c/0x40
[   84.930294][    C1]  ? __kasan_check_read+0x11/0x20
[   84.935335][    C1]  __printk_wait_on_cpu_lock+0x1c/0x40
[   84.940807][    C1]  dump_stack_lvl+0xce/0x170
[   84.945406][    C1]  ? show_regs_print_info+0x20/0x20
[   84.950600][    C1]  ? prandom_u32+0x24d/0x290
[   84.955193][    C1]  dump_stack+0x15/0x20
[   84.959346][    C1]  should_fail+0x3ab/0x500
[   84.963768][    C1]  __should_failslab+0xa4/0xe0
[   84.968546][    C1]  should_failslab+0x9/0x20
[   84.973064][    C1]  slab_pre_alloc_hook+0x39/0xd0
[   84.978007][    C1]  ? vm_area_dup+0x26/0x210
[   84.982517][    C1]  kmem_cache_alloc+0x44/0x260
[   84.987292][    C1]  vm_area_dup+0x26/0x210
[   84.991627][    C1]  __split_vma+0xac/0x3e0
[   84.995963][    C1]  split_vma+0x7c/0xd0
[   85.000044][    C1]  mprotect_fixup+0x496/0x7d0
[   85.004730][    C1]  ? change_protection+0x1510/0x1510
[   85.010023][    C1]  ? security_file_mprotect+0x84/0xa0
[   85.015499][    C1]  do_mprotect_pkey+0x72c/0xad0
[   85.020369][    C1]  ? prot_none_test+0x10/0x10
[   85.025077][    C1]  ? debug_smp_processor_id+0x17/0x20
[   85.030481][    C1]  __x64_sys_mprotect+0x80/0x90
[   85.035359][    C1]  x64_sys_call+0x912/0x9a0
[   85.039867][    C1]  do_syscall_64+0x4c/0xa0
[   85.044290][    C1]  ? clear_bhb_loop+0x50/0xa0
[   85.048988][    C1]  ? clear_bhb_loop+0x50/0xa0
[   85.053672][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   85.059567][    C1] RIP: 0033:0x7f58fe9a2d97
[   85.063984][    C1] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.083683][    C1] RSP: 002b:00007ffd9228f4c8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[   85.092102][    C1] RAX: ffffffffffffffda RBX: 00007f58fd3ba6c0 RCX: 00007f58fe9a2d97
[   85.100079][    C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f58fd39b000
[   85.108048][    C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[   85.116019][    C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd9228f620
[   85.124013][    C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[   85.131995][    C1]  </TASK>
[   85.135018][    C0] CPU: 0 PID: 277 Comm: syz-executor Not tainted syzkaller #0
[   85.135104][    C1] FAULT_INJECTION: forcing a failure.
[   85.135104][    C1] name failslab, interval 1, probability 10, space 0, times 10
[   85.142495][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   85.142507][    C0] Call Trace:
[   85.142513][    C0]  <IRQ>
[   85.171530][    C0]  __dump_stack+0x21/0x30
[   85.175886][    C0]  dump_stack_lvl+0x110/0x170
[   85.180571][    C0]  ? show_regs_print_info+0x20/0x20
[   85.185788][    C0]  ? prandom_u32+0x24d/0x290
[   85.190394][    C0]  dump_stack+0x15/0x20
[   85.194563][    C0]  should_fail+0x3ab/0x500
[   85.198991][    C0]  __should_failslab+0xa4/0xe0
[   85.203768][    C0]  should_failslab+0x9/0x20
[   85.208276][    C0]  slab_pre_alloc_hook+0x39/0xd0
[   85.213221][    C0]  ? __build_skb+0x2a/0x300
[   85.217731][    C0]  kmem_cache_alloc+0x44/0x260
[   85.222506][    C0]  ? __kasan_check_read+0x11/0x20
[   85.227623][    C0]  __build_skb+0x2a/0x300
[   85.231958][    C0]  ? build_skb+0x19/0x1f0
[   85.236300][    C0]  build_skb+0x24/0x1f0
[   85.240462][    C0]  page_to_skb+0x12c/0xb60
[   85.244881][    C0]  receive_buf+0xcd3/0x4bc0
[   85.249399][    C0]  ? virtnet_poll_tx+0x4e0/0x4e0
[   85.254349][    C0]  ? kasan_quarantine_put+0x34/0x190
[   85.259663][    C0]  ? kfree+0xc4/0x270
[   85.263655][    C0]  ? ____kasan_slab_free+0x130/0x160
[   85.268943][    C0]  ? virtqueue_get_buf_ctx+0x4a2/0xf60
[   85.274404][    C0]  ? detach_buf_split+0x88d/0xa90
[   85.279450][    C0]  ? virtqueue_get_buf_ctx+0x700/0xf60
[   85.284916][    C0]  virtnet_poll+0x510/0xe90
[   85.289434][    C0]  ? refill_work+0x220/0x220
[   85.294044][    C0]  ? virtnet_poll_tx+0x317/0x4e0
[   85.298985][    C0]  __napi_poll+0xbb/0x580
[   85.303314][    C0]  net_rx_action+0x37f/0x910
[   85.307903][    C0]  ? net_tx_action+0x520/0x520
[   85.312673][    C0]  handle_softirqs+0x250/0x560
[   85.317449][    C0]  __irq_exit_rcu+0x52/0xf0
[   85.321960][    C0]  irq_exit_rcu+0x9/0x10
[   85.326205][    C0]  common_interrupt+0xbe/0xe0
[   85.330892][    C0]  </IRQ>
[   85.333844][    C0]  <TASK>
[   85.336784][    C0]  asm_common_interrupt+0x27/0x40
[   85.341832][    C0] RIP: 0010:kasan_check_range+0x5f/0x2a0
[   85.347473][    C0] Code: 02 00 00 49 bd 01 00 00 00 00 fc ff df 49 89 fe 49 c1 ee 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1 <49> c1 e9 03 4b 8d 1c 29 49 89 dc 4d 29 dc 49 83 fc 10 7f 29 4d 85
[   85.367086][    C0] RSP: 0018:ffffc90000a87548 EFLAGS: 00000a02
[   85.373166][    C0] RAX: ffffffff81b11201 RBX: ffff88811ec1a600 RCX: ffffffff81b112b7
[   85.381152][    C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88811ec1a638
[   85.389155][    C0] RBP: ffffc90000a87570 R08: ffff88811ec1a63f R09: ffff88811ec1a63f
[   85.397133][    C0] R10: dffffc0000000000 R11: ffffed1023d834c7 R12: ffffc90000a878a8
[   85.405109][    C0] R13: dffffc0000000001 R14: 1ffff11023d834c7 R15: 0000000000000002
[   85.413086][    C0]  ? flush_delayed_fput+0x71/0x80
[   85.418116][    C0]  ? fput_many+0x27/0x1a0
[   85.422451][    C0]  __kasan_check_write+0x14/0x20
[   85.427394][    C0]  fput_many+0x27/0x1a0
[   85.431562][    C0]  fput+0x1a/0x20
[   85.435204][    C0]  poll_freewait+0xc5/0x220
[   85.439707][    C0]  do_select+0x1602/0x16b0
[   85.444140][    C0]  ? core_sys_select+0x700/0x700
[   85.449094][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   85.455352][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   85.461614][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   85.467868][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   85.474121][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   85.480376][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   85.486628][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   85.492882][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   85.499123][    C0]  ? __ia32_compat_sys_ppoll_time64+0x320/0x320
[   85.505368][    C0]  ? inet_recvmsg+0x153/0x470
[   85.510054][    C0]  ? check_stack_object+0x133/0x150
[   85.515261][    C0]  ? check_stack_object+0x10f/0x150
[   85.520461][    C0]  core_sys_select+0x4f8/0x700
[   85.525230][    C0]  ? poll_select_set_timeout+0x160/0x160
[   85.530865][    C0]  ? sigprocmask+0x1b0/0x1b0
[   85.535462][    C0]  ? net_rx_action+0x85b/0x910
[   85.540227][    C0]  __se_sys_pselect6+0x274/0x340
[   85.545172][    C0]  ? __x64_sys_pselect6+0x100/0x100
[   85.550376][    C0]  ? ksys_read+0x1eb/0x260
[   85.554803][    C0]  ? __kasan_check_write+0x14/0x20
[   85.559925][    C0]  __x64_sys_pselect6+0xe5/0x100
[   85.564879][    C0]  x64_sys_call+0x760/0x9a0
[   85.569481][    C0]  do_syscall_64+0x4c/0xa0
[   85.573907][    C0]  ? clear_bhb_loop+0x50/0xa0
[   85.578584][    C0]  ? clear_bhb_loop+0x50/0xa0
[   85.583268][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   85.589162][    C0] RIP: 0033:0x7f8149096117
[   85.593586][    C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   85.613198][    C0] RSP: 002b:00007fff711ed7a0 EFLAGS: 00000202 ORIG_RAX: 000000000000010e
[   85.621613][    C0] RAX: ffffffffffffffda RBX: 00005555786ba500 RCX: 00007f8149096117
[   85.629597][    C0] RDX: 0000000000000000 RSI: 00007fff711ed8c0 RDI: 0000000000000026
[   85.637575][    C0] RBP: 00007fff711edd20 R08: 00007fff711ed7e0 R09: 00007fff711ed7f0
[   85.645647][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff711edb60
[   85.653624][    C0] R13: 00007fff711ed950 R14: 585858582e7a7973 R15: 00007fff711edd90
[   85.661603][    C0]  </TASK>
[   85.664630][    C1] CPU: 1 PID: 854 Comm: syz.5.200 Not tainted syzkaller #0
[   85.667056][    C0] FAULT_INJECTION: forcing a failure.
[   85.667056][    C0] name failslab, interval 1, probability 10, space 0, times 9
[   85.671848][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   85.671860][    C1] Call Trace:
[   85.671866][    C1]  <IRQ>
[   85.671872][    C1]  __dump_stack+0x21/0x30
[   85.705142][    C1]  dump_stack_lvl+0x110/0x170
[   85.709828][    C1]  ? show_regs_print_info+0x20/0x20
[   85.715033][    C1]  dump_stack+0x15/0x20
[   85.719193][    C1]  should_fail+0x3ab/0x500
[   85.723619][    C1]  ? ndisc_send_rs+0x310/0x960
[   85.728391][    C1]  __should_failslab+0xa4/0xe0
[   85.733160][    C1]  should_failslab+0x9/0x20
[   85.737675][    C1]  slab_pre_alloc_hook+0x39/0xd0
[   85.742614][    C1]  ? ndisc_send_rs+0x310/0x960
[   85.747381][    C1]  ? ndisc_send_rs+0x310/0x960
[   85.752171][    C1]  __kmalloc_track_caller+0x6c/0x2c0
[   85.757464][    C1]  ? ndisc_send_rs+0x310/0x960
[   85.762228][    C1]  ? ndisc_send_rs+0x310/0x960
[   85.766994][    C1]  __alloc_skb+0x210/0x730
[   85.771415][    C1]  ndisc_send_rs+0x310/0x960
[   85.776010][    C1]  addrconf_rs_timer+0x35a/0x600
[   85.780953][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   85.787021][    C1]  ? _raw_spin_lock_irq+0x95/0xf0
[   85.792051][    C1]  ? _raw_spin_lock_irqsave+0x130/0x130
[   85.797610][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   85.803683][    C1]  call_timer_fn+0x38/0x290
[   85.808198][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   85.814277][    C1]  __run_timers+0x637/0x9a0
[   85.818813][    C1]  ? calc_index+0x200/0x200
[   85.823342][    C1]  ? sched_clock_cpu+0x18/0x3d0
[   85.828197][    C1]  run_timer_softirq+0x6a/0xf0
[   85.832968][    C1]  handle_softirqs+0x250/0x560
[   85.837825][    C1]  __irq_exit_rcu+0x52/0xf0
[   85.842375][    C1]  irq_exit_rcu+0x9/0x10
[   85.846646][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   85.852289][    C1]  </IRQ>
[   85.855231][    C1]  <TASK>
[   85.858173][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   85.864172][    C1] RIP: 0010:kasan_check_range+0xc/0x2a0
[   85.869748][    C1] Code: 8a 05 03 31 c0 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 c0 01 00 00 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 49 89 f8 49 01 f0 0f 82 1d 02
[   85.889463][    C1] RSP: 0018:ffffc90000ca7970 EFLAGS: 00000202
[   85.895544][    C1] RAX: ffffffff81524201 RBX: ffffffff8564bda0 RCX: ffffffff8152421c
[   85.903544][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff86711f80
[   85.911534][    C1] RBP: ffffc90000ca7980 R08: 0000000000000003 R09: 0000000000000004
[   85.919535][    C1] R10: dffffc0000000000 R11: fffffbfff0ce23f0 R12: dffffc0000000000
[   85.927510][    C1] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92000194f34
[   85.935493][    C1]  ? __printk_wait_on_cpu_lock+0x1/0x40
[   85.941056][    C1]  ? __printk_wait_on_cpu_lock+0x1c/0x40
[   85.946721][    C1]  ? __kasan_check_read+0x11/0x20
[   85.951759][    C1]  __printk_wait_on_cpu_lock+0x1c/0x40
[   85.957229][    C1]  dump_stack_lvl+0xce/0x170
[   85.961832][    C1]  ? show_regs_print_info+0x20/0x20
[   85.967038][    C1]  ? prandom_u32+0x24d/0x290
[   85.971644][    C1]  dump_stack+0x15/0x20
[   85.975801][    C1]  should_fail+0x3ab/0x500
[   85.980227][    C1]  __should_failslab+0xa4/0xe0
[   85.984993][    C1]  should_failslab+0x9/0x20
[   85.989506][    C1]  slab_pre_alloc_hook+0x39/0xd0
[   85.994470][    C1]  ? vm_area_dup+0x26/0x210
[   85.998981][    C1]  kmem_cache_alloc+0x44/0x260
[   86.003766][    C1]  vm_area_dup+0x26/0x210
[   86.008251][    C1]  __split_vma+0xac/0x3e0
[   86.012605][    C1]  split_vma+0x7c/0xd0
[   86.016688][    C1]  mprotect_fixup+0x496/0x7d0
[   86.021379][    C1]  ? change_protection+0x1510/0x1510
[   86.026672][    C1]  ? security_file_mprotect+0x84/0xa0
[   86.032057][    C1]  do_mprotect_pkey+0x72c/0xad0
[   86.036983][    C1]  ? prot_none_test+0x10/0x10
[   86.041677][    C1]  ? debug_smp_processor_id+0x17/0x20
[   86.047067][    C1]  __x64_sys_mprotect+0x80/0x90
[   86.051930][    C1]  x64_sys_call+0x912/0x9a0
[   86.056444][    C1]  do_syscall_64+0x4c/0xa0
[   86.060870][    C1]  ? clear_bhb_loop+0x50/0xa0
[   86.065562][    C1]  ? clear_bhb_loop+0x50/0xa0
[   86.070250][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   86.076153][    C1] RIP: 0033:0x7f58fe9a2d97
[   86.080579][    C1] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.100202][    C1] RSP: 002b:00007ffd9228f4c8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[   86.108638][    C1] RAX: ffffffffffffffda RBX: 00007f58fd3ba6c0 RCX: 00007f58fe9a2d97
[   86.116623][    C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f58fd39b000
[   86.124606][    C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[   86.132590][    C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd9228f620
[   86.140592][    C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[   86.148601][    C1]  </TASK>
[   86.151719][    C0] CPU: 0 PID: 277 Comm: syz-executor Not tainted syzkaller #0
[   86.153872][    C1] FAULT_INJECTION: forcing a failure.
[   86.153872][    C1] name failslab, interval 1, probability 10, space 0, times 8
[   86.159196][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   86.159209][    C0] Call Trace:
[   86.159216][    C0]  <IRQ>
[   86.159223][    C0]  __dump_stack+0x21/0x30
[   86.192462][    C0]  dump_stack_lvl+0x110/0x170
[   86.197149][    C0]  ? show_regs_print_info+0x20/0x20
[   86.202353][    C0]  ? prandom_u32+0x24d/0x290
[   86.206951][    C0]  dump_stack+0x15/0x20
[   86.211116][    C0]  should_fail+0x3ab/0x500
[   86.215540][    C0]  __should_failslab+0xa4/0xe0
[   86.220330][    C0]  should_failslab+0x9/0x20
[   86.224841][    C0]  slab_pre_alloc_hook+0x39/0xd0
[   86.229800][    C0]  kmem_cache_alloc_trace+0x48/0x270
[   86.235099][    C0]  ? dst_cow_metrics_generic+0x55/0x1c0
[   86.240656][    C0]  dst_cow_metrics_generic+0x55/0x1c0
[   86.246037][    C0]  icmp6_dst_alloc+0x35f/0x520
[   86.250812][    C0]  ndisc_send_skb+0x2a9/0xcf0
[   86.255520][    C0]  ? ndisc_alloc_skb+0x290/0x290
[   86.260469][    C0]  ? ndisc_send_rs+0x61f/0x960
[   86.265241][    C0]  ? memcpy+0x56/0x70
[   86.269275][    C0]  ndisc_send_rs+0x711/0x960
[   86.273874][    C0]  addrconf_rs_timer+0x35a/0x600
[   86.278824][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   86.284896][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   86.290967][    C0]  call_timer_fn+0x38/0x290
[   86.295503][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   86.301617][    C0]  __run_timers+0x637/0x9a0
[   86.306160][    C0]  ? calc_index+0x200/0x200
[   86.310681][    C0]  run_timer_softirq+0x6a/0xf0
[   86.315457][    C0]  handle_softirqs+0x250/0x560
[   86.320237][    C0]  __do_softirq+0xb/0xd
[   86.324405][    C0]  do_softirq+0xdc/0x130
[   86.328670][    C0]  </IRQ>
[   86.331612][    C0]  <TASK>
[   86.334551][    C0]  ? __local_bh_enable_ip+0x80/0x80
[   86.339756][    C0]  ? _raw_spin_lock_bh+0x94/0xf0
[   86.344706][    C0]  ? _raw_spin_lock_irq+0xf0/0xf0
[   86.349747][    C0]  __local_bh_enable_ip+0x75/0x80
[   86.354783][    C0]  _raw_spin_unlock_bh+0x51/0x60
[   86.359811][    C0]  lock_sock_nested+0x217/0x2a0
[   86.364693][    C0]  ? sock_init_data+0xc0/0xc0
[   86.369389][    C0]  ? avc_has_perm+0x163/0x250
[   86.374084][    C0]  tcp_recvmsg+0x213/0x770
[   86.378517][    C0]  ? tcp_recv_timestamp+0x720/0x720
[   86.383735][    C0]  ? selinux_socket_sendmsg+0x340/0x340
[   86.389291][    C0]  inet_recvmsg+0x13a/0x470
[   86.393810][    C0]  ? inet_sendpage+0x100/0x100
[   86.398671][    C0]  ? security_socket_recvmsg+0x87/0xb0
[   86.404141][    C0]  sock_read_iter+0x2c2/0x380
[   86.408827][    C0]  ? kernel_sock_ip_overhead+0x290/0x290
[   86.414481][    C0]  ? memset+0x35/0x40
[   86.418495][    C0]  ? iov_iter_init+0xbc/0x180
[   86.423268][    C0]  vfs_read+0x6c0/0xc20
[   86.427431][    C0]  ? kernel_read+0x1f0/0x1f0
[   86.432032][    C0]  ? net_rx_action+0x85b/0x910
[   86.436809][    C0]  ? __kasan_check_read+0x11/0x20
[   86.441842][    C0]  ? __fdget_pos+0x1f7/0x380
[   86.446438][    C0]  ksys_read+0x14a/0x260
[   86.450688][    C0]  ? vfs_write+0xfd0/0xfd0
[   86.455111][    C0]  ? __kasan_check_write+0x14/0x20
[   86.460245][    C0]  ? switch_fpu_return+0x15d/0x2c0
[   86.465366][    C0]  __x64_sys_read+0x7b/0x90
[   86.469881][    C0]  x64_sys_call+0x96d/0x9a0
[   86.474395][    C0]  do_syscall_64+0x4c/0xa0
[   86.478821][    C0]  ? clear_bhb_loop+0x50/0xa0
[   86.483616][    C0]  ? clear_bhb_loop+0x50/0xa0
[   86.488306][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   86.494213][    C0] RIP: 0033:0x7f8149096117
[   86.498655][    C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   86.518402][    C0] RSP: 002b:00007fff711ed780 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[   86.526832][    C0] RAX: ffffffffffffffda RBX: 00005555786ba500 RCX: 00007f8149096117
[   86.534817][    C0] RDX: 0000000000000004 RSI: 00007fff711ed7dc RDI: 0000000000000003
[   86.542805][    C0] RBP: 00007fff711edc80 R08: 0000000000000000 R09: 0000000000000000
[   86.550799][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[   86.558785][    C0] R13: 00007fff711ed7dc R14: 00007fff711ed870 R15: 0000000000000000
[   86.566763][    C0]  </TASK>
[   86.569794][    C1] CPU: 1 PID: 854 Comm: syz.5.200 Not tainted syzkaller #0
[   86.570010][    C0] FAULT_INJECTION: forcing a failure.
[   86.570010][    C0] name failslab, interval 1, probability 10, space 0, times 7
[   86.577014][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   86.599753][    C1] Call Trace:
[   86.603044][    C1]  <IRQ>
[   86.605896][    C1]  __dump_stack+0x21/0x30
[   86.610238][    C1]  dump_stack_lvl+0x110/0x170
[   86.614926][    C1]  ? show_regs_print_info+0x20/0x20
[   86.620129][    C1]  ? prandom_u32+0x24d/0x290
[   86.624734][    C1]  dump_stack+0x15/0x20
[   86.628917][    C1]  should_fail+0x3ab/0x500
[   86.633353][    C1]  __should_failslab+0xa4/0xe0
[   86.638131][    C1]  should_failslab+0x9/0x20
[   86.642654][    C1]  slab_pre_alloc_hook+0x39/0xd0
[   86.647640][    C1]  ? dst_alloc+0x15c/0x1d0
[   86.652069][    C1]  kmem_cache_alloc+0x44/0x260
[   86.656878][    C1]  ? ipv6_sysctl_rtcache_flush+0x100/0x100
[   86.662714][    C1]  dst_alloc+0x15c/0x1d0
[   86.666975][    C1]  icmp6_dst_alloc+0xec/0x520
[   86.671660][    C1]  ? security_sk_classify_flow+0x7b/0x90
[   86.677306][    C1]  ? icmpv6_flow_init+0xd2/0x130
[   86.682259][    C1]  ndisc_send_skb+0x2a9/0xcf0
[   86.686952][    C1]  ? do_mprotect_pkey+0x72c/0xad0
[   86.691988][    C1]  ? __x64_sys_mprotect+0x80/0x90
[   86.697032][    C1]  ? x64_sys_call+0x912/0x9a0
[   86.701717][    C1]  ? do_syscall_64+0x4c/0xa0
[   86.706321][    C1]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   86.712407][    C1]  ? ndisc_alloc_skb+0x290/0x290
[   86.717362][    C1]  ? ndisc_send_rs+0x61f/0x960
[   86.722155][    C1]  ? memcpy+0x56/0x70
[   86.726151][    C1]  ndisc_send_rs+0x711/0x960
[   86.730754][    C1]  addrconf_rs_timer+0x35a/0x600
[   86.735699][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   86.741800][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   86.747873][    C1]  call_timer_fn+0x38/0x290
[   86.752393][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   86.758463][    C1]  __run_timers+0x637/0x9a0
[   86.762981][    C1]  ? calc_index+0x200/0x200
[   86.767498][    C1]  ? sched_clock_cpu+0x18/0x3d0
[   86.772380][    C1]  run_timer_softirq+0x6a/0xf0
[   86.777153][    C1]  handle_softirqs+0x250/0x560
[   86.781934][    C1]  __irq_exit_rcu+0x52/0xf0
[   86.786454][    C1]  irq_exit_rcu+0x9/0x10
[   86.790711][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   86.796360][    C1]  </IRQ>
[   86.799298][    C1]  <TASK>
[   86.802232][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   86.808224][    C1] RIP: 0010:kasan_check_range+0xc/0x2a0
[   86.814248][    C1] Code: 8a 05 03 31 c0 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 c0 01 00 00 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 49 89 f8 49 01 f0 0f 82 1d 02
[   86.833871][    C1] RSP: 0018:ffffc90000ca7970 EFLAGS: 00000202
[   86.839948][    C1] RAX: ffffffff81524201 RBX: ffffffff8564bda0 RCX: ffffffff8152421c
[   86.847935][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff86711f80
[   86.855924][    C1] RBP: ffffc90000ca7980 R08: 0000000000000003 R09: 0000000000000004
[   86.863908][    C1] R10: dffffc0000000000 R11: fffffbfff0ce23f0 R12: dffffc0000000000
[   86.871893][    C1] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92000194f34
[   86.879879][    C1]  ? __printk_wait_on_cpu_lock+0x1/0x40
[   86.885438][    C1]  ? __printk_wait_on_cpu_lock+0x1c/0x40
[   86.891081][    C1]  ? __kasan_check_read+0x11/0x20
[   86.896116][    C1]  __printk_wait_on_cpu_lock+0x1c/0x40
[   86.901593][    C1]  dump_stack_lvl+0xce/0x170
[   86.906190][    C1]  ? show_regs_print_info+0x20/0x20
[   86.911396][    C1]  ? prandom_u32+0x24d/0x290
[   86.916001][    C1]  dump_stack+0x15/0x20
[   86.920173][    C1]  should_fail+0x3ab/0x500
[   86.924600][    C1]  __should_failslab+0xa4/0xe0
[   86.929376][    C1]  should_failslab+0x9/0x20
[   86.933890][    C1]  slab_pre_alloc_hook+0x39/0xd0
[   86.938835][    C1]  ? vm_area_dup+0x26/0x210
[   86.943352][    C1]  kmem_cache_alloc+0x44/0x260
[   86.948133][    C1]  vm_area_dup+0x26/0x210
[   86.952473][    C1]  __split_vma+0xac/0x3e0
[   86.956822][    C1]  split_vma+0x7c/0xd0
[   86.960902][    C1]  mprotect_fixup+0x496/0x7d0
[   86.965587][    C1]  ? change_protection+0x1510/0x1510
[   86.970876][    C1]  ? security_file_mprotect+0x84/0xa0
[   86.976266][    C1]  do_mprotect_pkey+0x72c/0xad0
[   86.981131][    C1]  ? prot_none_test+0x10/0x10
[   86.985921][    C1]  ? debug_smp_processor_id+0x17/0x20
[   86.991394][    C1]  __x64_sys_mprotect+0x80/0x90
[   86.996269][    C1]  x64_sys_call+0x912/0x9a0
[   87.000820][    C1]  do_syscall_64+0x4c/0xa0
[   87.005252][    C1]  ? clear_bhb_loop+0x50/0xa0
[   87.009937][    C1]  ? clear_bhb_loop+0x50/0xa0
[   87.014637][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   87.020534][    C1] RIP: 0033:0x7f58fe9a2d97
[   87.024965][    C1] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.044577][    C1] RSP: 002b:00007ffd9228f4c8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[   87.053006][    C1] RAX: ffffffffffffffda RBX: 00007f58fd3ba6c0 RCX: 00007f58fe9a2d97
[   87.061000][    C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f58fd39b000
[   87.068982][    C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[   87.076955][    C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd9228f620
[   87.084970][    C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[   87.092959][    C1]  </TASK>
[   87.095995][    C0] CPU: 0 PID: 277 Comm: syz-executor Not tainted syzkaller #0
[   87.097094][    C1] FAULT_INJECTION: forcing a failure.
[   87.097094][    C1] name failslab, interval 1, probability 10, space 0, times 6
[   87.103495][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   87.103509][    C0] Call Trace:
[   87.103516][    C0]  <IRQ>
[   87.103523][    C0]  __dump_stack+0x21/0x30
[   87.136717][    C0]  dump_stack_lvl+0x110/0x170
[   87.141405][    C0]  ? show_regs_print_info+0x20/0x20
[   87.146637][    C0]  dump_stack+0x15/0x20
[   87.150811][    C0]  should_fail+0x3ab/0x500
[   87.155238][    C0]  ? ndisc_send_rs+0x310/0x960
[   87.160021][    C0]  __should_failslab+0xa4/0xe0
[   87.164797][    C0]  should_failslab+0x9/0x20
[   87.169312][    C0]  slab_pre_alloc_hook+0x39/0xd0
[   87.174266][    C0]  ? ndisc_send_rs+0x310/0x960
[   87.179047][    C0]  ? ndisc_send_rs+0x310/0x960
[   87.183817][    C0]  __kmalloc_track_caller+0x6c/0x2c0
[   87.189126][    C0]  ? ndisc_send_rs+0x310/0x960
[   87.193914][    C0]  ? ndisc_send_rs+0x310/0x960
[   87.198690][    C0]  __alloc_skb+0x210/0x730
[   87.203134][    C0]  ndisc_send_rs+0x310/0x960
[   87.207730][    C0]  addrconf_rs_timer+0x35a/0x600
[   87.212678][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   87.218785][    C0]  ? _raw_spin_lock_irq+0x95/0xf0
[   87.223823][    C0]  ? _raw_spin_lock_irqsave+0x130/0x130
[   87.229379][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   87.235454][    C0]  call_timer_fn+0x38/0x290
[   87.239973][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   87.246148][    C0]  __run_timers+0x637/0x9a0
[   87.250666][    C0]  ? calc_index+0x200/0x200
[   87.255174][    C0]  run_timer_softirq+0x6a/0xf0
[   87.259947][    C0]  handle_softirqs+0x250/0x560
[   87.264721][    C0]  __do_softirq+0xb/0xd
[   87.268880][    C0]  do_softirq+0xdc/0x130
[   87.273120][    C0]  </IRQ>
[   87.276054][    C0]  <TASK>
[   87.278995][    C0]  ? __local_bh_enable_ip+0x80/0x80
[   87.284202][    C0]  ? _raw_spin_lock_bh+0x94/0xf0
[   87.289170][    C0]  ? _raw_spin_lock_irq+0xf0/0xf0
[   87.294220][    C0]  __local_bh_enable_ip+0x75/0x80
[   87.299253][    C0]  _raw_spin_unlock_bh+0x51/0x60
[   87.304195][    C0]  lock_sock_nested+0x217/0x2a0
[   87.309074][    C0]  ? sock_init_data+0xc0/0xc0
[   87.313800][    C0]  ? avc_has_perm+0x163/0x250
[   87.318532][    C0]  tcp_recvmsg+0x213/0x770
[   87.322963][    C0]  ? tcp_recv_timestamp+0x720/0x720
[   87.328181][    C0]  ? selinux_socket_sendmsg+0x340/0x340
[   87.333751][    C0]  inet_recvmsg+0x13a/0x470
[   87.338266][    C0]  ? inet_sendpage+0x100/0x100
[   87.343041][    C0]  ? security_socket_recvmsg+0x87/0xb0
[   87.348520][    C0]  sock_read_iter+0x2c2/0x380
[   87.353208][    C0]  ? kernel_sock_ip_overhead+0x290/0x290
[   87.358855][    C0]  ? memset+0x35/0x40
[   87.362849][    C0]  ? iov_iter_init+0xbc/0x180
[   87.367545][    C0]  vfs_read+0x6c0/0xc20
[   87.371725][    C0]  ? kernel_read+0x1f0/0x1f0
[   87.376331][    C0]  ? net_rx_action+0x85b/0x910
[   87.381104][    C0]  ? __kasan_check_read+0x11/0x20
[   87.386138][    C0]  ? __fdget_pos+0x1f7/0x380
[   87.390741][    C0]  ksys_read+0x14a/0x260
[   87.394996][    C0]  ? vfs_write+0xfd0/0xfd0
[   87.399422][    C0]  ? __kasan_check_write+0x14/0x20
[   87.404543][    C0]  ? switch_fpu_return+0x15d/0x2c0
[   87.409667][    C0]  __x64_sys_read+0x7b/0x90
[   87.414183][    C0]  x64_sys_call+0x96d/0x9a0
[   87.418696][    C0]  do_syscall_64+0x4c/0xa0
[   87.423116][    C0]  ? clear_bhb_loop+0x50/0xa0
[   87.427794][    C0]  ? clear_bhb_loop+0x50/0xa0
[   87.432471][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   87.438367][    C0] RIP: 0033:0x7f8149096117
[   87.442790][    C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   87.462402][    C0] RSP: 002b:00007fff711ed780 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[   87.470856][    C0] RAX: ffffffffffffffda RBX: 00005555786ba500 RCX: 00007f8149096117
[   87.478838][    C0] RDX: 0000000000000004 RSI: 00007fff711ed7dc RDI: 0000000000000003
[   87.486839][    C0] RBP: 00007fff711edc80 R08: 0000000000000000 R09: 0000000000000000
[   87.494825][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[   87.502798][    C0] R13: 00007fff711ed7dc R14: 00007fff711ed870 R15: 0000000000000000
[   87.510774][    C0]  </TASK>
[   87.513807][    C1] CPU: 1 PID: 854 Comm: syz.5.200 Not tainted syzkaller #0
[   87.514508][    C0] FAULT_INJECTION: forcing a failure.
[   87.514508][    C0] name failslab, interval 1, probability 10, space 0, times 5
[   87.521031][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   87.521048][    C1] Call Trace:
[   87.521056][    C1]  <IRQ>
[   87.521064][    C1]  __dump_stack+0x21/0x30
[   87.554259][    C1]  dump_stack_lvl+0x110/0x170
[   87.558951][    C1]  ? show_regs_print_info+0x20/0x20
[   87.564167][    C1]  ? prandom_u32+0x24d/0x290
[   87.568769][    C1]  dump_stack+0x15/0x20
[   87.572925][    C1]  should_fail+0x3ab/0x500
[   87.577368][    C1]  __should_failslab+0xa4/0xe0
[   87.582165][    C1]  should_failslab+0x9/0x20
[   87.586678][    C1]  slab_pre_alloc_hook+0x39/0xd0
[   87.591639][    C1]  ? __alloc_skb+0xe4/0x730
[   87.596157][    C1]  kmem_cache_alloc+0x44/0x260
[   87.600930][    C1]  __alloc_skb+0xe4/0x730
[   87.605264][    C1]  ndisc_send_rs+0x310/0x960
[   87.609865][    C1]  addrconf_rs_timer+0x35a/0x600
[   87.614822][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   87.620926][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   87.627005][    C1]  call_timer_fn+0x38/0x290
[   87.631517][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   87.637595][    C1]  __run_timers+0x637/0x9a0
[   87.642112][    C1]  ? calc_index+0x200/0x200
[   87.646624][    C1]  ? sched_clock_cpu+0x18/0x3d0
[   87.651490][    C1]  run_timer_softirq+0x6a/0xf0
[   87.656261][    C1]  handle_softirqs+0x250/0x560
[   87.661042][    C1]  __irq_exit_rcu+0x52/0xf0
[   87.665551][    C1]  irq_exit_rcu+0x9/0x10
[   87.669801][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   87.675448][    C1]  </IRQ>
[   87.678501][    C1]  <TASK>
[   87.681449][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   87.687440][    C1] RIP: 0010:kasan_check_range+0xc/0x2a0
[   87.693078][    C1] Code: 8a 05 03 31 c0 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 c0 01 00 00 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 49 89 f8 49 01 f0 0f 82 1d 02
[   87.712686][    C1] RSP: 0018:ffffc90000ca7970 EFLAGS: 00000202
[   87.718761][    C1] RAX: ffffffff81524201 RBX: ffffffff8564bda0 RCX: ffffffff8152421c
[   87.726750][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff86711f80
[   87.734731][    C1] RBP: ffffc90000ca7980 R08: 0000000000000003 R09: 0000000000000004
[   87.742729][    C1] R10: dffffc0000000000 R11: fffffbfff0ce23f0 R12: dffffc0000000000
[   87.750722][    C1] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92000194f34
[   87.758716][    C1]  ? __printk_wait_on_cpu_lock+0x1/0x40
[   87.764274][    C1]  ? __printk_wait_on_cpu_lock+0x1c/0x40
[   87.769918][    C1]  ? __kasan_check_read+0x11/0x20
[   87.774957][    C1]  __printk_wait_on_cpu_lock+0x1c/0x40
[   87.780430][    C1]  dump_stack_lvl+0xce/0x170
[   87.785034][    C1]  ? show_regs_print_info+0x20/0x20
[   87.790245][    C1]  ? prandom_u32+0x24d/0x290
[   87.794864][    C1]  dump_stack+0x15/0x20
[   87.799028][    C1]  should_fail+0x3ab/0x500
[   87.803458][    C1]  __should_failslab+0xa4/0xe0
[   87.808244][    C1]  should_failslab+0x9/0x20
[   87.812755][    C1]  slab_pre_alloc_hook+0x39/0xd0
[   87.817709][    C1]  ? vm_area_dup+0x26/0x210
[   87.822226][    C1]  kmem_cache_alloc+0x44/0x260
[   87.826997][    C1]  vm_area_dup+0x26/0x210
[   87.831338][    C1]  __split_vma+0xac/0x3e0
[   87.835688][    C1]  split_vma+0x7c/0xd0
[   87.839793][    C1]  mprotect_fixup+0x496/0x7d0
[   87.844476][    C1]  ? change_protection+0x1510/0x1510
[   87.849782][    C1]  ? security_file_mprotect+0x84/0xa0
[   87.855273][    C1]  do_mprotect_pkey+0x72c/0xad0
[   87.860135][    C1]  ? prot_none_test+0x10/0x10
[   87.864822][    C1]  ? debug_smp_processor_id+0x17/0x20
[   87.870208][    C1]  __x64_sys_mprotect+0x80/0x90
[   87.875075][    C1]  x64_sys_call+0x912/0x9a0
[   87.879587][    C1]  do_syscall_64+0x4c/0xa0
[   87.884007][    C1]  ? clear_bhb_loop+0x50/0xa0
[   87.888686][    C1]  ? clear_bhb_loop+0x50/0xa0
[   87.893382][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   87.899294][    C1] RIP: 0033:0x7f58fe9a2d97
[   87.903719][    C1] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.923337][    C1] RSP: 002b:00007ffd9228f4c8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[   87.931757][    C1] RAX: ffffffffffffffda RBX: 00007f58fd3ba6c0 RCX: 00007f58fe9a2d97
[   87.939738][    C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f58fd39b000
[   87.947718][    C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[   87.955703][    C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd9228f620
[   87.963705][    C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[   87.971686][    C1]  </TASK>
[   87.974713][    C0] CPU: 0 PID: 277 Comm: syz-executor Not tainted syzkaller #0
[   87.975233][    C1] FAULT_INJECTION: forcing a failure.
[   87.975233][    C1] name failslab, interval 1, probability 10, space 0, times 4
[   87.982184][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   87.982203][    C0] Call Trace:
[   87.982210][    C0]  <IRQ>
[   88.011212][    C0]  __dump_stack+0x21/0x30
[   88.015556][    C0]  dump_stack_lvl+0x110/0x170
[   88.020234][    C0]  ? show_regs_print_info+0x20/0x20
[   88.025432][    C0]  ? prandom_u32+0x24d/0x290
[   88.030028][    C0]  dump_stack+0x15/0x20
[   88.034202][    C0]  should_fail+0x3ab/0x500
[   88.038622][    C0]  __should_failslab+0xa4/0xe0
[   88.043392][    C0]  should_failslab+0x9/0x20
[   88.047984][    C0]  slab_pre_alloc_hook+0x39/0xd0
[   88.052928][    C0]  ? __alloc_skb+0xe4/0x730
[   88.057438][    C0]  kmem_cache_alloc+0x44/0x260
[   88.062208][    C0]  __alloc_skb+0xe4/0x730
[   88.066551][    C0]  ndisc_send_rs+0x310/0x960
[   88.071152][    C0]  addrconf_rs_timer+0x35a/0x600
[   88.076101][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   88.082177][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   88.088267][    C0]  call_timer_fn+0x38/0x290
[   88.092786][    C0]  ? addrconf_disable_policy_idev+0x360/0x360
[   88.098871][    C0]  __run_timers+0x637/0x9a0
[   88.103389][    C0]  ? calc_index+0x200/0x200
[   88.107896][    C0]  run_timer_softirq+0x6a/0xf0
[   88.112841][    C0]  handle_softirqs+0x250/0x560
[   88.117619][    C0]  __do_softirq+0xb/0xd
[   88.121794][    C0]  do_softirq+0xdc/0x130
[   88.126045][    C0]  </IRQ>
[   88.128986][    C0]  <TASK>
[   88.131933][    C0]  ? __local_bh_enable_ip+0x80/0x80
[   88.137142][    C0]  ? _raw_spin_lock_bh+0x94/0xf0
[   88.142090][    C0]  ? _raw_spin_lock_irq+0xf0/0xf0
[   88.147133][    C0]  __local_bh_enable_ip+0x75/0x80
[   88.152166][    C0]  _raw_spin_unlock_bh+0x51/0x60
[   88.157112][    C0]  lock_sock_nested+0x217/0x2a0
[   88.161971][    C0]  ? sock_init_data+0xc0/0xc0
[   88.166654][    C0]  ? avc_has_perm+0x163/0x250
[   88.171345][    C0]  tcp_recvmsg+0x213/0x770
[   88.175777][    C0]  ? tcp_recv_timestamp+0x720/0x720
[   88.180982][    C0]  ? selinux_socket_sendmsg+0x340/0x340
[   88.186547][    C0]  inet_recvmsg+0x13a/0x470
[   88.191060][    C0]  ? inet_sendpage+0x100/0x100
[   88.195839][    C0]  ? security_socket_recvmsg+0x87/0xb0
[   88.201304][    C0]  sock_read_iter+0x2c2/0x380
[   88.205989][    C0]  ? kernel_sock_ip_overhead+0x290/0x290
[   88.211635][    C0]  ? memset+0x35/0x40
[   88.215641][    C0]  ? iov_iter_init+0xbc/0x180
[   88.220353][    C0]  vfs_read+0x6c0/0xc20
[   88.224541][    C0]  ? kernel_read+0x1f0/0x1f0
[   88.229147][    C0]  ? net_rx_action+0x85b/0x910
[   88.233921][    C0]  ? __kasan_check_read+0x11/0x20
[   88.238980][    C0]  ? __fdget_pos+0x1f7/0x380
[   88.243580][    C0]  ksys_read+0x14a/0x260
[   88.247859][    C0]  ? vfs_write+0xfd0/0xfd0
[   88.252288][    C0]  ? __kasan_check_write+0x14/0x20
[   88.257415][    C0]  ? switch_fpu_return+0x15d/0x2c0
[   88.262551][    C0]  __x64_sys_read+0x7b/0x90
[   88.267063][    C0]  x64_sys_call+0x96d/0x9a0
[   88.271575][    C0]  do_syscall_64+0x4c/0xa0
[   88.276005][    C0]  ? clear_bhb_loop+0x50/0xa0
[   88.280690][    C0]  ? clear_bhb_loop+0x50/0xa0
[   88.285379][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   88.291316][    C0] RIP: 0033:0x7f8149096117
[   88.295761][    C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   88.315377][    C0] RSP: 002b:00007fff711ed780 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[   88.323802][    C0] RAX: ffffffffffffffda RBX: 00005555786ba500 RCX: 00007f8149096117
[   88.331782][    C0] RDX: 0000000000000004 RSI: 00007fff711ed7dc RDI: 0000000000000003
[   88.339765][    C0] RBP: 00007fff711edc80 R08: 0000000000000000 R09: 0000000000000000
[   88.347747][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[   88.355736][    C0] R13: 00007fff711ed7dc R14: 00007fff711ed870 R15: 0000000000000000
[   88.363725][    C0]  </TASK>
[   88.366753][    C1] CPU: 1 PID: 854 Comm: syz.5.200 Not tainted syzkaller #0
[   88.373768][  T139] FAULT_INJECTION: forcing a failure.
[   88.373768][  T139] name failslab, interval 1, probability 10, space 0, times 3
[   88.373975][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   88.396714][    C1] Call Trace:
[   88.400016][    C1]  <IRQ>
[   88.402876][    C1]  __dump_stack+0x21/0x30
[   88.407225][    C1]  dump_stack_lvl+0x110/0x170
[   88.411925][    C1]  ? show_regs_print_info+0x20/0x20
[   88.417137][    C1]  ? prandom_u32+0x24d/0x290
[   88.421743][    C1]  dump_stack+0x15/0x20
[   88.425905][    C1]  should_fail+0x3ab/0x500
[   88.430337][    C1]  __should_failslab+0xa4/0xe0
[   88.435157][  T277] FAULT_INJECTION: forcing a failure.
[   88.435157][  T277] name failslab, interval 1, probability 10, space 0, times 3
[   88.435216][    C1]  should_failslab+0x9/0x20
[   88.451542][  T314] FAULT_INJECTION: forcing a failure.
[   88.451542][  T314] name failslab, interval 1, probability 10, space 0, times 3
[   88.452382][    C1]  slab_pre_alloc_hook+0x39/0xd0
[   88.470076][    C1]  ? dst_alloc+0x15c/0x1d0
[   88.474501][    C1]  kmem_cache_alloc+0x44/0x260
[   88.479276][    C1]  ? ipv6_sysctl_rtcache_flush+0x100/0x100
[   88.485080][    C1]  dst_alloc+0x15c/0x1d0
[   88.489354][    C1]  icmp6_dst_alloc+0xec/0x520
[   88.494051][    C1]  ? security_sk_classify_flow+0x7b/0x90
[   88.499688][    C1]  ? icmpv6_flow_init+0xd2/0x130
[   88.504639][    C1]  ndisc_send_skb+0x2a9/0xcf0
[   88.509323][    C1]  ? do_mprotect_pkey+0x72c/0xad0
[   88.514363][    C1]  ? __x64_sys_mprotect+0x80/0x90
[   88.519402][    C1]  ? x64_sys_call+0x912/0x9a0
[   88.524091][    C1]  ? do_syscall_64+0x4c/0xa0
[   88.528686][    C1]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   88.534774][    C1]  ? ndisc_alloc_skb+0x290/0x290
[   88.539738][    C1]  ? skb_put+0x10a/0x1f0
[   88.543986][    C1]  ndisc_send_rs+0x711/0x960
[   88.548584][    C1]  ? ndisc_send_rs+0x131/0x960
[   88.553369][    C1]  addrconf_rs_timer+0x35a/0x600
[   88.558310][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   88.564388][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   88.570480][    C1]  call_timer_fn+0x38/0x290
[   88.574994][    C1]  ? addrconf_disable_policy_idev+0x360/0x360
[   88.581073][    C1]  __run_timers+0x637/0x9a0
[   88.585589][    C1]  ? calc_index+0x200/0x200
[   88.590098][    C1]  ? sched_clock_cpu+0x18/0x3d0
[   88.594956][    C1]  run_timer_softirq+0x6a/0xf0
[   88.599727][    C1]  handle_softirqs+0x250/0x560
[   88.604504][    C1]  __irq_exit_rcu+0x52/0xf0
[   88.609128][    C1]  irq_exit_rcu+0x9/0x10
[   88.613385][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   88.619022][    C1]  </IRQ>
[   88.621960][    C1]  <TASK>
[   88.624897][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   88.630885][    C1] RIP: 0010:kasan_check_range+0xc/0x2a0
[   88.636438][    C1] Code: 8a 05 03 31 c0 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 c0 01 00 00 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 49 89 f8 49 01 f0 0f 82 1d 02
[   88.656076][    C1] RSP: 0018:ffffc90000ca7970 EFLAGS: 00000202
[   88.662158][    C1] RAX: ffffffff81524201 RBX: ffffffff8564bda0 RCX: ffffffff8152421c
[   88.670136][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff86711f80
[   88.678127][    C1] RBP: ffffc90000ca7980 R08: 0000000000000003 R09: 0000000000000004
[   88.686098][    C1] R10: dffffc0000000000 R11: fffffbfff0ce23f0 R12: dffffc0000000000
[   88.694078][    C1] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92000194f34
[   88.702060][    C1]  ? __printk_wait_on_cpu_lock+0x1/0x40
[   88.707613][    C1]  ? __printk_wait_on_cpu_lock+0x1c/0x40
[   88.713250][    C1]  ? __kasan_check_read+0x11/0x20
[   88.718289][    C1]  __printk_wait_on_cpu_lock+0x1c/0x40
[   88.723756][    C1]  dump_stack_lvl+0xce/0x170
[   88.728359][    C1]  ? show_regs_print_info+0x20/0x20
[   88.733563][    C1]  ? prandom_u32+0x24d/0x290
[   88.738162][    C1]  dump_stack+0x15/0x20
[   88.742327][    C1]  should_fail+0x3ab/0x500
[   88.746757][    C1]  __should_failslab+0xa4/0xe0
[   88.751534][    C1]  should_failslab+0x9/0x20
[   88.756043][    C1]  slab_pre_alloc_hook+0x39/0xd0
[   88.760994][    C1]  ? vm_area_dup+0x26/0x210
[   88.765509][    C1]  kmem_cache_alloc+0x44/0x260
[   88.770283][    C1]  vm_area_dup+0x26/0x210
[   88.774736][    C1]  __split_vma+0xac/0x3e0
[   88.779076][    C1]  split_vma+0x7c/0xd0
[   88.783149][    C1]  mprotect_fixup+0x496/0x7d0
[   88.787828][    C1]  ? change_protection+0x1510/0x1510
[   88.793121][    C1]  ? security_file_mprotect+0x84/0xa0
[   88.798503][    C1]  do_mprotect_pkey+0x72c/0xad0
[   88.803359][    C1]  ? prot_none_test+0x10/0x10
[   88.808052][    C1]  ? debug_smp_processor_id+0x17/0x20
[   88.813430][    C1]  __x64_sys_mprotect+0x80/0x90
[   88.818297][    C1]  x64_sys_call+0x912/0x9a0
[   88.822805][    C1]  do_syscall_64+0x4c/0xa0
[   88.827225][    C1]  ? clear_bhb_loop+0x50/0xa0
[   88.831906][    C1]  ? clear_bhb_loop+0x50/0xa0
[   88.836618][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   88.842521][    C1] RIP: 0033:0x7f58fe9a2d97
[   88.846960][    C1] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.866731][    C1] RSP: 002b:00007ffd9228f4c8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[   88.875163][    C1] RAX: ffffffffffffffda RBX: 00007f58fd3ba6c0 RCX: 00007f58fe9a2d97
[   88.883235][    C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f58fd39b000
[   88.891225][    C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[   88.899206][    C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd9228f620
[   88.907201][    C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[   88.915184][    C1]  </TASK>
[   88.918218][  T314] CPU: 0 PID: 314 Comm: kworker/0:4 Not tainted syzkaller #0
[   88.922452][    C1] FAULT_INJECTION: forcing a failure.
[   88.922452][    C1] name failslab, interval 1, probability 10, space 0, times 2
[   88.925625][  T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   88.948461][  T314] Workqueue: events_power_efficient neigh_periodic_work
[   88.955419][  T314] Call Trace:
[   88.958730][  T314]  <TASK>
[   88.961671][  T314]  __dump_stack+0x21/0x30
[   88.966014][  T314]  dump_stack_lvl+0x110/0x170
[   88.970712][  T314]  ? show_regs_print_info+0x20/0x20
[   88.975924][  T314]  ? prandom_u32+0x24d/0x290
[   88.980525][  T314]  dump_stack+0x15/0x20
[   88.984683][  T314]  should_fail+0x3ab/0x500
[   88.989115][  T314]  ? __neigh_notify+0x84/0x130
[   88.993903][  T314]  __should_failslab+0xa4/0xe0
[   88.998677][  T314]  should_failslab+0x9/0x20
[   89.003193][  T314]  slab_pre_alloc_hook+0x39/0xd0
[   89.008156][  T314]  ? __neigh_notify+0x84/0x130
[   89.012930][  T314]  ? __neigh_notify+0x84/0x130
[   89.017812][  T314]  __kmalloc_track_caller+0x6c/0x2c0
[   89.023132][  T314]  ? __neigh_notify+0x84/0x130
[   89.027902][  T314]  ? __neigh_notify+0x84/0x130
[   89.032684][  T314]  __alloc_skb+0x210/0x730
[   89.037110][  T314]  __neigh_notify+0x84/0x130
[   89.041711][  T314]  neigh_cleanup_and_release+0x2c/0x1a0
[   89.047264][  T314]  neigh_periodic_work+0x891/0xaa0
[   89.052384][  T314]  process_one_work+0x6c8/0xbb0
[   89.057270][  T314]  worker_thread+0xaa0/0x1250
[   89.061985][  T314]  ? __kasan_check_read+0x11/0x20
[   89.067040][  T314]  kthread+0x3f5/0x4f0
[   89.071128][  T314]  ? worker_clr_flags+0x190/0x190
[   89.076187][  T314]  ? kthread_blkcg+0xd0/0xd0
[   89.080789][  T314]  ret_from_fork+0x1f/0x30
[   89.085226][  T314]  </TASK>
[   89.088294][    C1] CPU: 1 PID: 295 Comm: kworker/1:2 Not tainted syzkaller #0
[   89.095692][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   89.105797][    C1] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker
[   89.112337][    C1] Call Trace:
[   89.115623][    C1]  <IRQ>
[   89.118472][    C1]  __dump_stack+0x21/0x30
[   89.122823][    C1]  dump_stack_lvl+0x110/0x170
[   89.127505][    C1]  ? show_regs_print_info+0x20/0x20
[   89.132715][    C1]  ? prandom_u32+0x24d/0x290
[   89.137320][    C1]  dump_stack+0x15/0x20
[   89.141514][    C1]  should_fail+0x3ab/0x500
[   89.145951][    C1]  __should_failslab+0xa4/0xe0
[   89.150736][    C1]  should_failslab+0x9/0x20
[   89.155259][    C1]  slab_pre_alloc_hook+0x39/0xd0
[   89.160213][    C1]  ? skb_clone+0x1c7/0x370
[   89.164634][    C1]  kmem_cache_alloc+0x44/0x260
[   89.169412][    C1]  skb_clone+0x1c7/0x370
[   89.173687][    C1]  br_flood+0x387/0x420
[   89.177860][    C1]  br_handle_frame_finish+0xe29/0x1130
[   89.183330][    C1]  ? __local_bh_enable_ip+0x75/0x80
[   89.188539][    C1]  ? _raw_spin_unlock_bh+0x51/0x60
[   89.193666][    C1]  ? wg_packet_decrypt_worker+0x2af/0xda0
[   89.199403][    C1]  ? brport_get_ownership+0x80/0x80
[   89.204619][    C1]  br_handle_frame+0x61a/0xfd0
[   89.209394][    C1]  ? kasan_quarantine_put+0x34/0x190
[   89.214689][    C1]  ? br_get_rx_handler+0x20/0x20
[   89.219636][    C1]  ? kmem_cache_free+0x100/0x320
[   89.224602][    C1]  ? br_get_rx_handler+0x20/0x20
[   89.229549][    C1]  __netif_receive_skb_core+0xe6c/0x2fb0
[   89.235193][    C1]  ? kfree_skb+0xc1/0x2f0
[   89.239532][    C1]  ? set_rps_cpu+0x5d0/0x5d0
[   89.244128][    C1]  ? ipv6_rcv+0xed/0x230
[   89.248371][    C1]  ? ip6_rcv_finish+0x360/0x360
[   89.253233][    C1]  ? refcount_add+0x80/0x80
[   89.257747][    C1]  ? __kasan_check_write+0x14/0x20
[   89.262869][    C1]  __netif_receive_skb+0x72/0x280
[   89.267905][    C1]  process_backlog+0x351/0x600
[   89.272713][    C1]  __napi_poll+0xbb/0x580
[   89.277056][    C1]  net_rx_action+0x37f/0x910
[   89.281658][    C1]  ? net_tx_action+0x520/0x520
[   89.286439][    C1]  ? sched_clock_cpu+0x18/0x3d0
[   89.291298][    C1]  handle_softirqs+0x250/0x560
[   89.296073][    C1]  __do_softirq+0xb/0xd
[   89.300237][    C1]  do_softirq+0xdc/0x130
[   89.304487][    C1]  </IRQ>
[   89.307425][    C1]  <TASK>
[   89.310362][    C1]  ? __local_bh_enable_ip+0x80/0x80
[   89.315575][    C1]  ? _raw_spin_lock_bh+0x94/0xf0
[   89.320522][    C1]  ? _raw_spin_lock_irq+0xf0/0xf0
[   89.325556][    C1]  ? stack_trace_save+0xf0/0xf0
[   89.330417][    C1]  __local_bh_enable_ip+0x75/0x80
[   89.335450][    C1]  _raw_spin_unlock_bh+0x51/0x60
[   89.340408][    C1]  wg_packet_decrypt_worker+0x2af/0xda0
[   89.345976][    C1]  ? __update_load_avg_cfs_rq+0xb1/0x2e0
[   89.351624][    C1]  ? wg_packet_rx_poll+0x1b40/0x1b40
[   89.356923][    C1]  ? __kasan_slab_free+0x11/0x20
[   89.361882][    C1]  ? slab_free_freelist_hook+0xc2/0x190
[   89.367542][    C1]  ? destroy_list_workfn+0x1d5/0x280
[   89.372827][    C1]  ? enqueue_task_fair+0xaf1/0x2130
[   89.378058][    C1]  ? sched_group_set_idle+0x600/0x600
[   89.383480][    C1]  ? psi_task_change+0x213/0x370
[   89.388434][    C1]  ? check_preempt_wakeup+0x7d6/0xbb0
[   89.393827][    C1]  ? __this_cpu_preempt_check+0x13/0x20
[   89.399382][    C1]  ? tracing_record_taskinfo+0x7c/0x220
[   89.404965][    C1]  ? probe_sched_wakeup+0x64/0x80
[   89.409995][    C1]  ? ttwu_do_wakeup+0x447/0x470
[   89.414855][    C1]  ? ttwu_do_activate+0x179/0x2a0
[   89.419885][    C1]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[   89.425701][    C1]  ? try_to_wake_up+0x610/0x1150
[   89.430675][    C1]  process_one_work+0x6c8/0xbb0
[   89.435534][    C1]  worker_thread+0xaa0/0x1250
[   89.440219][    C1]  ? __kasan_check_read+0x11/0x20
[   89.445255][    C1]  kthread+0x3f5/0x4f0
[   89.449333][    C1]  ? worker_clr_flags+0x190/0x190
[   89.454366][    C1]  ? kthread_blkcg+0xd0/0xd0
[   89.458967][    C1]  ret_from_fork+0x1f/0x30
[   89.463390][    C1]  </TASK>
[   89.466437][  T313] CPU: 0 PID: 313 Comm: kworker/u4:4 Not tainted syzkaller #0
[   89.473923][  T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   89.482944][  T101] udevd[101]: could not unlink /run/udev/queue: Cannot allocate memory
[   89.483997][  T313] Workqueue: writeback wb_workfn (flush-8:0)
[   89.498233][  T313] Call Trace:
[   89.501525][  T313]  <TASK>
[   89.504466][  T313]  __dump_stack+0x21/0x30
[   89.508813][  T313]  dump_stack_lvl+0x110/0x170
[   89.513507][  T313]  ? show_regs_print_info+0x20/0x20
[   89.518712][  T313]  ? prandom_u32+0x24d/0x290
[   89.523333][  T313]  dump_stack+0x15/0x20
[   89.527495][  T313]  should_fail+0x3ab/0x500
[   89.531926][  T313]  __should_failslab+0xa4/0xe0
[   89.536705][  T313]  should_failslab+0x9/0x20
[   89.541221][  T313]  slab_pre_alloc_hook+0x39/0xd0
[   89.546173][  T313]  ? mempool_alloc_slab+0x1d/0x30
[   89.551234][  T313]  kmem_cache_alloc+0x44/0x260
[   89.556020][  T313]  ? mempool_free+0x330/0x330
[   89.560836][  T313]  mempool_alloc_slab+0x1d/0x30
[   89.565717][  T313]  mempool_alloc+0x167/0x4c0
[   89.570333][  T313]  ? cgroup_rstat_updated+0xf0/0x360
[   89.575646][  T313]  ? __this_cpu_preempt_check+0x13/0x20
[   89.581260][  T313]  ? __mod_memcg_lruvec_state+0x122/0x1b0
[   89.587053][  T313]  ? mempool_resize+0x880/0x880
[   89.591932][  T313]  ? __test_set_page_writeback+0x670/0x910
[   89.597755][  T313]  bio_alloc_bioset+0x124/0x910
[   89.602627][  T313]  ? __kasan_check_read+0x11/0x20
[   89.607684][  T313]  submit_bh_wbc+0x1c2/0x680
[   89.612294][  T313]  ? page_mkclean+0x209/0x2b0
[   89.616993][  T313]  __block_write_full_page+0x877/0xef0
[   89.622466][  T313]  ? blkdev_fallocate+0x4f0/0x4f0
[   89.627597][  T313]  ? mark_buffer_write_io_error+0x270/0x270
[   89.633517][  T313]  block_write_full_page+0x12f/0x140
[   89.638815][  T313]  ? blkdev_fallocate+0x4f0/0x4f0
[   89.643848][  T313]  blkdev_writepage+0x24/0x30
[   89.648539][  T313]  __writepage+0x66/0x130
[   89.652886][  T313]  write_cache_pages+0x7ce/0xd30
[   89.657838][  T313]  ? generic_writepages+0x170/0x170
[   89.663059][  T313]  ? tag_pages_for_writeback+0x3d0/0x3d0
[   89.668711][  T313]  ? insert_work+0x282/0x310
[   89.673316][  T313]  ? blk_start_plug+0x50/0x170
[   89.678105][  T313]  generic_writepages+0x104/0x170
[   89.683149][  T313]  ? clear_page_dirty_for_io+0x5a0/0x5a0
[   89.688806][  T313]  ? __kasan_check_write+0x14/0x20
[   89.693951][  T313]  ? _raw_spin_lock+0x94/0xf0
[   89.698638][  T313]  ? _raw_spin_trylock_bh+0x150/0x150
[   89.704042][  T313]  ? __kasan_check_read+0x11/0x20
[   89.709188][  T313]  ? __set_page_dirty_no_writeback+0xff/0x130
[   89.715270][  T313]  blkdev_writepages+0x1d/0x30
[   89.720047][  T313]  ? blkdev_readpage+0x20/0x20
[   89.724821][  T313]  do_writepages+0x476/0x6d0
[   89.729438][  T313]  ? __kasan_check_write+0x14/0x20
[   89.734569][  T313]  ? __update_load_avg_cfs_rq+0xb1/0x2e0
[   89.740214][  T313]  ? update_load_avg+0x442/0x1110
[   89.745262][  T313]  ? __writepage+0x130/0x130
[   89.749876][  T313]  ? __kasan_check_write+0x14/0x20
[   89.755001][  T313]  ? _raw_spin_lock+0x94/0xf0
[   89.759701][  T313]  __writeback_single_inode+0xd9/0x9e0
[   89.765168][  T313]  ? wbc_attach_and_unlock_inode+0x194/0x5f0
[   89.771163][  T313]  writeback_sb_inodes+0x9f3/0x1610
[   89.776400][  T313]  ? queue_io+0x4b0/0x4b0
[   89.780745][  T313]  ? down_read_trylock+0x317/0x630
[   89.785871][  T313]  __writeback_inodes_wb+0x127/0x400
[   89.791174][  T313]  wb_writeback+0x3ff/0x990
[   89.795693][  T313]  ? inode_cgwb_move_to_attached+0x3b0/0x3b0
[   89.801703][  T313]  ? set_worker_desc+0x1ba/0x1f0
[   89.806655][  T313]  ? __kasan_check_write+0x14/0x20
[   89.811778][  T313]  ? cpumask_next+0x7c/0xa0
[   89.816296][  T313]  wb_workfn+0xa49/0xf30
[   89.820556][  T313]  ? inode_wait_for_writeback+0x220/0x220
[   89.826283][  T313]  ? __this_cpu_preempt_check+0x13/0x20
[   89.831839][  T313]  ? tracing_record_taskinfo+0x7c/0x220
[   89.837403][  T313]  ? probe_sched_wakeup+0x64/0x80
[   89.842451][  T313]  ? __kasan_check_write+0x14/0x20
[   89.847572][  T313]  ? _raw_spin_lock_irq+0x95/0xf0
[   89.852613][  T313]  ? _raw_spin_lock_irqsave+0x130/0x130
[   89.858172][  T313]  ? try_to_wake_up+0x610/0x1150
[   89.863117][  T313]  process_one_work+0x6c8/0xbb0
[   89.867999][  T313]  worker_thread+0xaa0/0x1250
[   89.872695][  T313]  ? __kasan_check_read+0x11/0x20
[   89.877753][  T313]  kthread+0x3f5/0x4f0
[   89.881836][  T313]  ? worker_clr_flags+0x190/0x190
[   89.886901][  T313]  ? kthread_blkcg+0xd0/0xd0
[   89.891506][  T313]  ret_from_fork+0x1f/0x30
[   89.895942][  T313]  </TASK>
[   89.898970][  T854] CPU: 1 PID: 854 Comm: syz.5.200 Not tainted syzkaller #0
[   89.906193][  T854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   89.916271][  T854] Call Trace:
[   89.919564][  T854]  <TASK>
[   89.922496][  T854]  __dump_stack+0x21/0x30
[   89.926836][  T854]  dump_stack_lvl+0x110/0x170
[   89.931530][  T854]  ? show_regs_print_info+0x20/0x20
[   89.936741][  T854]  ? prandom_u32+0x24d/0x290
[   89.941338][  T854]  dump_stack+0x15/0x20
[   89.945502][  T854]  should_fail+0x3ab/0x500
[   89.949933][  T854]  __should_failslab+0xa4/0xe0
[   89.954715][  T854]  should_failslab+0x9/0x20
[   89.959239][  T854]  slab_pre_alloc_hook+0x39/0xd0
[   89.964196][  T854]  ? vm_area_dup+0x26/0x210
[   89.968715][  T854]  kmem_cache_alloc+0x44/0x260
[   89.973495][  T854]  vm_area_dup+0x26/0x210
[   89.977834][  T854]  __split_vma+0xac/0x3e0
[   89.982172][  T854]  split_vma+0x7c/0xd0
[   89.986261][  T854]  mprotect_fixup+0x496/0x7d0
[   89.990950][  T854]  ? change_protection+0x1510/0x1510
[   89.996247][  T854]  ? security_file_mprotect+0x84/0xa0
[   90.001632][  T854]  do_mprotect_pkey+0x72c/0xad0
[   90.006503][  T854]  ? prot_none_test+0x10/0x10
[   90.011206][  T854]  ? debug_smp_processor_id+0x17/0x20
[   90.016595][  T854]  __x64_sys_mprotect+0x80/0x90
[   90.021463][  T854]  x64_sys_call+0x912/0x9a0
[   90.025975][  T854]  do_syscall_64+0x4c/0xa0
[   90.030404][  T854]  ? clear_bhb_loop+0x50/0xa0
[   90.035089][  T854]  ? clear_bhb_loop+0x50/0xa0
[   90.039769][  T854]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   90.045674][  T854] RIP: 0033:0x7f58fe9a2d97
[   90.050116][  T854] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.069733][  T854] RSP: 002b:00007ffd9228f4c8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[   90.078165][  T854] RAX: ffffffffffffffda RBX: 00007f58fd3ba6c0 RCX: 00007f58fe9a2d97
[   90.086147][  T854] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f58fd39b000
[   90.094128][  T854] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[   90.102106][  T854] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd9228f620
[   90.110168][  T854] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[   90.118167][  T854]  </TASK>
[   90.121366][  T139] CPU: 0 PID: 139 Comm: dhcpcd Not tainted syzkaller #0
[   90.128344][  T139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   90.138408][  T139] Call Trace:
[   90.141697][  T139]  <TASK>
[   90.144650][  T139]  __dump_stack+0x21/0x30
[   90.148994][  T139]  dump_stack_lvl+0x110/0x170
[   90.153690][  T139]  ? show_regs_print_info+0x20/0x20
[   90.158896][  T139]  ? prandom_u32+0x24d/0x290
[   90.163507][  T139]  dump_stack+0x15/0x20
[   90.167666][  T139]  should_fail+0x3ab/0x500
[   90.172096][  T139]  ? alloc_skb_with_frags+0xa8/0x620
[   90.177485][  T139]  __should_failslab+0xa4/0xe0
[   90.182284][  T139]  should_failslab+0x9/0x20
[   90.186798][  T139]  slab_pre_alloc_hook+0x39/0xd0
[   90.191744][  T139]  ? alloc_skb_with_frags+0xa8/0x620
[   90.197054][  T139]  ? alloc_skb_with_frags+0xa8/0x620
[   90.202348][  T139]  __kmalloc_track_caller+0x6c/0x2c0
[   90.207645][  T139]  ? alloc_skb_with_frags+0xa8/0x620
[   90.212935][  T139]  ? alloc_skb_with_frags+0xa8/0x620
[   90.218231][  T139]  __alloc_skb+0x210/0x730
[   90.222662][  T139]  alloc_skb_with_frags+0xa8/0x620
[   90.227788][  T139]  ? avc_has_perm_noaudit+0x390/0x490
[   90.233182][  T139]  sock_alloc_send_pskb+0x87f/0x9a0
[   90.238397][  T139]  ? avc_denied+0x1b0/0x1b0
[   90.242907][  T139]  ? sock_kzfree_s+0x60/0x60
[   90.247503][  T139]  ? __kasan_check_write+0x14/0x20
[   90.252619][  T139]  ? _raw_spin_lock+0x94/0xf0
[   90.257309][  T139]  ? _raw_spin_trylock_bh+0x150/0x150
[   90.262690][  T139]  ? avc_has_perm+0x163/0x250
[   90.267375][  T139]  unix_dgram_sendmsg+0x6f3/0x19b0
[   90.272504][  T139]  ? __wake_up_sync_key+0x17b/0x2b0
[   90.277714][  T139]  ? selinux_socket_sendmsg+0x22f/0x340
[   90.283279][  T139]  ? selinux_socket_accept+0x570/0x570
[   90.288752][  T139]  ? unix_dgram_poll+0x6c0/0x6c0
[   90.293702][  T139]  ? sock_def_readable+0x1c8/0x320
[   90.298822][  T139]  ? __kasan_check_write+0x14/0x20
[   90.303948][  T139]  unix_seqpacket_sendmsg+0x118/0x1e0
[   90.309329][  T139]  sock_write_iter+0x2a6/0x3a0
[   90.314104][  T139]  ? sock_read_iter+0x380/0x380
[   90.318967][  T139]  ? file_has_perm+0x52d/0x700
[   90.323738][  T139]  do_iter_readv_writev+0x477/0x5f0
[   90.328948][  T139]  ? generic_file_rw_checks+0x2a0/0x2a0
[   90.334508][  T139]  ? fsnotify_perm+0x67/0x5b0
[   90.339191][  T139]  ? security_file_permission+0x79/0xa0
[   90.344743][  T139]  ? security_file_permission+0x83/0xa0
[   90.350313][  T139]  do_iter_write+0x207/0x7b0
[   90.354911][  T139]  vfs_writev+0x2df/0x570
[   90.359247][  T139]  ? do_writev+0x2c0/0x2c0
[   90.363699][  T139]  ? __kasan_check_read+0x11/0x20
[   90.368735][  T139]  ? __fdget_pos+0x1f7/0x380
[   90.373333][  T139]  do_writev+0x14e/0x2c0
[   90.377588][  T139]  ? do_readv+0x450/0x450
[   90.381918][  T139]  ? __secure_computing+0xea/0x290
[   90.387041][  T139]  __x64_sys_writev+0x7d/0x90
[   90.391726][  T139]  x64_sys_call+0x974/0x9a0
[   90.396260][  T139]  do_syscall_64+0x4c/0xa0
[   90.400682][  T139]  ? clear_bhb_loop+0x50/0xa0
[   90.405394][  T139]  ? clear_bhb_loop+0x50/0xa0
[   90.410078][  T139]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   90.415978][  T139] RIP: 0033:0x7fcd9124d407
[   90.420413][  T139] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   90.440038][  T139] RSP: 002b:00007ffff2a68500 EFLAGS: 00000202 ORIG_RAX: 0000000000000014
[   90.448452][  T139] RAX: ffffffffffffffda RBX: 00007fcd911c3740 RCX: 00007fcd9124d407
[   90.456429][  T139] RDX: 0000000000000005 RSI: 00007ffff2a68560 RDI: 000000000000000a
[   90.464410][  T139] RBP: 000055e137ae15b0 R08: 0000000000000000 R09: 0000000000000000
[   90.472390][  T139] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e137ae15b0
[   90.480365][  T139] R13: 000000000000012c R14: 00000000ffffffff R15: 0000000000000000
[   90.488348][  T139]  </TASK>
[   90.491498][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   90.498984][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   90.509060][  T285] Call Trace:
[   90.512349][  T285]  <TASK>
[   90.515287][  T285]  __dump_stack+0x21/0x30
[   90.519634][  T285]  dump_stack_lvl+0x110/0x170
[   90.524328][  T285]  ? show_regs_print_info+0x20/0x20
[   90.529535][  T285]  ? prandom_u32+0x24d/0x290
[   90.534133][  T285]  dump_stack+0x15/0x20
[   90.538293][  T285]  should_fail+0x3ab/0x500
[   90.542721][  T285]  __should_failslab+0xa4/0xe0
[   90.547497][  T285]  should_failslab+0x9/0x20
[   90.552015][  T285]  slab_pre_alloc_hook+0x39/0xd0
[   90.556960][  T285]  ? security_file_alloc+0x33/0x120
[   90.562166][  T285]  kmem_cache_alloc+0x44/0x260
[   90.566948][  T285]  security_file_alloc+0x33/0x120
[   90.571985][  T285]  __alloc_file+0xb5/0x2a0
[   90.576410][  T285]  alloc_empty_file+0x97/0x180
[   90.581190][  T285]  path_openat+0xf4/0x2f80
[   90.585617][  T285]  ? __stack_depot_save+0x34/0x480
[   90.590737][  T285]  ? __kasan_slab_alloc+0xc9/0xe0
[   90.595782][  T285]  ? __kasan_slab_alloc+0xb7/0xe0
[   90.600817][  T285]  ? slab_post_alloc_hook+0x4f/0x2b0
[   90.606159][  T285]  ? kmem_cache_alloc+0xf7/0x260
[   90.611118][  T285]  ? getname_flags+0xba/0x510
[   90.615815][  T285]  ? getname+0x19/0x20
[   90.619893][  T285]  ? do_sys_openat2+0xeb/0x7f0
[   90.624674][  T285]  ? __x64_sys_openat+0x136/0x160
[   90.629710][  T285]  ? x64_sys_call+0x219/0x9a0
[   90.634400][  T285]  ? do_syscall_64+0x4c/0xa0
[   90.638999][  T285]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   90.645079][  T285]  ? do_filp_open+0x400/0x400
[   90.649774][  T285]  do_filp_open+0x1df/0x400
[   90.654295][  T285]  ? vfs_tmpfile+0x2d0/0x2d0
[   90.658900][  T285]  do_sys_openat2+0x15e/0x7f0
[   90.663589][  T285]  ? user_path_at_empty+0x162/0x1c0
[   90.668908][  T285]  ? kmem_cache_free+0x100/0x320
[   90.673859][  T285]  ? namespace_unlock+0x440/0x440
[   90.678891][  T285]  ? do_sys_open+0xe0/0xe0
[   90.683343][  T285]  ? __x64_sys_umount+0x12d/0x170
[   90.688375][  T285]  __x64_sys_openat+0x136/0x160
[   90.693234][  T285]  x64_sys_call+0x219/0x9a0
[   90.697747][  T285]  do_syscall_64+0x4c/0xa0
[   90.702168][  T285]  ? clear_bhb_loop+0x50/0xa0
[   90.706852][  T285]  ? clear_bhb_loop+0x50/0xa0
[   90.711553][  T285]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   90.717444][  T285] RIP: 0033:0x7f058652e2bc
[   90.721862][  T285] Code: 4c 89 54 24 18 41 89 f2 41 83 e2 40 75 40 89 f0 f7 d0 a9 00 00 41 00 74 35 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 44 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00
[   90.741479][  T285] RSP: 002b:00007ffd719e36a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[   90.749906][  T285] RAX: ffffffffffffffda RBX: 00007f05865c5314 RCX: 00007f058652e2bc
[   90.757887][  T285] RDX: 0000000000090800 RSI: 00007ffd719e4850 RDI: 00000000ffffff9c
[   90.765865][  T285] RBP: 00007ffd719e483c R08: 0000000000000000 R09: 0000000000000000
[   90.773840][  T285] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd719e4850
[   90.781816][  T285] R13: 00007f05865c5314 R14: 0000000000009c28 R15: 00007ffd719e4890
[   90.789799][  T285]  </TASK>
[   90.792830][   T90] CPU: 0 PID: 90 Comm: klogd Not tainted syzkaller #0
[   90.799626][   T90] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   90.809688][   T90] Call Trace:
[   90.812979][   T90]  <TASK>
[   90.815924][   T90]  __dump_stack+0x21/0x30
[   90.820271][   T90]  dump_stack_lvl+0x110/0x170
[   90.824966][   T90]  ? show_regs_print_info+0x20/0x20
[   90.830171][   T90]  ? prandom_u32+0x24d/0x290
[   90.834766][   T90]  dump_stack+0x15/0x20
[   90.838927][   T90]  should_fail+0x3ab/0x500
[   90.843358][   T90]  ? alloc_skb_with_frags+0xa8/0x620
[   90.848660][   T90]  __should_failslab+0xa4/0xe0
[   90.853441][   T90]  should_failslab+0x9/0x20
[   90.857971][   T90]  slab_pre_alloc_hook+0x39/0xd0
[   90.862938][   T90]  ? alloc_skb_with_frags+0xa8/0x620
[   90.868232][   T90]  ? alloc_skb_with_frags+0xa8/0x620
[   90.873525][   T90]  __kmalloc_track_caller+0x6c/0x2c0
[   90.878820][   T90]  ? alloc_skb_with_frags+0xa8/0x620
[   90.884112][   T90]  ? alloc_skb_with_frags+0xa8/0x620
[   90.889408][   T90]  __alloc_skb+0x210/0x730
[   90.893854][   T90]  alloc_skb_with_frags+0xa8/0x620
[   90.899003][   T90]  ? memcpy+0x56/0x70
[   90.903000][   T90]  sock_alloc_send_pskb+0x87f/0x9a0
[   90.908214][   T90]  ? sock_kzfree_s+0x60/0x60
[   90.912902][   T90]  ? __kasan_check_write+0x14/0x20
[   90.918016][   T90]  ? _raw_spin_lock+0x94/0xf0
[   90.922805][   T90]  ? _raw_spin_trylock_bh+0x150/0x150
[   90.928206][   T90]  unix_dgram_sendmsg+0x6f3/0x19b0
[   90.933330][   T90]  ? unix_dgram_poll+0x6c0/0x6c0
[   90.938291][   T90]  ? path_put+0x57/0x60
[   90.942464][   T90]  ? security_socket_sendmsg+0x82/0xa0
[   90.947940][   T90]  __sys_sendto+0x46d/0x620
[   90.952456][   T90]  ? __ia32_sys_getpeername+0x90/0x90
[   90.957840][   T90]  ? __kasan_check_write+0x14/0x20
[   90.962965][   T90]  __x64_sys_sendto+0xe5/0x100
[   90.967744][   T90]  x64_sys_call+0x178/0x9a0
[   90.972258][   T90]  do_syscall_64+0x4c/0xa0
[   90.976688][   T90]  ? clear_bhb_loop+0x50/0xa0
[   90.981373][   T90]  ? clear_bhb_loop+0x50/0xa0
[   90.986054][   T90]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   90.991953][   T90] RIP: 0033:0x7ff09426c407
[   90.996371][   T90] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   91.015991][   T90] RSP: 002b:00007ffc99002c70 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[   91.024411][   T90] RAX: ffffffffffffffda RBX: 00007ff09411cc80 RCX: 00007ff09426c407
[   91.032394][   T90] RDX: 0000000000000049 RSI: 00007ffc99002db0 RDI: 0000000000000003
[   91.040393][   T90] RBP: 00007ffc990031e0 R08: 0000000000000000 R09: 0000000000000000
[   91.048371][   T90] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc990031f8
[   91.056355][   T90] R13: 00007ffc99002db0 R14: 000000000000002e R15: 00007ffc99002db0
[   91.064344][   T90]  </TASK>
[   91.067364][  T858] CPU: 1 PID: 858 Comm: syz.5.200 Not tainted syzkaller #0
[   91.074596][  T858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   91.084687][  T858] Call Trace:
[   91.087978][  T858]  <TASK>
[   91.090919][  T858]  __dump_stack+0x21/0x30
[   91.095383][  T858]  dump_stack_lvl+0x110/0x170
[   91.100063][  T858]  ? show_regs_print_info+0x20/0x20
[   91.105275][  T858]  ? prandom_u32+0x24d/0x290
[   91.109920][  T858]  dump_stack+0x15/0x20
[   91.114085][  T858]  should_fail+0x3ab/0x500
[   91.118528][  T858]  __should_failslab+0xa4/0xe0
[   91.123328][  T858]  should_failslab+0x9/0x20
[   91.127840][  T858]  slab_pre_alloc_hook+0x39/0xd0
[   91.132784][  T858]  ? __kernfs_new_node+0xa6/0x670
[   91.137827][  T858]  __kmalloc_track_caller+0x6c/0x2c0
[   91.143132][  T858]  ? __kernfs_new_node+0xa6/0x670
[   91.148178][  T858]  kstrdup_const+0x55/0x90
[   91.152606][  T858]  __kernfs_new_node+0xa6/0x670
[   91.157462][  T858]  ? sysfs_slab_add+0x89/0x2a0
[   91.162232][  T858]  ? __kmem_cache_create+0x439/0x640
[   91.167549][  T858]  ? kmem_cache_create_usercopy+0x155/0x2b0
[   91.173465][  T858]  ? create_new_namespaces+0x276/0x660
[   91.178937][  T858]  ? unshare_nsproxy_namespaces+0x120/0x170
[   91.184852][  T858]  ? ksys_unshare+0x4d7/0x810
[   91.189555][  T858]  ? kernfs_new_node+0x260/0x260
[   91.194512][  T858]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   91.200595][  T858]  kernfs_new_node+0x150/0x260
[   91.205382][  T858]  kernfs_create_dir_ns+0x47/0x130
[   91.210509][  T858]  sysfs_create_dir_ns+0x128/0x290
[   91.215630][  T858]  ? __kasan_check_write+0x14/0x20
[   91.220741][  T858]  ? _raw_spin_lock+0x94/0xf0
[   91.225422][  T858]  ? sysfs_warn_dup+0xa0/0xa0
[   91.230103][  T858]  ? memcpy+0x56/0x70
[   91.234092][  T858]  kobject_add_internal+0x774/0xde0
[   91.239305][  T858]  kobject_init_and_add+0x128/0x190
[   91.244520][  T858]  ? clear_nonspinnable+0x60/0x60
[   91.249552][  T858]  ? kobject_add+0x230/0x230
[   91.254172][  T858]  ? up_write+0x7b/0x290
[   91.258421][  T858]  ? kernfs_remove_by_name_ns+0x120/0x160
[   91.264149][  T858]  sysfs_slab_add+0x89/0x2a0
[   91.268755][  T858]  __kmem_cache_create+0x439/0x640
[   91.273893][  T858]  kmem_cache_create_usercopy+0x155/0x2b0
[   91.279626][  T858]  kmem_cache_create+0x13/0x20
[   91.284405][  T858]  copy_pid_ns+0x41a/0x8a0
[   91.288853][  T858]  ? cmp_extents_reverse+0x90/0x90
[   91.294016][  T858]  ? __kasan_check_write+0x14/0x20
[   91.299143][  T858]  ? copy_utsname+0x38b/0x450
[   91.303839][  T858]  create_new_namespaces+0x276/0x660
[   91.309140][  T858]  unshare_nsproxy_namespaces+0x120/0x170
[   91.314872][  T858]  ksys_unshare+0x4d7/0x810
[   91.319392][  T858]  ? sighand_ctor+0x60/0x60
[   91.323903][  T858]  ? __kasan_check_write+0x14/0x20
[   91.329027][  T858]  ? switch_fpu_return+0x15d/0x2c0
[   91.334154][  T858]  __x64_sys_unshare+0x38/0x40
[   91.338944][  T858]  x64_sys_call+0x442/0x9a0
[   91.343461][  T858]  do_syscall_64+0x4c/0xa0
[   91.347882][  T858]  ? clear_bhb_loop+0x50/0xa0
[   91.352565][  T858]  ? clear_bhb_loop+0x50/0xa0
[   91.357254][  T858]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   91.363160][  T858] RIP: 0033:0x7f58fe9a2f99
[   91.367611][  T858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.387231][  T858] RSP: 002b:00007f58fd3db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   91.395662][  T858] RAX: ffffffffffffffda RBX: 00007f58fec2b090 RCX: 00007f58fe9a2f99
[   91.403664][  T858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000066000080
[   91.411648][  T858] RBP: 00007f58fea39ec4 R08: 0000000000000000 R09: 0000000000000000
[   91.419647][  T858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.427630][  T858] R13: 00007f58fec2b128 R14: 00007f58fec2b090 R15: 00007ffd9228f528
[   91.435620][  T858]  </TASK>
[   91.445174][  T277] CPU: 0 PID: 277 Comm: syz-executor Not tainted syzkaller #0
[   91.452672][  T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   91.462756][  T277] Call Trace:
[   91.466040][  T277]  <TASK>
[   91.468978][  T277]  __dump_stack+0x21/0x30
[   91.473313][  T277]  dump_stack_lvl+0x110/0x170
[   91.477986][  T277]  ? show_regs_print_info+0x20/0x20
[   91.483184][  T277]  ? prandom_u32+0x24d/0x290
[   91.487788][  T277]  dump_stack+0x15/0x20
[   91.491941][  T277]  should_fail+0x3ab/0x500
[   91.496365][  T277]  __should_failslab+0xa4/0xe0
[   91.501137][  T277]  should_failslab+0x9/0x20
[   91.505648][  T277]  slab_pre_alloc_hook+0x39/0xd0
[   91.510592][  T277]  ? jbd2__journal_start+0x13d/0x6e0
[   91.515879][  T277]  kmem_cache_alloc+0x44/0x260
[   91.520650][  T277]  jbd2__journal_start+0x13d/0x6e0
[   91.525816][  T277]  __ext4_journal_start_sb+0xfb/0x2b0
[   91.531197][  T277]  ext4_dirty_inode+0x8f/0x100
[   91.535964][  T277]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[   91.541782][  T277]  __mark_inode_dirty+0x1ef/0x9c0
[   91.546813][  T277]  ? memcpy+0x56/0x70
[   91.550805][  T277]  generic_update_time+0x1da/0x1f0
[   91.555920][  T277]  file_update_time+0x3c0/0x440
[   91.560775][  T277]  ? file_remove_privs+0x5c0/0x5c0
[   91.565890][  T277]  ? filemap_fault+0x166e/0x1cc0
[   91.570832][  T277]  ? slab_free_freelist_hook+0xc2/0x190
[   91.576380][  T277]  ext4_page_mkwrite+0x29e/0x1320
[   91.581414][  T277]  ? ext4_change_inode_journal_flag+0x640/0x640
[   91.587660][  T277]  handle_pte_fault+0x138c/0x2770
[   91.592713][  T277]  ? fault_around_bytes_set+0xc0/0xc0
[   91.598098][  T277]  ? ____kasan_slab_free+0x130/0x160
[   91.603389][  T277]  do_handle_mm_fault+0x1b3b/0x1e30
[   91.608603][  T277]  ? downgrade_write+0x440/0x440
[   91.613557][  T277]  ? numa_migrate_prep+0xd0/0xd0
[   91.618618][  T277]  ? __find_vma+0x30/0x150
[   91.623052][  T277]  do_user_addr_fault+0x808/0x11c0
[   91.628179][  T277]  ? do_kern_addr_fault+0x80/0x80
[   91.633225][  T277]  ? debug_smp_processor_id+0x17/0x20
[   91.638618][  T277]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   91.644692][  T277]  ? exit_to_user_mode_prepare+0x39/0xd0
[   91.650329][  T277]  exc_page_fault+0x51/0xb0
[   91.654841][  T277]  asm_exc_page_fault+0x27/0x30
[   91.659700][  T277] RIP: 0033:0x7f8148fad0a3
[   91.664125][  T277] Code: 85 0e 01 00 00 be 04 00 00 00 48 89 df e8 05 b9 fe ff 48 8b 43 40 83 43 30 04 48 89 df be 08 00 00 00 48 8d 50 fc 48 89 53 40 <89> 68 fc 8b 6b 30 e8 e2 b8 fe ff 48 8b 43 48 be 06 00 00 00 89 28
[   91.683737][  T277] RSP: 002b:00007fff711ed4e0 EFLAGS: 00010202
[   91.689820][  T277] RAX: 00007f8146b3d000 RBX: 00007fff711ed610 RCX: 0000000000dffde8
[   91.697805][  T277] RDX: 00007f8146b3cffc RSI: 0000000000000008 RDI: 00007fff711ed610
[   91.705795][  T277] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000
[   91.713782][  T277] R10: 00007fff711ed5f0 R11: 0000000000000000 R12: 0000000000000000
[   91.721765][  T277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   91.729747][  T277]  </TASK>
[   91.733004][  T858] kobject_add_internal failed for pid_3 (error: -12 parent: slab)
[   91.744699][  T286] syz-executor (286) used greatest stack depth: 20864 bytes left
[   91.768858][  T858] kmem_cache_create_usercopy(pid_3) failed with error -12
[   91.809341][  T858] CPU: 0 PID: 858 Comm: syz.5.200 Not tainted syzkaller #0
[   91.816583][  T858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   91.826660][  T858] Call Trace:
[   91.829976][  T858]  <TASK>
[   91.832925][  T858]  __dump_stack+0x21/0x30
[   91.837278][  T858]  dump_stack_lvl+0x110/0x170
[   91.841991][  T858]  ? show_regs_print_info+0x20/0x20
[   91.847205][  T858]  ? kfree+0xc4/0x270
[   91.851208][  T858]  ? kfree_const+0x39/0x40
[   91.855653][  T858]  dump_stack+0x15/0x20
[   91.859849][  T858]  kmem_cache_create_usercopy+0x235/0x2b0
[   91.865595][  T858]  kmem_cache_create+0x13/0x20
[   91.870373][  T858]  copy_pid_ns+0x41a/0x8a0
[   91.874816][  T858]  ? cmp_extents_reverse+0x90/0x90
[   91.879951][  T858]  ? __kasan_check_write+0x14/0x20
[   91.885087][  T858]  ? copy_utsname+0x38b/0x450
[   91.889793][  T858]  create_new_namespaces+0x276/0x660
[   91.895108][  T858]  unshare_nsproxy_namespaces+0x120/0x170
[   91.900849][  T858]  ksys_unshare+0x4d7/0x810
[   91.905378][  T858]  ? sighand_ctor+0x60/0x60
[   91.909902][  T858]  ? __kasan_check_write+0x14/0x20
[   91.915040][  T858]  ? switch_fpu_return+0x15d/0x2c0
[   91.920166][  T858]  __x64_sys_unshare+0x38/0x40
[   91.924944][  T858]  x64_sys_call+0x442/0x9a0
[   91.929455][  T858]  do_syscall_64+0x4c/0xa0
[   91.933876][  T858]  ? clear_bhb_loop+0x50/0xa0
[   91.938559][  T858]  ? clear_bhb_loop+0x50/0xa0
[   91.943266][  T858]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   91.949172][  T858] RIP: 0033:0x7f58fe9a2f99
[   91.953598][  T858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.973209][  T858] RSP: 002b:00007f58fd3db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   91.981636][  T858] RAX: ffffffffffffffda RBX: 00007f58fec2b090 RCX: 00007f58fe9a2f99
[   91.989616][  T858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000066000080
[   91.997600][  T858] RBP: 00007f58fea39ec4 R08: 0000000000000000 R09: 0000000000000000
[   92.005579][  T858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.013555][  T858] R13: 00007f58fec2b128 R14: 00007f58fec2b090 R15: 00007ffd9228f528
[   92.021531][  T858]  </TASK>
[   92.266561][  T865] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.273664][  T865] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.281259][  T865] device bridge_slave_0 entered promiscuous mode
[   92.299959][  T865] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.306987][  T865] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.314374][  T865] device bridge_slave_1 entered promiscuous mode
[   92.397183][  T868] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.404369][  T868] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.411867][  T868] device bridge_slave_0 entered promiscuous mode
[   92.419930][  T868] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.426966][  T868] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.434358][  T868] device bridge_slave_1 entered promiscuous mode
[   92.440834][  T867] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.447866][  T867] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.455245][  T867] device bridge_slave_0 entered promiscuous mode
[   92.462558][  T867] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.469631][  T867] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.476958][  T867] device bridge_slave_1 entered promiscuous mode
[   92.565867][  T873] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.572984][  T873] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.580582][  T873] device bridge_slave_0 entered promiscuous mode
[   92.587478][  T873] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.594555][  T873] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.602032][  T873] device bridge_slave_1 entered promiscuous mode
[   92.620522][  T869] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.627597][  T869] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.635107][  T869] device bridge_slave_0 entered promiscuous mode
[   92.643622][  T869] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.650829][  T869] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.658288][  T869] device bridge_slave_1 entered promiscuous mode
[   92.693460][   T45] device bridge_slave_1 left promiscuous mode
[   92.699747][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.707300][   T45] device bridge_slave_0 left promiscuous mode
[   92.713579][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.721514][   T45] device veth1_macvtap left promiscuous mode
[   92.727505][   T45] device veth0_vlan left promiscuous mode
[   92.936560][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   92.944147][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   92.963304][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   92.971003][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   92.995563][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.003932][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.012325][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.019410][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.026929][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.035292][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.043426][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.050482][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.057812][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.065475][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.073132][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.092711][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.101296][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.110003][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.117049][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.124427][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.133055][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.141273][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.148295][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.155668][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   93.163885][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.172071][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   93.180201][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.188068][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.196400][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.204503][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.211548][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.218909][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.227145][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.235358][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.242389][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.249856][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.257470][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.291172][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.299202][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.307112][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.315135][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.322764][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   93.331184][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.339293][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   93.347282][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.355303][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.363696][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.380312][  T868] device veth0_vlan entered promiscuous mode
[   93.391653][  T865] device veth0_vlan entered promiscuous mode
[   93.399524][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.407935][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.416024][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.423416][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.431501][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.439815][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.447937][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.454998][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.462513][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.470549][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.478649][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.486287][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.493812][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.508868][  T868] device veth1_macvtap entered promiscuous mode
[   93.518782][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.527055][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.535576][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.543869][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.550926][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.565458][  T867] device veth0_vlan entered promiscuous mode
[   93.579818][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.588143][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.595737][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.603332][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.611891][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.620311][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   93.628623][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   93.637529][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.645455][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   93.653859][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   93.662299][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.669822][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.677183][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.686128][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.694403][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.701555][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.709092][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   93.717203][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.725421][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.742310][  T865] device veth1_macvtap entered promiscuous mode
[   93.765631][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   93.773580][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.782103][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.790440][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.797481][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.804937][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.813034][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.821710][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.832849][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   93.841389][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   93.860378][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.868262][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.876269][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   93.884690][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   93.899100][   T30] kauditd_printk_skb: 1 callbacks suppressed
[   93.899114][   T30] audit: type=1400 audit(1785416545.888:220): avc:  denied  { mounton } for  pid=868 comm="syz-executor" path="/root/syzkaller.akFm6Q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   93.937879][  T873] device veth0_vlan entered promiscuous mode
[   93.946280][  T867] device veth1_macvtap entered promiscuous mode
[   93.958779][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.967550][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.978282][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.986665][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.987826][   T30] audit: type=1400 audit(1785416545.968:221): avc:  denied  { mmap_zero } for  pid=886 comm="syz.6.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   94.036279][   T30] audit: type=1400 audit(1785416546.018:222): avc:  denied  { block_suspend } for  pid=886 comm="syz.6.205" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   94.067219][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   94.084692][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.089266][   T30] audit: type=1400 audit(1785416546.018:223): avc:  denied  { write } for  pid=886 comm="syz.6.205" name="vlan0" dev="proc" ino=4026532740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   94.105188][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   94.123086][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.136797][  T893] set_capacity_and_notify: 1 callbacks suppressed
[   94.136813][  T893] loop6: detected capacity change from 0 to 1024
[   94.154062][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.162445][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.172940][  T873] device veth1_macvtap entered promiscuous mode
[   94.182783][  T893] EXT4-fs (loop6): Ignoring removed bh option
[   94.183087][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   94.190294][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   94.205927][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   94.216283][  T893] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000002,bh,init_itable,. Quota mode: none.
[   94.247117][  T893] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   94.268365][  T869] device veth0_vlan entered promiscuous mode
[   94.274035][  T868] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   94.276852][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   94.295873][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.304381][  T868] EXT4-fs error (device loop6): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   94.304868][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.335156][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.340419][  T868] EXT4-fs (loop6): Remounting filesystem read-only
[   94.344762][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   94.351265][   T30] audit: type=1400 audit(1785416546.348:224): avc:  denied  { unlink } for  pid=868 comm="syz-executor" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   94.358745][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   94.382499][  T868] EXT4-fs error (device loop6): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   94.390361][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   94.411776][  T868] EXT4-fs (loop6): Remounting filesystem read-only
[   94.418956][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   94.425100][  T868] EXT4-fs error (device loop6): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   94.432959][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   94.459234][  T868] EXT4-fs (loop6): Remounting filesystem read-only
[   94.460967][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.465887][  T868] EXT4-fs warning (device loop6): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.491794][  T868] EXT4-fs error (device loop6): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   94.514632][  T868] EXT4-fs (loop6): Remounting filesystem read-only
[   94.521499][  T868] EXT4-fs error (device loop6): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   94.552660][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   94.560993][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   94.576527][  T868] EXT4-fs (loop6): Remounting filesystem read-only
[   94.595178][  T868] EXT4-fs error (device loop6): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   94.611399][  T869] device veth1_macvtap entered promiscuous mode
[   94.628622][  T868] EXT4-fs (loop6): Remounting filesystem read-only
[   94.637857][  T868] EXT4-fs warning (device loop6): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.655680][  T868] EXT4-fs error (device loop6): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   94.663653][  T905] overlayfs: missing 'lowerdir'
[   94.683133][  T868] EXT4-fs (loop6): Remounting filesystem read-only
[   94.696578][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   94.704321][  T868] EXT4-fs error (device loop6): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   94.707942][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   94.727348][  T868] EXT4-fs (loop6): Remounting filesystem read-only
[   94.740930][  T868] EXT4-fs error (device loop6): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   94.754892][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.769898][  T868] EXT4-fs (loop6): Remounting filesystem read-only
[   94.777768][  T868] EXT4-fs warning (device loop6): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.796897][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.805424][  T868] EXT4-fs error (device loop6): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   94.827849][  T868] EXT4-fs (loop6): Remounting filesystem read-only
[   94.829126][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.838714][  T868] EXT4-fs warning (device loop6): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.857311][  T868] EXT4-fs warning (device loop6): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.872558][  T868] EXT4-fs warning (device loop6): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.888780][  T868] EXT4-fs warning (device loop6): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.912707][  T868] EXT4-fs warning (device loop6): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.927610][  T868] EXT4-fs warning (device loop6): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   95.011291][   T30] audit: type=1400 audit(1785416546.998:225): avc:  denied  { create } for  pid=918 comm="syz.8.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   95.031035][   T39] usb 1-1: USB disconnect, device number 2
[   95.039626][  T376] android_work: sent uevent USB_STATE=DISCONNECTED
[   95.058547][   T30] audit: type=1400 audit(1785416547.038:226): avc:  denied  { write } for  pid=918 comm="syz.8.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   95.239457][   T45] device bridge_slave_1 left promiscuous mode
[   95.245846][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.254027][   T45] device bridge_slave_0 left promiscuous mode
[   95.260770][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.269094][   T45] device bridge_slave_1 left promiscuous mode
[   95.275427][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.283152][   T45] device bridge_slave_0 left promiscuous mode
[   95.289461][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.297677][   T45] device bridge_slave_1 left promiscuous mode
[   95.305287][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.313039][   T45] device bridge_slave_0 left promiscuous mode
[   95.319418][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.327722][   T45] device bridge_slave_1 left promiscuous mode
[   95.334298][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.342175][   T45] device bridge_slave_0 left promiscuous mode
[   95.348802][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.357440][   T45] device veth1_macvtap left promiscuous mode
[   95.363638][   T45] device veth0_vlan left promiscuous mode
[   95.368680][  T306] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   95.377304][   T45] device veth1_macvtap left promiscuous mode
[   95.383504][   T45] device veth0_vlan left promiscuous mode
[   95.389688][   T45] device veth1_macvtap left promiscuous mode
[   95.395688][   T45] device veth0_vlan left promiscuous mode
[   95.401796][   T45] device veth1_macvtap left promiscuous mode
[   95.407819][   T45] device veth0_vlan left promiscuous mode
[   95.543243][  T953] Mass Storage Function, version: 2009/09/11
[   95.550284][  T953] LUN: removable file: (no medium)
[   95.598114][  T957] loop7: detected capacity change from 0 to 1024
[   95.608539][  T306] usb 10-1: Using ep0 maxpacket: 32
[   95.642581][  T957] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   95.728538][  T306] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.751096][  T306] usb 10-1: config 0 has no interfaces?
[   95.861861][   T30] audit: type=1400 audit(1785416547.848:227): avc:  denied  { create } for  pid=964 comm="syz.8.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   95.898788][   T30] audit: type=1400 audit(1785416547.878:228): avc:  denied  { write } for  pid=967 comm="syz.8.231" name="instances" dev="tracefs" ino=13125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   95.918684][  T306] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[   95.953865][   T30] audit: type=1400 audit(1785416547.878:229): avc:  denied  { add_name } for  pid=967 comm="syz.8.231" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   95.954157][  T306] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.026773][  T306] usb 10-1: Product: syz
[   96.043706][  T951] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.051084][  T306] usb 10-1: Manufacturer: syz
[   96.055861][  T306] usb 10-1: SerialNumber: syz
[   96.060723][  T951] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.072203][  T306] usb 10-1: config 0 descriptor??
[   96.077775][  T951] device bridge_slave_0 entered promiscuous mode
[   96.090011][  T951] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.097123][  T951] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.104699][  T951] device bridge_slave_1 entered promiscuous mode
[   96.192374][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   96.200245][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   96.218264][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   96.226769][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   96.236181][  T312] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.243271][  T312] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.251431][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   96.259806][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   96.268056][  T312] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.275124][  T312] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.282622][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   96.290976][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   96.299002][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   96.307522][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   96.320234][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   96.328867][  T314] usb 10-1: USB disconnect, device number 2
[   96.346513][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   96.359264][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   96.367346][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   96.375909][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   96.384155][  T951] device veth0_vlan entered promiscuous mode
[   96.398025][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   96.407696][  T951] device veth1_macvtap entered promiscuous mode
[   96.418490][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   96.438951][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   96.456258][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   96.470095][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   96.516038][  T975] loop0: detected capacity change from 0 to 512
[   96.575982][  T975] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.224: inode has both inline data and extents flags
[   96.619036][  T975] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.224: couldn't read orphan inode 15 (err -117)
[   96.654408][  T975] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   96.686357][  T975] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   96.709557][  T975] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   96.836076][  T989] loop8: detected capacity change from 0 to 1024
[   96.906831][  T987] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.913975][  T987] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.921717][  T987] device bridge_slave_0 entered promiscuous mode
[   96.933133][  T987] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.941536][  T987] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.954107][  T987] device bridge_slave_1 entered promiscuous mode
[   96.970373][  T989] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,nombcache,journal_dev=0x0000000000000000,usrjquota=,nodiscard,lazytime,init_itable=0x0000000000000005,jqfmt=vfsold,grpjquota=,,errors=continue. Quota mode: none.
[   97.018497][   T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   97.038543][  T376] android_work: sent uevent USB_STATE=CONNECTED
[   97.082353][  T987] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.089457][  T987] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.096844][  T987] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.103916][  T987] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.133507][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.141774][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.149261][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.159661][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   97.168036][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   97.176614][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.183695][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.201890][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   97.210317][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   97.218702][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.225767][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.242830][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   97.251050][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   97.260064][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   97.268200][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   97.288161][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   97.296736][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   97.307416][  T987] device veth0_vlan entered promiscuous mode
[   97.319547][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   97.327511][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   97.338533][  T306] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   97.354375][  T987] device veth1_macvtap entered promiscuous mode
[   97.361360][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   97.369076][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   97.376584][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   97.384933][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   97.393901][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   97.401411][   T39] usb 1-1: Dual-Role OTG device on HNP port
[   97.420999][   T39] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 5.15
[   97.430800][   T45] device bridge_slave_1 left promiscuous mode
[   97.437123][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.458848][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.466867][   T39] usb 1-1: SerialNumber: 012345678
[   97.476468][   T45] device bridge_slave_0 left promiscuous mode
[   97.483863][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.498796][   T26] android_work: sent uevent USB_STATE=CONFIGURED
[   97.505531][   T45] device bridge_slave_1 left promiscuous mode
[   97.511963][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.526479][   T45] device bridge_slave_0 left promiscuous mode
[   97.561363][ T1012] loop9: detected capacity change from 0 to 512
[   97.568329][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.577059][   T45] device veth1_macvtap left promiscuous mode
[   97.590344][   T45] device veth0_vlan left promiscuous mode
[   97.610826][   T39] input: HID 1d6b:0104 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:1D6B:0104.0002/input/input5
[   97.622284][   T45] device veth1_macvtap left promiscuous mode
[   97.629436][   T45] device veth0_vlan left promiscuous mode
[   97.650189][ T1012] EXT4-fs error (device loop9): ext4_orphan_get:1406: inode #15: comm syz.9.246: inode has both inline data and extents flags
[   97.668894][ T1012] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.246: couldn't read orphan inode 15 (err -117)
[   97.697761][ T1012] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   97.715871][   T39] hid-generic 0003:1D6B:0104.0002: input,hidraw0: USB HID v1.01 Keyboard [HID 1d6b:0104] on usb-dummy_hcd.0-1/input0
[   97.719552][ T1012] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   97.737154][ T1012] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   97.745690][  T991] loop0: detected capacity change from 0 to 131072
[   97.796854][  T991] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[   97.808592][  T991] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   97.818594][  T991] F2FS-fs (loop0): invalid crc value
[   97.835312][  T991] F2FS-fs (loop0): Found nat_bits in checkpoint
[   97.934483][  T991] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   97.938996][  T306] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[   97.949295][  T991] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   97.951280][  T306] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.966120][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   97.978858][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   97.987238][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   97.995289][  T306] usb 9-1: Product: syz
[   97.999514][  T306] usb 9-1: Manufacturer: syz
[   98.004132][  T306] usb 9-1: SerialNumber: syz
[   98.009046][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   98.188697][ T1049] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   98.197440][ T1049] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   99.888423][    C1] sched: RT throttling activated
[  101.294634][ T1088] loop0: detected capacity change from 0 to 512
[  101.336735][ T1088] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.272: inode has both inline data and extents flags
[  101.352381][ T1088] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.272: couldn't read orphan inode 15 (err -117)
[  101.365259][ T1088] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  101.399252][ T1088] overlayfs: missing 'lowerdir'
[  101.461266][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  101.461281][   T30] audit: type=1400 audit(1785416553.448:241): avc:  denied  { read } for  pid=1117 comm="syz.1.286" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  101.499860][   T30] audit: type=1400 audit(1785416553.448:242): avc:  denied  { open } for  pid=1117 comm="syz.1.286" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  101.543615][   T30] audit: type=1400 audit(1785416553.458:243): avc:  denied  { ioctl } for  pid=1117 comm="syz.1.286" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  101.582184][ T1131] loop9: detected capacity change from 0 to 512
[  101.604421][   T30] audit: type=1400 audit(1785416553.588:244): avc:  denied  { write } for  pid=1134 comm="syz.0.294" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  101.642013][ T1139] device dummy0 entered promiscuous mode
[  101.672337][ T1131] EXT4-fs error (device loop9): ext4_orphan_get:1406: inode #15: comm syz.9.292: inode has both inline data and extents flags
[  101.685647][ T1131] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.292: couldn't read orphan inode 15 (err -117)
[  101.697621][ T1131] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  101.713431][ T1131] overlayfs: missing 'lowerdir'
[  101.863315][ T1158] tap0: tun_chr_ioctl cmd 1074025677
[  101.877616][ T1158] tap0: linktype set to 777
[  101.966777][ T1168] loop9: detected capacity change from 0 to 512
[  102.034314][ T1168] EXT4-fs error (device loop9): ext4_orphan_get:1406: inode #15: comm syz.9.309: inode has both inline data and extents flags
[  102.060657][ T1168] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.309: couldn't read orphan inode 15 (err -117)
[  102.078489][ T1168] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  102.104889][ T1168] overlayfs: missing 'lowerdir'
[  102.149285][  T314] usb 9-1: USB disconnect, device number 2
[  102.418120][ T1211] loop1: detected capacity change from 0 to 512
[  102.460238][   T30] audit: type=1400 audit(1785416554.448:245): avc:  denied  { append } for  pid=1214 comm="syz.2.331" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  102.536593][   T30] audit: type=1400 audit(1785416554.518:246): avc:  denied  { nlmsg_read } for  pid=1218 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  102.579692][ T1211] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.327: inode has both inline data and extents flags
[  102.598467][   T30] audit: type=1400 audit(1785416554.558:247): avc:  denied  { create } for  pid=1222 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  102.611363][ T1211] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.327: couldn't read orphan inode 15 (err -117)
[  102.703104][ T1211] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  102.749743][ T1228] kvm [1227]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x187 data 0xff
[  102.790264][ T1235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'.
[  102.813771][ T1235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.338'.
[  102.824394][ T1211] overlayfs: missing 'workdir'
[  102.880651][   T30] audit: type=1400 audit(1785416554.868:248): avc:  denied  { create } for  pid=1236 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  102.939511][   T30] audit: type=1400 audit(1785416554.898:249): avc:  denied  { setopt } for  pid=1236 comm="syz.0.339" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  102.966070][ T1244] binder_alloc: 1243: binder_alloc_buf, no vma
[  102.972199][   T30] audit: type=1400 audit(1785416554.898:250): avc:  denied  { read } for  pid=1236 comm="syz.0.339" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  103.051158][ T1249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'.
[  103.114728][ T1258] device syzkaller0 entered promiscuous mode
[  103.146257][ T1264] loop0: detected capacity change from 0 to 512
[  103.166176][ T1264] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.351: inode has both inline data and extents flags
[  103.225119][ T1264] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.351: couldn't read orphan inode 15 (err -117)
[  103.276006][ T1264] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  103.331904][ T1264] overlayfs: missing 'workdir'
[  103.386623][ T1280] netlink: 'syz.1.358': attribute type 7 has an invalid length.
[  103.398554][  T376] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  103.407379][ T1280] netlink: 248 bytes leftover after parsing attributes in process `syz.1.358'.
[  103.447233][ T1287] UDC core: couldn't find an available UDC or it's busy: -16
[  103.467314][ T1287] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  103.476489][ T1287] fuse: Bad value for 'fd'
[  103.481325][ T1287] fuse: Unknown parameter 'use0000000000000000000000000000000000000000'
[  103.595673][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  103.604271][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  103.613272][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  103.622181][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  103.631073][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  103.639516][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  103.647767][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  103.648551][  T376] usb 3-1: Using ep0 maxpacket: 8
[  103.656708][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  103.788539][  T376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  103.799784][  T376] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  103.809057][  T376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.817765][  T376] usb 3-1: config 0 descriptor??
[  104.233337][ T1309] loop0: detected capacity change from 0 to 512
[  104.244809][ T1309] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.370: inode has both inline data and extents flags
[  104.258073][ T1309] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.370: couldn't read orphan inode 15 (err -117)
[  104.270393][ T1309] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  104.291292][ T1309] overlayfs: missing 'workdir'
[  104.414798][  T376] usb 3-1: USB disconnect, device number 3
[  104.552326][ T1344] loop1: detected capacity change from 0 to 512
[  104.576693][ T1348] device syzkaller0 entered promiscuous mode
[  104.608527][   T39] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  104.621494][ T1344] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.384: inode has both inline data and extents flags
[  104.662741][ T1344] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.384: couldn't read orphan inode 15 (err -117)
[  104.674369][ T1358] netlink: 'syz.0.390': attribute type 3 has an invalid length.
[  104.676113][ T1344] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  104.727248][ T1363] ==================================================================
[  104.735367][ T1363] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3200
[  104.743548][ T1363] Read of size 8 at addr ffff88810b218ec0 by task syz.0.392/1363
[  104.751287][ T1363] 
[  104.753636][ T1363] CPU: 0 PID: 1363 Comm: syz.0.392 Not tainted syzkaller #0
[  104.760938][ T1363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  104.771017][ T1363] Call Trace:
[  104.774317][ T1363]  <TASK>
[  104.777273][ T1363]  __dump_stack+0x21/0x30
[  104.781648][ T1363]  dump_stack_lvl+0x110/0x170
[  104.786350][ T1363]  ? show_regs_print_info+0x20/0x20
[  104.791583][ T1363]  ? load_image+0x3f0/0x3f0
[  104.796132][ T1363]  print_address_description+0x7f/0x2c0
[  104.801707][ T1363]  ? tc_setup_flow_action+0x88e/0x3200
[  104.807183][ T1363]  kasan_report+0x10f/0x150
[  104.811688][ T1363]  ? tc_setup_flow_action+0x88e/0x3200
[  104.817146][ T1363]  __asan_report_load8_noabort+0x14/0x20
[  104.822781][ T1363]  tc_setup_flow_action+0x88e/0x3200
[  104.828087][ T1363]  mall_replace_hw_filter+0x2db/0x8d0
[  104.833468][ T1363]  ? pcpu_block_update_hint_alloc+0x8bc/0xc50
[  104.839533][ T1363]  ? mall_set_parms+0x520/0x520
[  104.844386][ T1363]  ? tcf_exts_destroy+0xb0/0xb0
[  104.849324][ T1363]  ? pcpu_alloc+0x1118/0x16f0
[  104.854007][ T1363]  ? mall_set_parms+0x1e4/0x520
[  104.858852][ T1363]  mall_change+0x544/0x760
[  104.863261][ T1363]  ? __kasan_check_write+0x14/0x20
[  104.868386][ T1363]  ? mall_get+0xa0/0xa0
[  104.872551][ T1363]  ? tcf_chain_tp_insert_unique+0x946/0xa70
[  104.878468][ T1363]  ? mall_get+0xa0/0xa0
[  104.882644][ T1363]  tc_new_tfilter+0x13df/0x1990
[  104.887496][ T1363]  ? tcf_gate_entry_destructor+0x20/0x20
[  104.893127][ T1363]  ? security_capable+0x87/0xb0
[  104.897973][ T1363]  ? ns_capable+0x8c/0xf0
[  104.902310][ T1363]  ? netlink_net_capable+0x125/0x160
[  104.907599][ T1363]  ? tcf_gate_entry_destructor+0x20/0x20
[  104.913368][ T1363]  rtnetlink_rcv_msg+0x83c/0xcb0
[  104.918305][ T1363]  ? rtnetlink_bind+0x80/0x80
[  104.922971][ T1363]  ? avc_has_perm_noaudit+0x390/0x490
[  104.928338][ T1363]  ? memcpy+0x56/0x70
[  104.932317][ T1363]  ? avc_has_perm_noaudit+0x30a/0x490
[  104.937679][ T1363]  ? arch_stack_walk+0xee/0x140
[  104.942628][ T1363]  ? avc_denied+0x1b0/0x1b0
[  104.947186][ T1363]  ? stack_trace_save+0xa6/0xf0
[  104.952051][ T1363]  ? avc_has_perm+0x163/0x250
[  104.956745][ T1363]  ? avc_has_perm_noaudit+0x490/0x490
[  104.959211][   T39] usb 9-1: Using ep0 maxpacket: 8
[  104.962137][ T1363]  ? x64_sys_call+0x4b/0x9a0
[  104.962182][ T1363]  ? selinux_nlmsg_lookup+0x39d/0x440
[  104.962207][ T1363]  netlink_rcv_skb+0x1e9/0x430
[  104.962229][ T1363]  ? rtnetlink_bind+0x80/0x80
[  104.962248][ T1363]  ? netlink_ack+0xb10/0xb10
[  104.991207][ T1363]  ? _copy_from_iter+0x4a4/0x10a0
[  104.996243][ T1363]  ? __netlink_lookup+0x387/0x3b0
[  105.001274][ T1363]  rtnetlink_rcv+0x1c/0x20
[  105.005706][ T1363]  netlink_unicast+0x86c/0xa30
[  105.010496][ T1363]  netlink_sendmsg+0x879/0xb80
[  105.015276][ T1363]  ? netlink_getsockopt+0x530/0x530
[  105.020485][ T1363]  ? security_socket_sendmsg+0x82/0xa0
[  105.025979][ T1363]  ? netlink_getsockopt+0x530/0x530
[  105.031199][ T1363]  ____sys_sendmsg+0x5be/0x8f0
[  105.035975][ T1363]  ? __sys_sendmsg_sock+0x40/0x40
[  105.041018][ T1363]  ? import_iovec+0x7c/0xb0
[  105.045536][ T1363]  ___sys_sendmsg+0x236/0x2e0
[  105.050224][ T1363]  ? __sys_sendmsg+0x280/0x280
[  105.054995][ T1363]  ? sock_show_fdinfo+0xa0/0xa0
[  105.059886][ T1363]  ? __fdget+0x1a1/0x230
[  105.064148][ T1363]  __x64_sys_sendmsg+0x201/0x2d0
[  105.069124][ T1363]  ? ___sys_sendmsg+0x2e0/0x2e0
[  105.074001][ T1363]  ? __kasan_check_write+0x14/0x20
[  105.079118][ T1363]  ? switch_fpu_return+0x15d/0x2c0
[  105.084245][ T1363]  x64_sys_call+0x4b/0x9a0
[  105.088675][ T1363]  do_syscall_64+0x4c/0xa0
[  105.093107][ T1363]  ? clear_bhb_loop+0x50/0xa0
[  105.097797][ T1363]  ? clear_bhb_loop+0x50/0xa0
[  105.102486][ T1363]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  105.108390][ T1363] RIP: 0033:0x7f7e00eb3f99
[  105.112823][ T1363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.132442][ T1363] RSP: 002b:00007f7dff90d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  105.140868][ T1363] RAX: ffffffffffffffda RBX: 00007f7e0113bfa0 RCX: 00007f7e00eb3f99
[  105.148856][ T1363] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004
[  105.156829][ T1363] RBP: 00007f7e00f4aec4 R08: 0000000000000000 R09: 0000000000000000
[  105.164813][ T1363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.172792][ T1363] R13: 00007f7e0113c038 R14: 00007f7e0113bfa0 R15: 00007ffde2c3ab88
[  105.180774][ T1363]  </TASK>
[  105.183809][ T1363] 
[  105.186138][ T1363] Allocated by task 1363:
[  105.190467][ T1363]  __kasan_kmalloc+0xd4/0x100
[  105.195155][ T1363]  __kmalloc+0x13d/0x2c0
[  105.199401][ T1363]  tcf_idr_create+0x5f/0x790
[  105.204006][ T1363]  tcf_idr_create_from_flags+0x61/0x70
[  105.209499][ T1363]  tcf_gact_init+0x342/0x570
[  105.214101][ T1363]  tcf_action_init_1+0x3fd/0x6b0
[  105.219047][ T1363]  tcf_action_init+0x233/0x7a0
[  105.223823][ T1363]  tcf_exts_validate+0x24a/0x580
[  105.228786][ T1363]  mall_set_parms+0x48/0x520
[  105.233389][ T1363]  mall_change+0x478/0x760
[  105.237825][ T1363]  tc_new_tfilter+0x13df/0x1990
[  105.242691][ T1363]  rtnetlink_rcv_msg+0x83c/0xcb0
[  105.247742][ T1363]  netlink_rcv_skb+0x1e9/0x430
[  105.252517][ T1363]  rtnetlink_rcv+0x1c/0x20
[  105.256945][ T1363]  netlink_unicast+0x86c/0xa30
[  105.261740][ T1363]  netlink_sendmsg+0x879/0xb80
[  105.266513][ T1363]  ____sys_sendmsg+0x5be/0x8f0
[  105.271285][ T1363]  ___sys_sendmsg+0x236/0x2e0
[  105.275971][ T1363]  __x64_sys_sendmsg+0x201/0x2d0
[  105.280919][ T1363]  x64_sys_call+0x4b/0x9a0
[  105.285346][ T1363]  do_syscall_64+0x4c/0xa0
[  105.289775][ T1363]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  105.295673][ T1363] 
[  105.298006][ T1363] The buggy address belongs to the object at ffff88810b218e00
[  105.298006][ T1363]  which belongs to the cache kmalloc-192 of size 192
[  105.312079][ T1363] The buggy address is located 0 bytes to the right of
[  105.312079][ T1363]  192-byte region [ffff88810b218e00, ffff88810b218ec0)
[  105.325708][ T1363] The buggy address belongs to the page:
[  105.331351][ T1363] page:ffffea00042c8600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b218
[  105.341596][ T1363] flags: 0x4000000000000200(slab|zone=1)
[  105.347270][ T1363] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100042c00
[  105.355858][ T1363] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  105.364440][ T1363] page dumped because: kasan: bad access detected
[  105.370851][ T1363] page_owner tracks the page as allocated
[  105.376576][ T1363] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1344, ts 104700636855, free_ts 104694359951
[  105.392761][ T1363]  post_alloc_hook+0x192/0x1b0
[  105.397537][ T1363]  prep_new_page+0x1c/0x110
[  105.402041][ T1363]  get_page_from_freelist+0x2c3a/0x2cd0
[  105.407610][ T1363]  __alloc_pages+0x1a2/0x460
[  105.412205][ T1363]  new_slab+0xa0/0x4d0
[  105.416276][ T1363]  ___slab_alloc+0x3ac/0x840
[  105.420901][ T1363]  __slab_alloc+0x49/0x90
[  105.425259][ T1363]  kmem_cache_alloc_trace+0x146/0x270
[  105.430652][ T1363]  alloc_fs_context+0x64/0x7c0
[  105.435436][ T1363]  fs_context_for_mount+0x22/0x30
[  105.440477][ T1363]  do_new_mount+0x116/0xb40
[  105.444983][ T1363]  path_mount+0x640/0xff0
[  105.449310][ T1363]  __se_sys_mount+0x320/0x390
[  105.454001][ T1363]  __x64_sys_mount+0xbf/0xd0
[  105.458616][ T1363]  x64_sys_call+0x6bf/0x9a0
[  105.463135][ T1363]  do_syscall_64+0x4c/0xa0
[  105.467563][ T1363] page last free stack trace:
[  105.472255][ T1363]  free_unref_page_prepare+0x5fa/0x600
[  105.477722][ T1363]  free_unref_page+0xae/0x540
[  105.482410][ T1363]  __free_pages+0x6c/0x100
[  105.486837][ T1363]  __free_slab+0xe5/0x1e0
[  105.491177][ T1363]  __unfreeze_partials+0x15a/0x190
[  105.496298][ T1363]  put_cpu_partial+0xc6/0x120
[  105.500985][ T1363]  __slab_free+0x1d4/0x290
[  105.505410][ T1363]  ___cache_free+0x104/0x120
[  105.510033][ T1363]  qlink_free+0x4d/0x90
[  105.514209][ T1363]  qlist_free_all+0x5f/0xb0
[  105.518728][ T1363]  kasan_quarantine_reduce+0x14a/0x170
[  105.524191][ T1363]  __kasan_slab_alloc+0x2f/0xe0
[  105.529048][ T1363]  slab_post_alloc_hook+0x4f/0x2b0
[  105.534178][ T1363]  kmem_cache_alloc+0xf7/0x260
[  105.538957][ T1363]  __alloc_file+0x28/0x2a0
[  105.543378][ T1363]  alloc_empty_file+0x97/0x180
[  105.548153][ T1363] 
[  105.550489][ T1363] Memory state around the buggy address:
[  105.556135][ T1363]  ffff88810b218d80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[  105.564221][ T1363]  ffff88810b218e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  105.572287][ T1363] >ffff88810b218e80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  105.580353][ T1363]                                            ^
[  105.586511][ T1363]  ffff88810b218f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  105.594574][ T1363]  ffff88810b218f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  105.602630][ T1363] ==================================================================
[  105.610689][ T1363] Disabling lock debugging due to kernel taint
[  105.718690][   T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  105.729639][   T39] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  105.738738][   T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.747274][   T39] usb 9-1: config 0 descriptor??
[  107.352792][  T295] usb 9-1: USB disconnect, device number 3