last executing test programs:

34.479013041s ago: executing program 1 (id=194):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@ldst={0x0, 0x2, 0x3, 0x4, 0x7, 0x10, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x3a, &(0x7f0000000200)=""/58, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x8, 0x8388, 0x80}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xffffff93)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b)
close(r2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r4 = socket$inet6(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10)
sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
lremovexattr(0x0, 0x0)

33.629201731s ago: executing program 1 (id=196):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='ns\x00') (async)
mount$9p_fd(0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=f']) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt(r3, 0x1, 0x1, &(0x7f0000000080)=""/127, &(0x7f0000000000)=0x7f) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) (async)
r5 = socket(0x10, 0x3, 0x0)
connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000015c0)=@newtaction={0x18, 0x30, 0x829, 0x70bd2c, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async)
recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133}], 0x9}, 0x40020000)
fchdir(r0) (async)
r6 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) (async)
io_setup(0x1, &(0x7f0000000b80)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}])
fdatasync(r6) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000500)=""/78) (async)
sync() (async)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r8}, 0x10) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x68}}, 0x0)

33.629034731s ago: executing program 1 (id=197):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000100000008000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)

33.628827961s ago: executing program 1 (id=198):
open(0x0, 0x141840, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x48942, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

33.628427901s ago: executing program 1 (id=199):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780))
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x21085e, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}]}, 0x1, 0x516, &(0x7f0000000840)="$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")
prlimit64(0x0, 0x1, &(0x7f00000007c0)={0x6, 0x8b}, 0x0)
execve(&(0x7f0000000380)='./bus\x00', &(0x7f00000004c0), &(0x7f0000000740)={[&(0x7f0000000540)='!([\'\x00', &(0x7f0000000580)='journal_dev', &(0x7f00000005c0)='incremental-fs\x00', &(0x7f0000000600)='jo\x15dVA\xee\xdat\xd1v', &(0x7f0000000680)='journal_dev', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='GPL\x00']})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)
setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000100), 0x0, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x1, &(0x7f0000000340), 0x64, 0x52b, &(0x7f0000000f40)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky")
r7 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0)
mount$incfs(&(0x7f0000000300)='./bus\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000500), 0xc802, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0)

33.627705251s ago: executing program 0 (id=202):
open(0x0, 0x141840, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

33.626896981s ago: executing program 0 (id=204):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000400)={0x1f, @none}, 0x8)
listen(r2, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000f89000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab24, 0x38, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000780)={<r6=>0x0, 0x1000000400000006, 0x1000000000003})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000014c0)={{r2}, 0x0, 0xc, @unused=[0x1ff, 0x2, 0x1, 0x2d], @devid=r6})
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000680)=""/218, &(0x7f0000000040)=0xda)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
bind$bt_sco(r2, &(0x7f0000000400)={0x1f, @none}, 0x8) (async)
listen(r2, 0x0) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x8200, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000f89000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab24, 0x38, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000780)={0x0, 0x1000000400000006, 0x1000000000003}) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000014c0)={{r2}, 0x0, 0xc, @unused=[0x1ff, 0x2, 0x1, 0x2d], @devid=r6}) (async)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async)
getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000680)=""/218, &(0x7f0000000040)=0xda) (async)

33.617550162s ago: executing program 0 (id=206):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500"], 0x64}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

32.9994055s ago: executing program 1 (id=208):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@ldst={0x0, 0x2, 0x3, 0x4, 0x7, 0x10, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x3a, &(0x7f0000000200)=""/58, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x8, 0x8388, 0x80}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xffffff93)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b)
close(r2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r4 = socket$inet6(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10)
sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
lremovexattr(0x0, 0x0)

32.693259114s ago: executing program 0 (id=212):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@oldalloc}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40)
r10 = openat$incfs(r6, &(0x7f0000000000)='.log\x00', 0x0, 0x0)
ppoll(&(0x7f0000000340)=[{r10, 0x424}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0)
rename(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file1\x00')

32.186823041s ago: executing program 0 (id=213):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800080000000000", @ANYRES32, @ANYBLOB="d7100061612e79"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000001801000000000000000000facc40f1971dbb4081b0347a1c45364186c2d41b7bf9806851f5db69e215eee2480186cf39c3ed4418d83c3d1d11a209a5843b98ebe317e66c91f0e055a43e060dc3c9db988e4dc3db46c9db339d37266b99a0e4113e422263f7f099", @ANYRES32=r3, @ANYRESDEC=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x8000, {0x0, 0x0, 0x0, r3, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
close(r7)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setreuid(0x0, 0xee00)
getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="000426bd7000ffdbdf4d3860ecf5240100000038000280340001800800010004000000080001000600000008000100070000000800010008000000080001000400000008000100020000005000018008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="14000200000000000000000000000000000000001400020064766d7270300000000000000000000014000200776c616e3100"/60], 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000050)

31.982554083s ago: executing program 0 (id=217):
r0 = socket$packet(0x11, 0x3, 0x300)
fsetxattr$security_selinux(r0, &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:sulogin_exec_t:s0\x00', 0x24, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r1], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180), 0x2, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=")
sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0x100, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x4000800)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r12, 0xc17a)
socket$inet6(0xa, 0x80002, 0x88)
rt_sigtimedwait(&(0x7f0000000080)={[0x8]}, &(0x7f0000000380), &(0x7f00000000c0)={0x77359400}, 0x8)
sendmmsg$inet(r0, &(0x7f0000000b00), 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0xfff3, 0xfff1}, {0xfff2, 0xffff}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

31.945011564s ago: executing program 32 (id=217):
r0 = socket$packet(0x11, 0x3, 0x300)
fsetxattr$security_selinux(r0, &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:sulogin_exec_t:s0\x00', 0x24, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r1], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180), 0x2, 0xbd2, &(0x7f0000000540)="$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")
sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0x100, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x4000800)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r12, 0xc17a)
socket$inet6(0xa, 0x80002, 0x88)
rt_sigtimedwait(&(0x7f0000000080)={[0x8]}, &(0x7f0000000380), &(0x7f00000000c0)={0x77359400}, 0x8)
sendmmsg$inet(r0, &(0x7f0000000b00), 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0xfff3, 0xfff1}, {0xfff2, 0xffff}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

17.683569679s ago: executing program 33 (id=208):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@ldst={0x0, 0x2, 0x3, 0x4, 0x7, 0x10, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x3a, &(0x7f0000000200)=""/58, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x8, 0x8388, 0x80}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xffffff93)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b)
close(r2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r4 = socket$inet6(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10)
sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
lremovexattr(0x0, 0x0)

4.986397325s ago: executing program 2 (id=381):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000010000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)

4.884302026s ago: executing program 2 (id=382):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB], 0x64}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x3})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a84", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.522747751s ago: executing program 4 (id=385):
open(0x0, 0x141840, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x48942, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

4.426138952s ago: executing program 4 (id=386):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x64}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4.020758837s ago: executing program 2 (id=388):
open(0x0, 0x141840, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

3.937207549s ago: executing program 2 (id=389):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_open_procfs(0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
pipe(0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x3, 0x460, &(0x7f00000008c0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000f2030000000000000010000000000000002000060000000000"], 0x24, 0x0)
r4 = socket$inet(0x2, 0x3, 0x8d)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000140))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000104050000000000000000000300000005000100020000000800034000000003060006"], 0x2c}}, 0x2040004)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000027c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

2.498440337s ago: executing program 3 (id=390):
open(0x0, 0x141840, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x48942, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

2.494915457s ago: executing program 2 (id=401):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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")
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000001880)={0x0, 0x0, @ioapic={0x2000, 0x7, 0x9, 0x5, 0x0, [{0x5, 0x3, 0x5, '\x00', 0x7}, {0xd, 0x1, 0x3e}, {0xe, 0x0, 0x9, '\x00', 0x2b}, {0x4, 0x4, 0xc8, '\x00', 0x9}, {0x2, 0x1, 0x2a, '\x00', 0x5}, {0xd, 0xf, 0x0, '\x00', 0x2}, {0x3, 0x0, 0xc, '\x00', 0x8}, {0x7, 0x0, 0x41, '\x00', 0x8}, {0x4, 0x8, 0x4}, {0xd, 0x5, 0xd, '\x00', 0xfd}, {0x4a, 0x8, 0x8, '\x00', 0x2}, {0x7, 0x6, 0x14, '\x00', 0x7}, {0x2, 0x5a, 0x1, '\x00', 0x2}, {0x5, 0x3, 0x7}, {0x7, 0x5, 0x7f, '\x00', 0xa8}, {0x4, 0x9, 0x7, '\x00', 0x7}, {0x62, 0x30, 0x0, '\x00', 0xcf}, {0x9, 0x6, 0xb3, '\x00', 0x3}, {0xc, 0x9, 0x5, '\x00', 0x8}, {0x7, 0x5, 0x8, '\x00', 0x4}, {0x5, 0x1, 0x4}, {0x0, 0xcd, 0x8, '\x00', 0x1}, {0x76, 0x4, 0x3, '\x00', 0x2}, {0x1, 0x7, 0x3e, '\x00', 0x4}]}}) (async)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000001880)={0x0, 0x0, @ioapic={0x2000, 0x7, 0x9, 0x5, 0x0, [{0x5, 0x3, 0x5, '\x00', 0x7}, {0xd, 0x1, 0x3e}, {0xe, 0x0, 0x9, '\x00', 0x2b}, {0x4, 0x4, 0xc8, '\x00', 0x9}, {0x2, 0x1, 0x2a, '\x00', 0x5}, {0xd, 0xf, 0x0, '\x00', 0x2}, {0x3, 0x0, 0xc, '\x00', 0x8}, {0x7, 0x0, 0x41, '\x00', 0x8}, {0x4, 0x8, 0x4}, {0xd, 0x5, 0xd, '\x00', 0xfd}, {0x4a, 0x8, 0x8, '\x00', 0x2}, {0x7, 0x6, 0x14, '\x00', 0x7}, {0x2, 0x5a, 0x1, '\x00', 0x2}, {0x5, 0x3, 0x7}, {0x7, 0x5, 0x7f, '\x00', 0xa8}, {0x4, 0x9, 0x7, '\x00', 0x7}, {0x62, 0x30, 0x0, '\x00', 0xcf}, {0x9, 0x6, 0xb3, '\x00', 0x3}, {0xc, 0x9, 0x5, '\x00', 0x8}, {0x7, 0x5, 0x8, '\x00', 0x4}, {0x5, 0x1, 0x4}, {0x0, 0xcd, 0x8, '\x00', 0x1}, {0x76, 0x4, 0x3, '\x00', 0x2}, {0x1, 0x7, 0x3e, '\x00', 0x4}]}})
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00')
pread64(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x7fffffff)
lseek(r0, 0x1000000, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket(0x10, 0x6, 0xfffc)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x21ee, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x21ee, 0x4)
sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e604030077010000000109025cff58690000000904000302ccd4280009050b02000000040009058a02"], 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
recvmmsg(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000880)=""/4084, 0xff4}], 0x2}, 0x3}], 0x1, 0x6120, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
socket$packet(0x11, 0x3, 0x300)
write$binfmt_script(r2, &(0x7f0000020240), 0x10010)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r8=>0x0})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
sendmmsg$inet(r9, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='+', 0x1}], 0x1}}], 0x1, 0x240080c4) (async)
sendmmsg$inet(r9, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='+', 0x1}], 0x1}}], 0x1, 0x240080c4)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf252500000005002b000200000005002e000300000008002f000500000008000200", @ANYRES32=r8, @ANYBLOB='\b\x00,'], 0x3c}, 0x1, 0x0, 0x0, 0xf2910ea35844d97b}, 0x8090)
sync_file_range(r1, 0x400000000000004, 0x7fffffff, 0x6) (async)
sync_file_range(r1, 0x400000000000004, 0x7fffffff, 0x6)

2.440101448s ago: executing program 6 (id=391):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB], 0x64}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x3})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.410543628s ago: executing program 4 (id=392):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000010000000800"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)

2.403430048s ago: executing program 3 (id=393):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_emit_ethernet(0xae, &(0x7f0000000200)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x54, 0xe, 0xe87d, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400000126000400"}, {0x18, 0x1, "45972e75e433"}]}}}}}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000})

2.31110013s ago: executing program 5 (id=396):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = socket(0x840000000002, 0x3, 0xfa)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$eJzs3d9rHFsdAPDvTLK3v3JNrvpwveBtsZW0aHeTxrbBh1pB7FPBWt9rTDYhZJMN2U3bhCIpviuIqOCTT74I/gGC9E8QoaDvUkURbfXBB3VlZ2drG3eTlG52LsnnA9M5M2d3v9/TsGfmzBx2Aji2zkXEzYgYiYhLETGe70/z5Va7/k7ndS+eP5pvL0m0Wnf/mkSS7+t+VpKvz0TETkScjIiv34r4VvL/cRtb2ytztVp1I9+uNFfXK42t7cvLq3NL1aXq2szM9LXZ67NXZ6cG0s6JiLjxlT/+8Hs/++qNX33+we/v/fnit9tpjeX1r7ZjkDpNL2X/F12jEbFxGMEKMJKvS33qvzsyxGQAANhX+xz/4xHxmez8fzxGsrNTAAAA4ChpfWks/pVEtAAAAIAjK83mwCZpOZ8LMBZpWi535vB+Mk6ntXqj+bnF+ubaQmeu7ESU0sXlWnUqnys8EaWkvT2dz7Htbl/ZtT0TEe9FxA/GT2Xb5fl6baHoix8AAABwTJzZNf7/x3g2/j9RdF4AAADAgE0UnQAAAABw6Iz/AQAA4Ogz/gcAAIAj7Wu3b7eXVvf51wv3tzZX6vcvL1QbK+XVzfnyfH1jvbxUry9lv9m3ut/n1er19S/E2ubDSrPaaFYaW9v3Vuuba817y689AhsAAAAYovfOPvldEhE7XzyVLW3vFJ0UMBTJPvXZQ0Ke5Rt/GEJCwNCMFJ0AUJjRohMAClMqOgGgcPtdB+g7eefXg88FAAA4HJOf6n//37UBONrSohMAAIbO/X84vkqvzwC8WlwmQFE+tk/929//b7XeKCEAAGDgxrIlScv5vcCxSNNyOeLd7LEApWRxuVadyscHvx0vnWhvT2fvTPadMwwAAAAAAAAAAAAAAAAAAAAAAAAAdLRaSbQAAACAIy0i/VOS/Zp/xOT4hbHd1wfeSf45nq0j4sFP7v7o4VyzuTHd3v+3l/ubP873XyniCgYAAACwW3ec3h3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAgvXj+aL67DDPuX74cERM94589ma1ORikiTv89idFX3pdExMgA4u88joj3e8VP2mnFRHSy6BX/VIHx04g4M4D4cJw9afc/N3t9/9I4l617f/9G8+Vt9e//0uj2fyN9+p93Dxjjg6e/qPSN/zjig9He/U83ftIn/vkDxv/mN7a3+9W1fhox2fP4k7wWq9JcXa80trYvL6/OLVWXqmszM9PXZq/PXp2dqiwu16r5vz1jfP/Tv/zPXu0/3Sf+xD7tv3DA9v/76cPnn+gUS73iXzzf+/j7fp/4aX7s+2xebtdPdss7nfKrPvz5bz7cq/0Lfdr/8u/f40DbjnnxgO2/dOc7zw74UgBgCBpb2ytztVp1460Kg/qcNyykUUBQhUMqnPhopKHQKezVayTD66AAAICB+d9Jf9GZAAAAAAAAAAAAAAAAAAAAwPE1jJ8T2x1zp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs6b8BAAD///JI2KQ=")
lchown(0x0, 0x0, 0xee01)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_clone3(&(0x7f0000000480)={0x42030200, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x11}, &(0x7f0000001280)=""/164, 0xa4, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
fchdir(0xffffffffffffffff)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)

1.954622855s ago: executing program 6 (id=397):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x64}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.954333515s ago: executing program 4 (id=398):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001000000bd79000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002dc0)=@delchain={0x34, 0x65, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x4, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x1f4}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/195, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000500)=""/101)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)

1.091946316s ago: executing program 5 (id=399):
ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x3})
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/timers\x00', 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
poll(&(0x7f0000000140)=[{r0, 0x34}, {r1, 0x208a}, {r2, 0x309}, {r3, 0x2000}], 0x4, 0x3)
pwritev(r1, &(0x7f0000001340)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="ba8649a29ef9ed709ad45adf28bd8c22586cd56616c4cc7396041569155b69668a714bfa7ffff3ee6cadd505c66d0b26d66a497d03e551bac3c895b63966bca70d21dd86beae88c22d4603a11f80aedc09f4af369d741c0e445e8c119e67fd0152bf7a45dee2ae761818905a8b370f2f9864c6d488ea0f1700a7b1d22a4537e5b775f1eb11", 0x85}, {&(0x7f0000001240)="7b4facd8fc17e5b026fb9bf0a12b4d65c7ad530b3922b93235b843cedffeae74d30147aef8ff9ec964b5d6c7f4e52a5b4ebc6fd0a99b637e879d978117e1ed419286a0fbbd0f64a9bd3f0c1d25c5245efbc56bcaba3b58f1b92f7d2eae9c4f18d253e20b9f0d4137c2931f8f4e019b0bde640af724f929c6328a4f06e7d6658a4b8cc7d5cc64a35758551be846bf5d5fc4b4d995566342ba22b8094bf10373be56b312565e569f5e7b67dd6c60f4c0963a49b5a0f43ba7501e86fb8f7f148574ebbf", 0xc2}], 0x3, 0x6, 0x4)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001380)={0x0, 0x4, 0x2, 0x3, 0x0, [@local, @remote]}, 0x28)
getsockname$packet(r1, &(0x7f0000001400)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001440)=0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000001740)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001700)={&(0x7f0000001480)=@allocspi={0x248, 0x16, 0x20, 0x70bd28, 0x25dfdbfd, {{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x4e21, 0x7fff, 0x4e22, 0xec77, 0xa, 0x80, 0x120, 0x8, r4, 0xffffffffffffffff}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {0x10, 0x100, 0xc0c, 0x1, 0x7, 0x6, 0xfffffffffffffffe, 0x400}, {0x4, 0x6, 0x0, 0x8000000000000001}, {0x9, 0x0, 0x8}, 0x70bd2a, 0x0, 0x0, 0x1, 0x3, 0xa1}, 0x200, 0x6}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7f}, @migrate={0x134, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x33, 0x3, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private0, @in=@local, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x3c, 0x2, 0x0, 0x3502, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@multicast1, @in6=@empty, @in=@remote, 0x6c, 0x7ed2506271a39567, 0x0, 0x3507, 0x2, 0x2}, {@in=@rand_addr=0x64010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, @in=@rand_addr=0x64010100, 0xff, 0x1, 0x0, 0x3504, 0x2, 0x2}]}, @policy_type={0xa, 0x10, {0x1}}, @extra_flags={0x8, 0x18, 0x43d}]}, 0x248}, 0x1, 0x0, 0x0, 0x8054}, 0x40000)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001780), 0x400, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x8, '\x00', r4, r5, 0x0, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001840)='/proc/schedstat\x00', 0x0, 0x0)
writev(r6, &(0x7f0000003c00)=[{&(0x7f0000001880)="d26104a90fecf69c50a28e03356697", 0xf}, {&(0x7f00000018c0)="1bd1ac5e748bc861faab54bfa1b8b4af4423b34ffd95295abcb143d3fe07f2f582228796861af34db002d741c79d291f0c35fbd92746c31c44fc6a6577af46adcf1eb4a22f77374c772c5b38fcaef52082ed89c0f3a539c69d273644962c55dfd358dabfa909c79d4ff457a9b71acc0628dfbb0f52c9416433712bc1ef32d1e631fa912ea5901dbef315e445b30e3f504ea6d638c6948128a7b1d7a4bb781812ea6bc87acf532f", 0xa7}, {&(0x7f0000001980)="3806cca71ff0f516648af63b87601adb1ed42822a57a0375e02a9c8d27b156877df7eb8b7e9a4e642a09d9d2bdc8e3837f4cc50e09963fdf164620497635f0b73ab859be145f42385cb3b0b74df1b740c120be901042e0c4476efd5ab8e5d706a9bed6d17097c3e41cdc6e3fab7ff00db3172470f30ac49e80386ca08988427e43486148b7b2bf6d855ebd9e4a93e9a412593baef79fe54332e21e06a91b4a3b4d5d4fb0d7d2ef8ad345896da659e2b851925a5f2e72881b06d299877de0c2916450", 0xc2}, {&(0x7f0000001a80)="b7afc176a01d4e76ef910cf1a9a16f7d17b92325a0cd019132b9925e299472d7959524fb09dcc08df86cf4be2abd12a9e6ba7b3d8783062f57568d602b12190a2a236354164075811764970f564ecd28c30069749710bd53db6c07f620b562a84d8c849d3dd063575c4408064cde8e1b5f68d74ea43c712c4064fbcfa8e54d2086cf036de54c74330a7474a7bf2ffeab984981c071a034623cbc477e77f079f5686571db4223ae1c4fe2e9eab03b07a1e06d944e5c48265bebbd7ab13aee0eb21b1f690d3672b8", 0xc7}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="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", 0x1000}, {&(0x7f0000003b80)="39097d0de8e71bbaff54a1a928fc5393bc8b37111f1f87b6ae7d12f464a79c508d02e9d26fb7d3ef1249457dd1b5e01a98e306b0bc1f4a6d759dadade1c1a5d1614a5cd4f8fb261282e6c903a8bcad13b63c1de39628945fd8017aa07bd40de33f", 0x61}], 0x7)
bind$can_raw(r1, &(0x7f0000003c80), 0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000003d40)={0x3ff, 0x48, '\x00', 0x1, &(0x7f0000003cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
preadv(r7, &(0x7f0000003e00)=[{&(0x7f0000003d80)=""/68, 0x44}], 0x1, 0x8001, 0x101)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000003e40))
sendmsg$can_raw(r2, &(0x7f0000003f80)={&(0x7f0000003e80)={0x1d, r4}, 0x10, &(0x7f0000003f40)={&(0x7f0000003ec0)=@canfd={{0x0, 0x1}, 0x12, 0x3, 0x0, 0x0, "f67557bb7088bed38bf09979dbf860119828a292e32d27a3474698d93277d382ad4580a21cc5768302a0eddf6339a63100f3d2d8358991fb0c275034a1065ae9"}, 0x48}}, 0x800)
connect$unix(r5, &(0x7f0000003fc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
listen(r7, 0x0)
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x4bf34cc8)
write$char_usb(r8, &(0x7f0000004040)="ea00ed5dba7b73cfb2741fd493b5b24f9d349a889180169357ce3e4c87a64b925074efe18b45637f2e0a19508282a3d08a725a5887aba8ab094790a60357fc3d9db1a0601d4b3273d3d9a647b7bc335171c8418f6f3cd36d672e25ee845df8a80a42f6a74b99f9eff3791226b464ccde9ebd2f65ed1f123be9d796eeee66302a8f9d4a9dc64d527c7d", 0x89)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000004100), &(0x7f0000004140)=0x4)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004180)={'bond0\x00', <r9=>0x0})
getpid()
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000042c0)={&(0x7f00000041c0), 0xc, &(0x7f0000004280)={&(0x7f0000004200)={0x74, 0x12, 0x400, 0x70bd25, 0x25dfdbfb, {0x5, 0x7, 0x9, 0x1, {0x4e23, 0x4e20, [0x3, 0x1c81, 0x18, 0x3], [0x40, 0x9, 0x8, 0x4], r9, [0x4, 0x60]}, 0xb126, 0x1e42}, [@INET_DIAG_REQ_BYTECODE={0x27, 0x1, "7f162ad0c5d616999fe9199b9d3f99b4dcf549b6895b1616703baf2aa29f457643c719"}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x2000c045)
fchown(r3, 0x0, 0x0)

1.091605386s ago: executing program 3 (id=400):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB], 0x64}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x3})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a84", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.091288026s ago: executing program 4 (id=402):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = socket(0x840000000002, 0x3, 0xfa)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$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")
lchown(0x0, 0x0, 0xee01)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_clone3(&(0x7f0000000480)={0x42030200, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x11}, &(0x7f0000001280)=""/164, 0xa4, 0x0, 0x0}, 0x58)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
fchdir(0xffffffffffffffff)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)

1.030921936s ago: executing program 5 (id=403):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_usb_connect(0x5, 0x164, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e010000082406", @ANYBLOB="81ce03cb93c6"], 0x0)

401.161405ms ago: executing program 2 (id=404):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x64}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

400.377545ms ago: executing program 5 (id=414):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x64}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

399.858614ms ago: executing program 6 (id=405):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
clock_gettime(0x0, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0})
timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000001c0)={{r2, r3+60000000}}, &(0x7f00000002c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read$FUSE(r4, 0x0, 0x2a)
bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[], 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r6 = socket$inet(0x2, 0xa, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10)
getcwd(&(0x7f00000003c0)=""/29, 0x1d)
setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000040)=0x10001, 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f00000000c0)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x45b, &(0x7f0000000b00)="$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")
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'wg0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)

171.141887ms ago: executing program 6 (id=406):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 64)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000940)="0102", 0x0}, 0x50) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 64)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (rerun: 64)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00') (async)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000100001040200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00028000"/32], 0x38}}, 0x4000000)

113.042758ms ago: executing program 4 (id=407):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = socket(0x840000000002, 0x3, 0xfa)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$eJzs3d9rHFsdAPDvTLK3v3JNrvpwveBtsZW0aHeTxrbBh1pB7FPBWt9rTDYhZJMN2U3bhCIpviuIqOCTT74I/gGC9E8QoaDvUkURbfXBB3VlZ2drG3eTlG52LsnnA9M5M2d3v9/TsGfmzBx2Aji2zkXEzYgYiYhLETGe70/z5Va7/k7ndS+eP5pvL0m0Wnf/mkSS7+t+VpKvz0TETkScjIiv34r4VvL/cRtb2ytztVp1I9+uNFfXK42t7cvLq3NL1aXq2szM9LXZ67NXZ6cG0s6JiLjxlT/+8Hs/++qNX33+we/v/fnit9tpjeX1r7ZjkDpNL2X/F12jEbFxGMEKMJKvS33qvzsyxGQAANhX+xz/4xHxmez8fzxGsrNTAAAA4ChpfWks/pVEtAAAAIAjK83mwCZpOZ8LMBZpWi535vB+Mk6ntXqj+bnF+ubaQmeu7ESU0sXlWnUqnys8EaWkvT2dz7Htbl/ZtT0TEe9FxA/GT2Xb5fl6baHoix8AAABwTJzZNf7/x3g2/j9RdF4AAADAgE0UnQAAAABw6Iz/AQAA4Ogz/gcAAIAj7Wu3b7eXVvf51wv3tzZX6vcvL1QbK+XVzfnyfH1jvbxUry9lv9m3ut/n1er19S/E2ubDSrPaaFYaW9v3Vuuba817y689AhsAAAAYovfOPvldEhE7XzyVLW3vFJ0UMBTJPvXZQ0Ke5Rt/GEJCwNCMFJ0AUJjRohMAClMqOgGgcPtdB+g7eefXg88FAAA4HJOf6n//37UBONrSohMAAIbO/X84vkqvzwC8WlwmQFE+tk/929//b7XeKCEAAGDgxrIlScv5vcCxSNNyOeLd7LEApWRxuVadyscHvx0vnWhvT2fvTPadMwwAAAAAAAAAAAAAAAAAAAAAAAAAdLRaSbQAAACAIy0i/VOS/Zp/xOT4hbHd1wfeSf45nq0j4sFP7v7o4VyzuTHd3v+3l/ubP873XyniCgYAAACwW3ec3h3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAgvXj+aL67DDPuX74cERM94589ma1ORikiTv89idFX3pdExMgA4u88joj3e8VP2mnFRHSy6BX/VIHx04g4M4D4cJw9afc/N3t9/9I4l617f/9G8+Vt9e//0uj2fyN9+p93Dxjjg6e/qPSN/zjig9He/U83ftIn/vkDxv/mN7a3+9W1fhox2fP4k7wWq9JcXa80trYvL6/OLVWXqmszM9PXZq/PXp2dqiwu16r5vz1jfP/Tv/zPXu0/3Sf+xD7tv3DA9v/76cPnn+gUS73iXzzf+/j7fp/4aX7s+2xebtdPdss7nfKrPvz5bz7cq/0Lfdr/8u/f40DbjnnxgO2/dOc7zw74UgBgCBpb2ytztVp1460Kg/qcNyykUUBQhUMqnPhopKHQKezVayTD66AAAICB+d9Jf9GZAAAAAAAAAAAAAAAAAAAAwPE1jJ8T2x1zp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs6b8BAAD///JI2KQ=")
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_clone3(&(0x7f0000000480)={0x42030200, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x11}, &(0x7f0000001280)=""/164, 0xa4, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
fchdir(0xffffffffffffffff)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)

112.146458ms ago: executing program 5 (id=408):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000010000000800"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)

111.873398ms ago: executing program 3 (id=409):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
clock_gettime(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bind$inet(r1, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f00000016c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)

50.823239ms ago: executing program 6 (id=410):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001000000bd79000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002dc0)=@delchain={0x34, 0x65, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x4, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x1f4}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/195, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000500)=""/101)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)

49.734819ms ago: executing program 3 (id=421):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r0 = socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x4c}}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0)={@empty, @initdev, <r3=>0x0}, &(0x7f0000000100)=0xc) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', <r5=>0x0})
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) (async)
sendto$packet(r4, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) (async)
getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r8=>0x0}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
r10 = socket$igmp(0x2, 0x3, 0x2) (async)
syz_emit_ethernet(0x42, &(0x7f0000000680)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@generic={0x8b9, "8d004fd4bfd4fc7ad17a87c9716ddeeb9a1824805b947f8f2036357c8f00fe507c9d00ccbb9b691dee17967124fd3cf5"}}}, 0xfffffffffffffffc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r11=>0x0}) (async)
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r11})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="44010000", @ANYRES16=r2, @ANYBLOB="70cafcdbdf250400000048000180080003000433c3c4ade500"/42, @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002006e657464657673696d3000000000000008000300020000000c00018008000100", @ANYRES32=r3, @ANYBLOB="64000180140002007663616e3000000000000000000000001400020076657468315f766c616e0000000000001400020070696d3672656730000000000000000008000100", @ANYRES32=r5, @ANYBLOB="080003000200000014000200687372300000000000000000000000001400018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="6400018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32, @ANYBLOB="1400020077673200000000000000000000000000140002006e6574706369300000000000000000000800030000000000"], 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x90) (async)
r13 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macsec0\x00', <r14=>0x0}) (async)
unshare(0x62040200)
r15 = gettid()
sendmsg$nl_route(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r14, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r15], 0x28}}, 0x0)

35.421019ms ago: executing program 5 (id=411):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_emit_ethernet(0xae, &(0x7f0000000200)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x54, 0xe, 0xe87d, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400000126000400"}, {0x18, 0x1, "45972e75e433"}]}}}}}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000})

21.56202ms ago: executing program 3 (id=412):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
chroot(0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10)
setresuid(0x0, 0x0, 0x0)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0xa2c)

0s ago: executing program 6 (id=413):
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)={0x1, 0xffffffff, 0x7})
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000300)={[{@inline_dentry}, {}, {@acl}, {@whint_mode_fs}, {@checkpoint_diasble}, {@disable_roll_forward}, {@background_gc_on}, {@checkpoint_diasble}, {@noextent_cache}, {@data_flush}, {@noflush_merge}, {@io_bits={'io_bits', 0x3d, 0xb1}}, {@jqfmt_vfsold}, {@nolazytime}]}, 0x1, 0x5505, &(0x7f00000079c0)="$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")
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
pivot_root(&(0x7f0000000000)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x20)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xcbb, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x1, 0xf, "1000a87d827bc2c95a5947380b00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r5 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
rt_tgsigqueueinfo(r5, r5, 0x36, &(0x7f0000000240)={0x21, 0xfffffff7, 0xe})
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r4, 0x0, 0x0)
bind$inet6(r3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

0x90
[   33.818796][  T461]  ? clear_bhb_loop+0x35/0x90
[   33.823463][  T461]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   33.829352][  T461] RIP: 0033:0x7fe7942a1969
[   33.833761][  T461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.853366][  T461] RSP: 002b:00007fe79290a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[   33.861790][  T461] RAX: ffffffffffffffda RBX: 00007fe7944c8fa0 RCX: 00007fe7942a1969
[   33.869763][  T461] RDX: 0000200000001ec0 RSI: 000000000000000f RDI: 0000000000000003
[   33.877736][  T461] RBP: 00007fe79290a090 R08: 0000000000000000 R09: 0000000000000000
[   33.885719][  T461] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[   33.893686][  T461] R13: 0000000000000000 R14: 00007fe7944c8fa0 R15: 00007ffdef40d4c8
[   33.901658][  T461]  </TASK>
[   33.932468][  T297] usb 3-1: string descriptor 0 read error: -71
[   33.938906][  T297] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   33.948947][  T297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.982491][  T297] usb 3-1: can't set config #1, error -71
[   33.989933][  T297] usb 3-1: USB disconnect, device number 2
[   34.002730][  T466] FAULT_INJECTION: forcing a failure.
[   34.002730][  T466] name failslab, interval 1, probability 0, space 0, times 0
[   34.027786][  T466] CPU: 1 PID: 466 Comm: syz.3.48 Not tainted 5.15.180-syzkaller-00024-g88c4075c39ed #0
[   34.037550][  T466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   34.047625][  T466] Call Trace:
[   34.050917][  T466]  <TASK>
[   34.053863][  T466]  __dump_stack+0x21/0x30
[   34.058219][  T466]  dump_stack_lvl+0xee/0x150
[   34.062839][  T466]  ? show_regs_print_info+0x20/0x20
[   34.068057][  T466]  dump_stack+0x15/0x20
[   34.072232][  T466]  should_fail+0x3c1/0x510
[   34.076674][  T466]  __should_failslab+0xa4/0xe0
[   34.081451][  T466]  should_failslab+0x9/0x20
[   34.085971][  T466]  slab_pre_alloc_hook+0x3b/0xe0
[   34.090940][  T466]  kmem_cache_alloc_trace+0x48/0x270
[   34.096238][  T466]  ? kvm_vm_ioctl_set_msr_filter+0x2ca/0xb20
[   34.102234][  T466]  kvm_vm_ioctl_set_msr_filter+0x2ca/0xb20
[   34.108069][  T466]  ? __kasan_check_write+0x14/0x20
[   34.113199][  T466]  ? _copy_from_user+0x95/0xd0
[   34.117999][  T466]  kvm_arch_vm_ioctl+0xd91/0x11e0
[   34.123037][  T466]  ? kvm_arch_pm_notifier+0x2e0/0x2e0
[   34.128420][  T466]  ? avc_has_perm+0x158/0x240
[   34.133107][  T466]  ? 0xffffffffa0028850
[   34.137252][  T466]  ? is_bpf_text_address+0x177/0x190
[   34.142534][  T466]  ? __kernel_text_address+0xa0/0x100
[   34.147913][  T466]  ? unwind_get_return_address+0x4d/0x90
[   34.153545][  T466]  ? stack_trace_save+0xe0/0xe0
[   34.158402][  T466]  ? arch_stack_walk+0xee/0x140
[   34.163256][  T466]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   34.168900][  T466]  ? kstrtouint_from_user+0x1a0/0x200
[   34.174278][  T466]  kvm_vm_ioctl+0x70b/0xa80
[   34.178774][  T466]  ? kvm_device_release+0x220/0x220
[   34.183972][  T466]  ? memcpy+0x56/0x70
[   34.187947][  T466]  ? ioctl_has_perm+0x3eb/0x4d0
[   34.192794][  T466]  ? has_cap_mac_admin+0x330/0x330
[   34.197905][  T466]  ? vfs_write+0xc17/0xf70
[   34.202314][  T466]  ? selinux_file_ioctl+0x377/0x480
[   34.207507][  T466]  ? selinux_file_alloc_security+0x120/0x120
[   34.213481][  T466]  ? mutex_unlock+0x89/0x220
[   34.218068][  T466]  ? __mutex_lock_slowpath+0x10/0x10
[   34.223370][  T466]  ? __fget_files+0x2c4/0x320
[   34.228048][  T466]  ? security_file_ioctl+0x84/0xa0
[   34.235695][  T466]  ? kvm_device_release+0x220/0x220
[   34.240904][  T466]  __se_sys_ioctl+0x121/0x1a0
[   34.245589][  T466]  __x64_sys_ioctl+0x7b/0x90
[   34.250180][  T466]  x64_sys_call+0x2f/0x9a0
[   34.254782][  T466]  do_syscall_64+0x4c/0xa0
[   34.259197][  T466]  ? clear_bhb_loop+0x35/0x90
[   34.263980][  T466]  ? clear_bhb_loop+0x35/0x90
[   34.268652][  T466]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   34.274541][  T466] RIP: 0033:0x7f0ae18b3969
[   34.278951][  T466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.298548][  T466] RSP: 002b:00007f0adfefb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   34.306957][  T466] RAX: ffffffffffffffda RBX: 00007f0ae1adb080 RCX: 00007f0ae18b3969
[   34.314921][  T466] RDX: 0000200000000040 RSI: 000000004188aec6 RDI: 0000000000000004
[   34.322889][  T466] RBP: 00007f0adfefb090 R08: 0000000000000000 R09: 0000000000000000
[   34.330856][  T466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   34.338823][  T466] R13: 0000000000000001 R14: 00007f0ae1adb080 R15: 00007ffe331aef98
[   34.346906][  T466]  </TASK>
[   34.350657][  T468] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.357935][  T468] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.371699][  T470] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.378781][  T470] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.386146][  T470] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.393218][  T470] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.401070][  T470] device bridge0 entered promiscuous mode
[   34.437245][  T475] xt_hashlimit: max too large, truncated to 1048576
[   34.458488][  T477] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.465668][  T477] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.504604][  T477] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.511694][  T477] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.519047][  T477] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.526110][  T477] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.549301][  T479] loop0: detected capacity change from 0 to 512
[   34.556301][   T60] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   34.566745][  T477] device bridge0 entered promiscuous mode
[   34.634473][  T479] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   34.644396][  T479] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[   34.892534][   T60] usb 2-1: Using ep0 maxpacket: 8
[   34.899979][   T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   35.405702][  T479] loop0: detected capacity change from 0 to 16
[   35.422641][   T60] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.434107][   T60] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.445999][   T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[   35.458368][  T479] erofs: (device loop0): mounted with root inode @ nid 36.
[   35.474244][   T49] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   35.495280][  T479] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   35.517070][  T479] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   35.539070][  T479] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   35.561194][  T479] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   35.654512][   T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.795171][   T30] audit: type=1400 audit(1746341658.360:242): avc:  denied  { read } for  pid=488 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   35.848953][  T491] loop3: detected capacity change from 0 to 512
[   35.855490][   T30] audit: type=1400 audit(1746341658.410:243): avc:  denied  { ioctl } for  pid=488 comm="syz.3.61" path="socket:[16915]" dev="sockfs" ino=16915 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   36.001359][  T297] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   36.132455][   T20] usb 5-1: Using ep0 maxpacket: 32
[   36.202475][   T60] usbhid 2-1:128.0: can't add hid device: -71
[   36.208793][   T60] usbhid: probe of 2-1:128.0 failed with error -71
[   36.216993][   T60] usb 2-1: USB disconnect, device number 2
[   36.242508][  T297] usb 3-1: Using ep0 maxpacket: 16
[   36.262514][   T20] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   36.271108][   T20] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   36.279816][   T20] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   36.288929][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024
[   36.300044][   T20] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[   36.310023][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   36.319786][   T20] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   36.329829][   T20] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   36.342944][   T20] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[   36.352105][   T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.361037][   T20] usb 5-1: config 0 descriptor??
[   36.366071][  T297] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   36.376267][    T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   36.383831][  T297] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   36.402476][  T471] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   36.423020][   T20] usblp0: Disabling reads from problematic bidirectional printer
[   36.552493][  T297] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   36.561606][  T297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.569702][  T297] usb 3-1: Product: syz
[   36.573976][  T297] usb 3-1: Manufacturer: syz
[   36.578560][  T297] usb 3-1: SerialNumber: syz
[   36.647626][   T20] usblp 5-1:0.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004
[   36.660600][   T20] usb 5-1: USB disconnect, device number 3
[   36.691427][   T20] usblp0: removed
[   36.717100][   T30] audit: type=1400 audit(1746341659.280:244): avc:  denied  { read write } for  pid=504 comm="syz.3.67" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   36.741383][   T30] audit: type=1400 audit(1746341659.300:245): avc:  denied  { open } for  pid=504 comm="syz.3.67" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   36.741837][  T441] hid-generic FFFC:0003:0000.0001: unknown main item tag 0x0
[   36.772330][    T6] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   36.783912][    T6] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   36.794389][   T30] audit: type=1400 audit(1746341659.350:246): avc:  denied  { read write } for  pid=504 comm="syz.3.67" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   36.794955][    T6] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   36.827909][  T441] hid-generic FFFC:0003:0000.0001: unknown main item tag 0x0
[   36.835552][   T30] audit: type=1400 audit(1746341659.350:247): avc:  denied  { open } for  pid=504 comm="syz.3.67" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   36.835627][  T441] hid-generic FFFC:0003:0000.0001: unknown main item tag 0x0
[   36.865974][    T6] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   36.879373][  T441] hid-generic FFFC:0003:0000.0001: unknown main item tag 0x0
[   36.886915][    T6] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99
[   36.896060][  T441] hid-generic FFFC:0003:0000.0001: unknown main item tag 0x0
[   36.903502][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.911647][  T441] hid-generic FFFC:0003:0000.0001: unknown main item tag 0x0
[   36.920512][  T441] hid-generic FFFC:0003:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   36.981848][   T30] audit: type=1400 audit(1746341659.540:248): avc:  denied  { watch } for  pid=511 comm="syz.1.68" path="/12/file1" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   37.003967][   T30] audit: type=1400 audit(1746341659.540:249): avc:  denied  { read } for  pid=511 comm="syz.1.68" dev="nsfs" ino=4026532463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   37.031358][  T517] FAULT_INJECTION: forcing a failure.
[   37.031358][  T517] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   37.044578][  T517] CPU: 1 PID: 517 Comm: syz.1.69 Not tainted 5.15.180-syzkaller-00024-g88c4075c39ed #0
[   37.052618][  T297] usb 3-1: 0:2 : does not exist
[   37.054228][  T517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   37.054243][  T517] Call Trace:
[   37.054249][  T517]  <TASK>
[   37.054264][  T517]  __dump_stack+0x21/0x30
[   37.061525][    T6] snd-usb-audio: probe of 1-1:27.0 failed with error -12
[   37.069142][  T517]  dump_stack_lvl+0xee/0x150
[   37.069171][  T517]  ? show_regs_print_info+0x20/0x20
[   37.096490][  T517]  ? __activate_page+0xf40/0xf40
[   37.101462][  T517]  dump_stack+0x15/0x20
[   37.105646][  T517]  should_fail+0x3c1/0x510
[   37.110061][  T517]  should_fail_usercopy+0x1a/0x20
[   37.115076][  T517]  copy_page_from_iter_atomic+0x3fb/0x1350
[   37.120882][  T517]  ? pipe_zero+0x370/0x370
[   37.125299][  T517]  generic_perform_write+0x307/0x670
[   37.130581][  T517]  ? grab_cache_page_write_begin+0xb0/0xb0
[   37.136387][  T517]  ? file_remove_privs+0x590/0x590
[   37.141527][  T517]  ? rwsem_write_trylock+0x130/0x300
[   37.146836][  T517]  ? clear_nonspinnable+0x60/0x60
[   37.151876][  T517]  ? avc_policy_seqno+0x1b/0x70
[   37.156753][  T517]  __generic_file_write_iter+0x268/0x480
[   37.162409][  T517]  generic_file_write_iter+0xa9/0x1d0
[   37.165380][  T497] syzkaller0: tun_chr_ioctl cmd 2147767507
[   37.167793][  T517]  vfs_write+0x802/0xf70
[   37.167818][  T517]  ? file_end_write+0x1b0/0x1b0
[   37.167839][  T517]  ? wait_for_completion_killable_timeout+0x10/0x10
[   37.189294][  T517]  ? __fget_files+0x2c4/0x320
[   37.193993][  T517]  ? __fdget_pos+0x2d2/0x380
[   37.198589][  T517]  ? ksys_write+0x71/0x240
[   37.203004][  T517]  ksys_write+0x140/0x240
[   37.207333][  T517]  ? __ia32_sys_read+0x90/0x90
[   37.212091][  T517]  ? debug_smp_processor_id+0x17/0x20
[   37.217474][  T517]  __x64_sys_write+0x7b/0x90
[   37.222056][  T517]  x64_sys_call+0x8ef/0x9a0
[   37.226555][  T517]  do_syscall_64+0x4c/0xa0
[   37.230990][  T517]  ? clear_bhb_loop+0x35/0x90
[   37.235664][  T517]  ? clear_bhb_loop+0x35/0x90
[   37.240331][  T517]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   37.246219][  T517] RIP: 0033:0x7f8356fe0969
[   37.250628][  T517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.270226][  T517] RSP: 002b:00007f8355649038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   37.278632][  T517] RAX: ffffffffffffffda RBX: 00007f8357207fa0 RCX: 00007f8356fe0969
[   37.286598][  T517] RDX: 0000000000043451 RSI: 0000200000000200 RDI: 0000000000000008
[   37.294566][  T517] RBP: 00007f8355649090 R08: 0000000000000000 R09: 0000000000000000
[   37.302533][  T517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   37.310503][  T517] R13: 0000000000000000 R14: 00007f8357207fa0 R15: 00007ffc0e0442c8
[   37.318471][  T517]  </TASK>
[   37.356372][   T60] usb 1-1: USB disconnect, device number 2
[   37.368960][  T519] xt_hashlimit: max too large, truncated to 1048576
[   37.375567][   T26] usb 3-1: USB disconnect, device number 3
[   37.502129][  T529] loop1: detected capacity change from 0 to 512
[   37.562723][  T529] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   37.572806][  T529] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   37.691546][   T30] kauditd_printk_skb: 1 callbacks suppressed
[   37.691572][   T30] audit: type=1400 audit(1746341660.250:251): avc:  denied  { unmount } for  pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   38.202559][  T536] loop0: detected capacity change from 0 to 128
[   38.375913][   T30] audit: type=1400 audit(1746341660.940:252): avc:  denied  { create } for  pid=534 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   39.416188][  T537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.75'.
[   39.443520][   T30] audit: type=1400 audit(1746341661.130:253): avc:  denied  { relabelfrom } for  pid=534 comm="syz.2.75" name="NETLINK" dev="sockfs" ino=17121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   39.518002][  T529] loop1: detected capacity change from 0 to 16
[   39.565691][  T529] erofs: (device loop1): mounted with root inode @ nid 36.
[   39.583322][   T49] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   39.601454][  T529] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   39.622272][  T529] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   39.643111][  T529] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   39.664760][  T529] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   39.704009][   T30] audit: type=1400 audit(1746341661.130:254): avc:  denied  { relabelto } for  pid=534 comm="syz.2.75" name="NETLINK" dev="sockfs" ino=17121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[   39.849871][   T30] audit: type=1400 audit(1746341662.050:255): avc:  denied  { name_bind } for  pid=534 comm="syz.2.75" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   39.919917][  T552] loop0: detected capacity change from 0 to 8192
[   39.945781][  T558] syz.2.81[558] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   39.945876][  T558] syz.2.81[558] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   39.961835][   T30] audit: type=1400 audit(1746341662.060:256): avc:  denied  { node_bind } for  pid=534 comm="syz.2.75" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   40.049511][  T561] syz.2.81[561] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.049616][  T561] syz.2.81[561] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.061997][  T558] FAULT_INJECTION: forcing a failure.
[   40.061997][  T558] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   40.087757][   T30] audit: type=1400 audit(1746341662.460:257): avc:  denied  { mount } for  pid=553 comm="syz.1.80" name="/" dev="configfs" ino=13247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   40.110361][  T558] CPU: 0 PID: 558 Comm: syz.2.81 Not tainted 5.15.180-syzkaller-00024-g88c4075c39ed #0
[   40.120007][  T558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   40.130072][  T558] Call Trace:
[   40.133366][  T558]  <TASK>
[   40.136311][  T558]  __dump_stack+0x21/0x30
[   40.140662][  T558]  dump_stack_lvl+0xee/0x150
[   40.142003][   T30] audit: type=1400 audit(1746341662.460:258): avc:  denied  { search } for  pid=553 comm="syz.1.80" name="/" dev="configfs" ino=13247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   40.145284][  T558]  ? show_regs_print_info+0x20/0x20
[   40.145310][  T558]  ? _raw_spin_lock+0x8e/0xe0
[   40.145333][  T558]  ? _raw_spin_trylock_bh+0x130/0x130
[   40.167460][   T30] audit: type=1400 audit(1746341662.470:259): avc:  denied  { read } for  pid=553 comm="syz.1.80" name="/" dev="configfs" ino=13247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   40.172520][  T558]  dump_stack+0x15/0x20
[   40.172547][  T558]  should_fail+0x3c1/0x510
[   40.177215][   T30] audit: type=1400 audit(1746341662.470:260): avc:  denied  { open } for  pid=553 comm="syz.1.80" path="/" dev="configfs" ino=13247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   40.182648][  T558]  should_fail_alloc_page+0x55/0x80
[   40.182671][  T558]  prepare_alloc_pages+0x156/0x600
[   40.244851][  T558]  ? __alloc_pages_bulk+0xab0/0xab0
[   40.250057][  T558]  ? fault_around_bytes_set+0xc0/0xc0
[   40.255615][  T558]  __alloc_pages+0x10a/0x440
[   40.260212][  T558]  ? prep_new_page+0x110/0x110
[   40.264971][  T558]  shmem_alloc_and_acct_page+0x42b/0x870
[   40.270600][  T558]  ? shmem_swapin_page+0x14c0/0x14c0
[   40.275882][  T558]  ? xas_start+0x317/0x3e0
[   40.280297][  T558]  ? xas_load+0x2ea/0x300
[   40.284622][  T558]  ? pagecache_get_page+0xb28/0xc20
[   40.289812][  T558]  ? page_cache_prev_miss+0x270/0x270
[   40.295177][  T558]  ? lru_cache_add+0x268/0x4d0
[   40.299933][  T558]  shmem_getpage_gfp+0xfe5/0x2310
[   40.304959][  T558]  shmem_write_begin+0xce/0x1b0
[   40.309804][  T558]  generic_perform_write+0x2ad/0x670
[   40.315087][  T558]  ? grab_cache_page_write_begin+0xb0/0xb0
[   40.320886][  T558]  ? file_remove_privs+0x590/0x590
[   40.325993][  T558]  ? rwsem_write_trylock+0x130/0x300
[   40.331272][  T558]  ? clear_nonspinnable+0x60/0x60
[   40.336290][  T558]  ? avc_policy_seqno+0x1b/0x70
[   40.341130][  T558]  __generic_file_write_iter+0x268/0x480
[   40.346754][  T558]  generic_file_write_iter+0xa9/0x1d0
[   40.352118][  T558]  vfs_write+0x802/0xf70
[   40.356487][  T558]  ? file_end_write+0x1b0/0x1b0
[   40.361343][  T558]  ? wait_for_completion_killable_timeout+0x10/0x10
[   40.367941][  T558]  ? __fget_files+0x2c4/0x320
[   40.372647][  T558]  ? __fdget_pos+0x2d2/0x380
[   40.377240][  T558]  ? ksys_write+0x71/0x240
[   40.381645][  T558]  ksys_write+0x140/0x240
[   40.385968][  T558]  ? __ia32_sys_read+0x90/0x90
[   40.390727][  T558]  ? debug_smp_processor_id+0x17/0x20
[   40.396090][  T558]  __x64_sys_write+0x7b/0x90
[   40.400671][  T558]  x64_sys_call+0x8ef/0x9a0
[   40.405168][  T558]  do_syscall_64+0x4c/0xa0
[   40.409578][  T558]  ? clear_bhb_loop+0x35/0x90
[   40.414253][  T558]  ? clear_bhb_loop+0x35/0x90
[   40.418923][  T558]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   40.424814][  T558] RIP: 0033:0x7f1a091c8969
[   40.429226][  T558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.448825][  T558] RSP: 002b:00007f1a07831038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   40.457252][  T558] RAX: ffffffffffffffda RBX: 00007f1a093effa0 RCX: 00007f1a091c8969
[   40.465220][  T558] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008
[   40.473194][  T558] RBP: 00007f1a07831090 R08: 0000000000000000 R09: 0000000000000000
[   40.481272][  T558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.489236][  T558] R13: 0000000000000000 R14: 00007f1a093effa0 R15: 00007ffc19368448
[   40.497205][  T558]  </TASK>
[   40.527627][  T564] loop3: detected capacity change from 0 to 512
[   40.538649][  T564] =======================================================
[   40.538649][  T564] WARNING: The mand mount option has been deprecated and
[   40.538649][  T564]          and is ignored by this kernel. Remove the mand
[   40.538649][  T564]          option from the mount to silence this warning.
[   40.538649][  T564] =======================================================
[   40.539877][  T568] netlink: 'syz.2.86': attribute type 1 has an invalid length.
[   41.056011][  T571] loop4: detected capacity change from 0 to 256
[   41.206123][  T564] EXT4-fs (loop3): orphan cleanup on readonly fs
[   41.229720][  T575] tipc: Failed to remove unknown binding: 66,1,1/0:3645392448/3645392450
[   41.261019][  T564] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.85: bg 0: block 248: padding at end of block bitmap is not set
[   41.275682][  T564] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.85: Failed to acquire dquot type 1
[   41.287482][  T564] EXT4-fs (loop3): 1 truncate cleaned up
[   41.293979][  T564] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   41.346498][  T564] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   41.402073][  T564] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback.
[   41.415959][  T441] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   41.493879][  T586] loop2: detected capacity change from 0 to 512
[   43.218288][   T30] kauditd_printk_skb: 14 callbacks suppressed
[   43.218304][   T30] audit: type=1400 audit(1746341665.780:273): avc:  denied  { create } for  pid=587 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   43.261339][  T591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'.
[   43.271824][   T30] audit: type=1400 audit(1746341665.840:274): avc:  denied  { create } for  pid=590 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   43.291696][   T30] audit: type=1400 audit(1746341665.860:275): avc:  denied  { write } for  pid=590 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   43.317436][  T586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   43.327305][  T586] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   43.468995][   T30] audit: type=1400 audit(1746341666.030:276): avc:  denied  { unmount } for  pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   43.538573][  T616] FAULT_INJECTION: forcing a failure.
[   43.538573][  T616] name failslab, interval 1, probability 0, space 0, times 0
[   43.570182][  T585] loop2: detected capacity change from 0 to 16
[   43.597332][  T621] capability: warning: `syz.4.96' uses deprecated v2 capabilities in a way that may be insecure
[   43.610650][  T616] CPU: 1 PID: 616 Comm: syz.3.94 Not tainted 5.15.180-syzkaller-00024-g88c4075c39ed #0
[   43.620426][  T616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   43.630498][  T616] Call Trace:
[   43.633789][  T616]  <TASK>
[   43.636718][  T616]  __dump_stack+0x21/0x30
[   43.641050][  T616]  dump_stack_lvl+0xee/0x150
[   43.645646][  T616]  ? show_regs_print_info+0x20/0x20
[   43.650860][  T616]  dump_stack+0x15/0x20
[   43.655024][  T616]  should_fail+0x3c1/0x510
[   43.659439][  T616]  __should_failslab+0xa4/0xe0
[   43.664205][  T616]  should_failslab+0x9/0x20
[   43.668704][  T616]  slab_pre_alloc_hook+0x3b/0xe0
[   43.673642][  T616]  __kmalloc+0x6d/0x2c0
[   43.677793][  T616]  ? __vmalloc_node_range+0x2d9/0x840
[   43.683163][  T616]  __vmalloc_node_range+0x2d9/0x840
[   43.688361][  T616]  bpf_map_area_alloc+0xd5/0xe0
[   43.693224][  T616]  ? htab_map_alloc+0xb29/0x14f0
[   43.698184][  T616]  htab_map_alloc+0xb29/0x14f0
[   43.702952][  T616]  map_create+0x455/0x21b0
[   43.707479][  T616]  __sys_bpf+0x2cf/0x730
[   43.711711][  T616]  ? bpf_link_show_fdinfo+0x310/0x310
[   43.717090][  T616]  ? debug_smp_processor_id+0x17/0x20
[   43.722457][  T616]  __x64_sys_bpf+0x7c/0x90
[   43.726863][  T616]  x64_sys_call+0x4b9/0x9a0
[   43.731373][  T616]  do_syscall_64+0x4c/0xa0
[   43.735784][  T616]  ? clear_bhb_loop+0x35/0x90
[   43.740453][  T616]  ? clear_bhb_loop+0x35/0x90
[   43.745118][  T616]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   43.751015][  T616] RIP: 0033:0x7f0ae18b3969
[   43.755423][  T616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.775020][  T616] RSP: 002b:00007f0adff1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   43.783424][  T616] RAX: ffffffffffffffda RBX: 00007f0ae1adafa0 RCX: 00007f0ae18b3969
[   43.791386][  T616] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000
[   43.799351][  T616] RBP: 00007f0adff1c090 R08: 0000000000000000 R09: 0000000000000000
[   43.807314][  T616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.815274][  T616] R13: 0000000000000000 R14: 00007f0ae1adafa0 R15: 00007ffe331aef98
[   43.823329][  T616]  </TASK>
[   43.832622][  T585] erofs: (device loop2): mounted with root inode @ nid 36.
[   43.840602][   T30] audit: type=1326 audit(1746341666.390:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=622 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8356fe0969 code=0x7ffc0000
[   43.863041][  T621] loop4: detected capacity change from 0 to 4096
[   43.871249][   T49] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   43.892324][  T585] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   43.913482][  T585] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   43.934545][  T585] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   43.971768][   T30] audit: type=1326 audit(1746341666.390:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=622 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8356fe0969 code=0x7ffc0000
[   44.020326][  T585] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   44.048869][  T624] netlink: 96 bytes leftover after parsing attributes in process `syz.1.97'.
[   44.069013][   T30] audit: type=1326 audit(1746341666.600:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=622 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8356fe0969 code=0x7ffc0000
[   44.092143][   T30] audit: type=1326 audit(1746341666.600:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=622 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8356fe0969 code=0x7ffc0000
[   44.093033][  T621] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   44.142226][   T30] audit: type=1326 audit(1746341666.600:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=622 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8356fe0969 code=0x7ffc0000
[   44.433391][   T30] audit: type=1326 audit(1746341666.600:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=622 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8356fe0969 code=0x7ffc0000
[   44.465268][  T633] loop2: detected capacity change from 0 to 512
[   44.536824][  T633] EXT4-fs (loop2): 1 orphan inode deleted
[   44.567955][  T641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.103'.
[   44.580202][  T633] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   44.634119][  T643] xt_hashlimit: max too large, truncated to 1048576
[   44.643534][  T633] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.758661][  T647] loop0: detected capacity change from 0 to 512
[   44.813767][  T647] EXT4-fs (loop0): Test dummy encryption mode enabled
[   44.840869][  T647] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   44.892668][  T651] loop3: detected capacity change from 0 to 8192
[   44.904360][  T647] EXT4-fs (loop0): 1 truncate cleaned up
[   44.913265][  T647] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[   44.992434][  T664] loop0: detected capacity change from 0 to 256
[   45.002204][  T664] exfat: Deprecated parameter 'namecase'
[   45.078976][  T668] loop4: detected capacity change from 0 to 512
[   45.153827][  T668] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   45.163771][  T668] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   45.203534][  T664] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe21fe698, utbl_chksum : 0xe619d30d)
[   45.358408][  T669] netlink: 96 bytes leftover after parsing attributes in process `syz.1.111'.
[   46.140928][  T678] xt_hashlimit: max too large, truncated to 1048576
[   46.389376][  T668] loop4: detected capacity change from 0 to 16
[   46.416209][  T682] loop1: detected capacity change from 0 to 512
[   46.435106][  T668] erofs: (device loop4): mounted with root inode @ nid 36.
[   46.452462][   T49] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   46.473229][  T668] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   46.494737][  T668] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   46.516808][  T668] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   46.629213][  T682] EXT4-fs (loop1): 1 orphan inode deleted
[   46.641543][  T682] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   46.676360][  T682] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.700425][  T688] loop0: detected capacity change from 0 to 512
[   46.732428][  T441] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   46.843934][  T688] EXT4-fs (loop0): 1 orphan inode deleted
[   46.854122][  T688] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   46.887974][  T688] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.929581][  T694] kvm: pic: non byte write
[   46.972413][  T441] usb 4-1: Using ep0 maxpacket: 8
[   47.092905][  T441] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.132587][  T441] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.152443][  T441] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[   47.181679][  T441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.263712][  T706] loop2: detected capacity change from 0 to 512
[   47.712869][  T706] EXT4-fs (loop2): Ignoring removed nobh option
[   47.743996][  T706] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.123: corrupted inode contents
[   47.755854][  T704] capability: warning: `syz.4.122' uses 32-bit capabilities (legacy support in use)
[   47.772847][  T706] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #3: comm syz.2.123: mark_inode_dirty error
[   47.797888][  T706] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.123: corrupted inode contents
[   47.810102][  T706] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.123: mark_inode_dirty error
[   47.821946][  T706] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.123: Failed to acquire dquot type 0
[   47.833924][  T706] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.123: corrupted inode contents
[   47.846162][  T706] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #16: comm syz.2.123: mark_inode_dirty error
[   47.857894][  T706] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.123: corrupted inode contents
[   47.870141][  T706] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.123: mark_inode_dirty error
[   47.881803][  T706] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.123: corrupted inode contents
[   47.894077][  T706] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   47.902961][  T706] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.123: corrupted inode contents
[   47.915263][  T706] EXT4-fs error (device loop2): ext4_truncate:4303: inode #16: comm syz.2.123: mark_inode_dirty error
[   47.928114][  T706] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   47.937804][  T706] EXT4-fs (loop2): 1 truncate cleaned up
[   47.943680][  T706] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000009,nobh,,errors=continue. Quota mode: writeback.
[   47.957991][  T706] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.012494][  T441] usbhid 4-1:128.0: can't add hid device: -71
[   48.077103][  T441] usbhid: probe of 4-1:128.0 failed with error -71
[   48.089770][  T441] usb 4-1: USB disconnect, device number 2
[   48.149539][  T718] xt_hashlimit: max too large, truncated to 1048576
[   48.205491][  T720] loop4: detected capacity change from 0 to 2048
[   48.328071][  T726] loop1: detected capacity change from 0 to 512
[   48.374773][  T726] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   48.384743][  T726] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   48.482426][  T374] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   48.529478][  T720] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   48.573730][  T720] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.762600][  T720] device pim6reg1 entered promiscuous mode
[   48.872779][  T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   48.924598][  T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.020793][  T735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'.
[   50.052908][  T726] loop1: detected capacity change from 0 to 16
[   50.096842][  T735] 8021q: VLANs not supported on gre0
[   50.104927][  T726] erofs: (device loop1): mounted with root inode @ nid 36.
[   50.118015][  T374] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[   50.120996][   T49] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   50.151163][  T726] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   50.173676][  T726] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   50.195861][  T726] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   50.227749][  T726] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   50.302571][  T374] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   50.310593][  T374] usb 3-1: Manufacturer: syz
[   50.315880][  T374] usb 3-1: config 0 descriptor??
[   50.393203][  T741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'.
[   50.402232][  T741] 8021q: VLANs not supported on gre0
[   50.419538][  T735] kvm [734]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf948
[   50.434280][  T745] loop1: detected capacity change from 0 to 512
[   50.456316][  T735] kvm [734]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0xb948
[   50.483304][  T735] kvm [734]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf0e2
[   50.492261][  T735] kvm [734]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xb0e2
[   50.505444][  T735] kvm [734]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xf3ce
[   50.515690][  T735] kvm [734]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xb3ce
[   50.525568][   T30] kauditd_printk_skb: 53 callbacks suppressed
[   50.525582][   T30] audit: type=1400 audit(1746341673.090:334): avc:  denied  { write } for  pid=749 comm="syz.0.137" name="mcfilter" dev="proc" ino=4026532311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   50.564022][  T735] kvm [734]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xe3de
[   50.578302][  T735] kvm [734]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0xa3de
[   50.587642][  T735] kvm [734]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x7eaf
[   50.604078][  T745] EXT4-fs (loop1): 1 orphan inode deleted
[   50.609835][  T745] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   50.632476][  T735] kvm [734]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x3eaf
[   50.649512][  T745] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.682868][  T735] kvm [734]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe6f, nop
[   50.694217][  T741] kvm [740]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf948
[   50.727162][  T741] kvm [740]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0xb948
[   50.757349][  T741] kvm [740]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xf3ce
[   50.775015][  T374] hid-generic 0003:060B:700A.0002: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[   50.802534][  T741] kvm [740]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xb3ce
[   50.832084][  T741] kvm [740]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe6f, nop
[   50.974245][   T30] audit: type=1400 audit(1746341673.540:335): avc:  denied  { append } for  pid=722 comm="syz.2.127" name="hidraw0" dev="devtmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   51.175218][   T30] audit: type=1400 audit(1746341673.740:336): avc:  denied  { write } for  pid=775 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   51.175947][  T776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=776 comm=syz.0.143
[   51.217808][   T30] audit: type=1400 audit(1746341673.740:337): avc:  denied  { nlmsg_read } for  pid=775 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   51.289984][   T30] audit: type=1400 audit(1746341673.740:338): avc:  denied  { ioctl } for  pid=775 comm="syz.0.143" path="net:[4026532289]" dev="nsfs" ino=4026532289 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   51.349914][  T781] netlink: 96 bytes leftover after parsing attributes in process `syz.0.144'.
[   51.361185][   T30] audit: type=1400 audit(1746341673.840:339): avc:  denied  { ioctl } for  pid=775 comm="syz.0.143" path="socket:[18618]" dev="sockfs" ino=18618 ioctlcmd=0xae79 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   51.428430][   T30] audit: type=1326 audit(1746341673.900:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61987ae969 code=0x7ffc0000
[   51.497863][   T30] audit: type=1326 audit(1746341673.900:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61987ae969 code=0x7ffc0000
[   51.570908][   T30] audit: type=1326 audit(1746341673.900:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61987ae969 code=0x7ffc0000
[   51.621635][   T30] audit: type=1326 audit(1746341673.900:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61987ae969 code=0x7ffc0000
[   51.654321][  T795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.150'.
[   51.664184][  T795] 8021q: VLANs not supported on gre0
[   51.715330][  T794] loop4: detected capacity change from 0 to 1024
[   51.755738][  T794] EXT4-fs warning (device loop4): ext4_multi_mount_protect:300: Invalid MMP block in superblock
[   51.836727][  T795] kvm [793]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xf3ce
[   51.852675][  T795] kvm [793]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xb3ce
[   51.855919][  T803] loop1: detected capacity change from 0 to 1024
[   51.910118][  T795] kvm [793]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe6f, nop
[   52.127952][    T6] usb 3-1: USB disconnect, device number 4
[   52.184205][  T809] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=809 comm=syz.2.155
[   52.235217][  T811] netlink: 96 bytes leftover after parsing attributes in process `syz.1.156'.
[   52.396202][  T824] loop3: detected capacity change from 0 to 512
[   52.570828][  T824] EXT4-fs (loop3): 1 orphan inode deleted
[   52.592503][  T824] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   52.604446][  T824] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.921655][  T848] loop1: detected capacity change from 0 to 256
[   54.939802][  T850] netlink: 96 bytes leftover after parsing attributes in process `syz.4.170'.
[   54.954229][  T848] exfat: Deprecated parameter 'utf8'
[   54.965218][  T848] exfat: Deprecated parameter 'namecase'
[   54.976169][  T854] SELinux:  Context system_u:object_r:sulogin_exec_t:s0 is not valid (left unmapped).
[   55.001172][  T848] exfat: Deprecated parameter 'utf8'
[   55.023683][  T854] xt_hashlimit: size too large, truncated to 1048576
[   55.035349][  T848] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   55.118539][  T865] xt_hashlimit: max too large, truncated to 1048576
[   55.152633][  T863] loop4: detected capacity change from 0 to 4096
[   55.153772][  T867] loop2: detected capacity change from 0 to 2048
[   55.256423][  T863] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   55.279271][  T867] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   55.537736][  T867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'.
[   55.590344][   T30] kauditd_printk_skb: 137 callbacks suppressed
[   55.590361][   T30] audit: type=1400 audit(1746341678.150:481): avc:  denied  { mounton } for  pid=874 comm="syz.0.179" path="/42/file0" dev="incremental-fs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.680272][   T30] audit: type=1400 audit(1746341678.240:482): avc:  denied  { relabelfrom } for  pid=876 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   55.726649][   T30] audit: type=1400 audit(1746341678.240:483): avc:  denied  { relabelto } for  pid=876 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   55.749729][  T879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'.
[   55.766671][   T30] audit: type=1400 audit(1746341678.280:484): avc:  denied  { ioctl } for  pid=876 comm="syz.0.181" path="socket:[19033]" dev="sockfs" ino=19033 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.767832][  T882] netlink: 96 bytes leftover after parsing attributes in process `syz.1.182'.
[   55.839629][   T30] audit: type=1326 audit(1746341678.280:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8356fe0969 code=0x7ffc0000
[   55.889181][   T30] audit: type=1326 audit(1746341678.280:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8356fe0969 code=0x7ffc0000
[   55.915032][  T885] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   55.940765][  T885] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   55.978361][   T30] audit: type=1326 audit(1746341678.290:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8356fe0969 code=0x7ffc0000
[   56.011881][  T879] kvm_set_msr_common: 14 callbacks suppressed
[   56.011904][  T879] kvm [878]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf948
[   56.015070][   T30] audit: type=1326 audit(1746341678.290:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8356fe0969 code=0x7ffc0000
[   56.057860][  T879] kvm [878]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0xb948
[   56.067273][  T879] kvm [878]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf0e2
[   56.076869][  T879] kvm [878]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xb0e2
[   56.090182][  T879] kvm [878]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xf3ce
[   56.098919][   T30] audit: type=1326 audit(1746341678.290:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8356fe0969 code=0x7ffc0000
[   56.132180][  T879] kvm [878]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xb3ce
[   56.150026][  T905] syz.1.191[905] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.150095][  T905] syz.1.191[905] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.154007][   T30] audit: type=1326 audit(1746341678.290:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8356fe0969 code=0x7ffc0000
[   56.173456][  T879] kvm [878]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xe3de
[   56.232579][  T879] kvm [878]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0xa3de
[   56.262451][  T441] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   56.270146][  T879] kvm [878]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x7eaf
[   56.279656][  T879] kvm [878]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x3eaf
[   56.333199][  T879] kvm [878]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe6f, nop
[   56.335989][  T913] loop1: detected capacity change from 0 to 512
[   56.387336][  T913] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   56.407376][  T913] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.610889][  T917] netlink: 96 bytes leftover after parsing attributes in process `syz.1.194'.
[   56.662473][  T441] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.694505][  T919] loop2: detected capacity change from 0 to 1024
[   56.786842][  T919] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   56.798593][  T919] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   56.837762][  T919] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,i_version,debug_want_extra_isize=0x0000000000000080,mblk_io_submit,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[   56.863501][  T441] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   56.882395][  T441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.890489][  T441] usb 4-1: Product: syz
[   56.895018][  T441] usb 4-1: Manufacturer: syz
[   56.899671][  T441] usb 4-1: SerialNumber: syz
[   57.047408][  T932] loop1: detected capacity change from 0 to 512
[   57.134094][  T932] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,,errors=continue. Quota mode: writeback.
[   57.149243][  T932] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.161338][  T932] process 'syz.1.199' launched './bus' with NULL argv: empty string added
[   57.192486][  T484] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   57.375306][  T953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.206'.
[   57.452402][  T484] usb 3-1: Using ep0 maxpacket: 32
[   57.530975][  T953] kvm [952]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf948
[   57.540063][  T953] kvm [952]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0xb948
[   57.552657][  T953] kvm [952]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xf3ce
[   57.561048][  T953] kvm [952]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xb3ce
[   57.577093][  T953] kvm [952]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe6f, nop
[   57.662479][  T484] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[   57.962530][  T484] usb 3-1: string descriptor 0 read error: -22
[   57.969971][  T484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   57.989213][  T484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.997833][  T277] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /55/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   58.042524][  T441] cdc_ncm 4-1:1.0: failed to get mac address
[   58.083020][  T484] cdc_ether: probe of 3-1:1.0 failed with error -22
[   58.302461][  T441] cdc_ncm 4-1:1.0: bind() failure
[   58.322483][  T441] cdc_ncm: probe of 4-1:1.1 failed with error -71
[   58.325289][  T919] 9pnet: Insufficient options for proto=fd
[   58.342433][  T441] cdc_mbim: probe of 4-1:1.1 failed with error -71
[   58.362888][  T441] usb 4-1: USB disconnect, device number 3
[   58.369772][  T484] usb 3-1: USB disconnect, device number 5
[   58.418442][  T971] loop0: detected capacity change from 0 to 1024
[   58.517424][  T971] EXT4-fs (loop0): Ignoring removed oldalloc option
[   58.528557][  T971] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   58.574034][  T971] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,oldalloc,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000000007,nombcache,. Quota mode: none.
[   58.692872][  T971] incfs: Error accessing: ./file0.
[   58.698122][  T971] incfs: mount failed -20
[   58.755740][  T274] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /50/file1: bad entry in directory: inode out of bounds - offset=0, inode=2, rec_len=12, size=1024 fake=1
[   58.783400][  T274] EXT4-fs (loop0): Remounting filesystem read-only
[   58.792644][  T274] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem
[   58.823536][  T274] EXT4-fs (loop0): Remounting filesystem read-only
[   58.832678][  T274] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz-executor: mark_inode_dirty error
[   58.868358][  T274] EXT4-fs (loop0): Remounting filesystem read-only
[   59.093664][  T983] netlink: 96 bytes leftover after parsing attributes in process `syz.4.218'.
[   59.244542][  T987] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.270211][  T987] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.300873][  T987] device bridge_slave_0 entered promiscuous mode
[   59.332682][  T987] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.362672][  T987] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.390116][  T987] device bridge_slave_1 entered promiscuous mode
[   59.632809][  T987] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.639922][  T987] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.647309][  T987] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.654556][  T987] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.735811][   T45] device bridge_slave_1 left promiscuous mode
[   59.741986][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.774351][   T45] device bridge_slave_0 left promiscuous mode
[   59.811226][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.833416][   T45] device veth1_macvtap left promiscuous mode
[   59.839481][   T45] device veth0_vlan left promiscuous mode
[   60.117322][ T1000] loop3: detected capacity change from 0 to 512
[   60.133057][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.143167][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.167550][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.182709][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.200500][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.223190][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.252630][  T733] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.259711][  T733] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.273550][ T1000] EXT4-fs (loop3): 1 orphan inode deleted
[   60.281061][ T1004] FAULT_INJECTION: forcing a failure.
[   60.281061][ T1004] name failslab, interval 1, probability 0, space 0, times 0
[   60.303676][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.307653][ T1000] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   60.323507][ T1000] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.332913][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.344755][  T733] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.351799][  T733] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.368099][ T1004] CPU: 0 PID: 1004 Comm: syz.2.225 Not tainted 5.15.180-syzkaller-00024-g88c4075c39ed #0
[   60.377944][ T1004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   60.388025][ T1004] Call Trace:
[   60.391338][ T1004]  <TASK>
[   60.394278][ T1004]  __dump_stack+0x21/0x30
[   60.398626][ T1004]  dump_stack_lvl+0xee/0x150
[   60.403228][ T1004]  ? show_regs_print_info+0x20/0x20
[   60.408451][ T1004]  dump_stack+0x15/0x20
[   60.412620][ T1004]  should_fail+0x3c1/0x510
[   60.417050][ T1004]  __should_failslab+0xa4/0xe0
[   60.421828][ T1004]  should_failslab+0x9/0x20
[   60.426346][ T1004]  slab_pre_alloc_hook+0x3b/0xe0
[   60.430121][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.431347][ T1004]  ? __build_skb+0x2d/0x310
[   60.439607][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.443627][ T1004]  kmem_cache_alloc+0x44/0x260
[   60.443654][ T1004]  __build_skb+0x2d/0x310
[   60.443677][ T1004]  build_skb+0x24/0x200
[   60.451785][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.456127][ T1004]  ? tun_get_user+0x83e/0x31b0
[   60.456154][ T1004]  tun_get_user+0x85a/0x31b0
[   60.460780][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.464600][ T1004]  ? tun_do_read+0x1c40/0x1c40
[   60.464622][ T1004]  ? kstrtouint_from_user+0x1a0/0x200
[   60.464643][ T1004]  ? kstrtol_from_user+0x260/0x260
[   60.464661][ T1004]  ? bpf_probe_read_compat+0x156/0x180
[   60.464683][ T1004]  ? avc_policy_seqno+0x1b/0x70
[   60.464701][ T1004]  ? selinux_file_permission+0x2aa/0x510
[   60.520742][ T1004]  tun_chr_write_iter+0x1eb/0x2e0
[   60.525781][ T1004]  vfs_write+0x802/0xf70
[   60.530022][ T1004]  ? file_end_write+0x1b0/0x1b0
[   60.534868][ T1004]  ? __fget_files+0x2c4/0x320
[   60.539546][ T1004]  ? __fdget_pos+0x1f7/0x380
[   60.544142][ T1004]  ? ksys_write+0x71/0x240
[   60.548554][ T1004]  ksys_write+0x140/0x240
[   60.552873][ T1004]  ? __ia32_sys_read+0x90/0x90
[   60.557631][ T1004]  ? debug_smp_processor_id+0x17/0x20
[   60.563002][ T1004]  __x64_sys_write+0x7b/0x90
[   60.567587][ T1004]  x64_sys_call+0x8ef/0x9a0
[   60.572080][ T1004]  do_syscall_64+0x4c/0xa0
[   60.576494][ T1004]  ? clear_bhb_loop+0x35/0x90
[   60.581166][ T1004]  ? clear_bhb_loop+0x35/0x90
[   60.585833][ T1004]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   60.591738][ T1004] RIP: 0033:0x7f1a091c741f
[   60.596311][ T1004] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   60.615914][ T1004] RSP: 002b:00007f1a07831000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   60.624321][ T1004] RAX: ffffffffffffffda RBX: 00007f1a093effa0 RCX: 00007f1a091c741f
[   60.632288][ T1004] RDX: 000000000000004a RSI: 0000200000000300 RDI: 00000000000000c8
[   60.640250][ T1004] RBP: 00007f1a07831090 R08: 0000000000000000 R09: 0000000000000000
[   60.648214][ T1004] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001
[   60.656180][ T1004] R13: 0000000000000000 R14: 00007f1a093effa0 R15: 00007ffc19368448
[   60.664279][ T1004]  </TASK>
[   60.694995][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.709320][   T30] kauditd_printk_skb: 129 callbacks suppressed
[   60.709338][   T30] audit: type=1400 audit(1746341683.270:620): avc:  denied  { write } for  pid=1010 comm="syz.4.227" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   60.739498][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.767030][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.782752][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.802880][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.810430][  T733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.833699][  T987] device veth0_vlan entered promiscuous mode
[   60.860840][  T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.874537][  T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.908214][  T987] device veth1_macvtap entered promiscuous mode
[   60.927601][  T427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   60.937627][  T427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.952700][  T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.980794][  T427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.992454][   T30] audit: type=1400 audit(1746341683.550:621): avc:  denied  { mounton } for  pid=987 comm="syz-executor" path="/root/syzkaller.Z9Ualk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   61.004285][  T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.452725][ T1027] loop2: detected capacity change from 0 to 8192
[   61.592799][ T1033] incfs: iterate_incfs_dir / -22
[   61.673454][ T1035] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   61.772486][  T841] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   62.012457][  T841] usb 3-1: Using ep0 maxpacket: 8
[   62.142461][  T841] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.156968][  T841] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.177158][  T841] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[   62.212557][  T841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.412809][ T1048] xt_hashlimit: max too large, truncated to 1048576
[   62.512436][  T337] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   62.606073][ T1056] loop5: detected capacity change from 0 to 512
[   62.703167][  T841] logitech 0003:046D:C20E.0003: rdesc size test failed for formula gp
[   62.721740][  T841] logitech 0003:046D:C20E.0003: unknown main item tag 0x0
[   62.739285][  T841] logitech 0003:046D:C20E.0003: unknown main item tag 0x0
[   62.752424][  T841] logitech 0003:046D:C20E.0003: unknown main item tag 0x0
[   62.758038][ T1056] EXT4-fs (loop5): 1 orphan inode deleted
[   62.760662][  T841] logitech 0003:046D:C20E.0003: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.2-1/input0
[   62.772648][ T1056] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   62.790369][   T30] audit: type=1400 audit(1746341685.350:622): avc:  denied  { write } for  pid=1059 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   62.814094][ T1060] loop4: detected capacity change from 0 to 1024
[   62.822781][ T1056] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.883004][ T1060] EXT4-fs error (device loop4): ext4_fill_super:4832: inode #2: comm syz.4.244: casefold flag without casefold feature
[   62.892525][  T337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.905876][  T510] usb 3-1: USB disconnect, device number 6
[   62.914336][ T1060] EXT4-fs (loop4): get root inode failed
[   62.924621][ T1060] EXT4-fs (loop4): mount failed
[   62.924697][  T337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.955979][  T337] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   62.969374][  T337] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   62.986576][  T337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.995798][  T337] usb 4-1: config 0 descriptor??
[   63.453360][ T1044] UDC core: couldn't find an available UDC or it's busy: -16
[   63.460773][ T1044] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   63.542536][  T337] usbhid 4-1:0.0: can't add hid device: -71
[   63.548943][  T337] usbhid: probe of 4-1:0.0 failed with error -71
[   63.579811][  T337] usb 4-1: USB disconnect, device number 4
[   63.758267][ T1079] xt_hashlimit: max too large, truncated to 1048576
[   63.759875][ T1081] loop5: detected capacity change from 0 to 256
[   63.863895][ T1083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1083 comm=syz.2.252
[   63.894331][   T30] audit: type=1400 audit(1746341686.460:623): avc:  denied  { unmount } for  pid=1086 comm="syz.5.254" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   64.091882][   T30] audit: type=1400 audit(1746341686.650:624): avc:  denied  { map } for  pid=1093 comm="syz.3.256" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   64.267546][ T1104] loop2: detected capacity change from 0 to 512
[   64.296851][ T1107] xt_hashlimit: max too large, truncated to 1048576
[   64.298686][ T1099] loop3: detected capacity change from 0 to 8192
[   64.419927][ T1104] EXT4-fs (loop2): 1 orphan inode deleted
[   64.427784][ T1104] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   64.451216][ T1104] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.632412][  T297] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   64.646423][ T1117] loop4: detected capacity change from 0 to 512
[   64.693147][   T30] audit: type=1400 audit(1746341687.200:625): avc:  denied  { read } for  pid=1113 comm="syz.4.264" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   64.717406][ T1117] EXT4-fs (loop4): Test dummy encryption mode enabled
[   64.724286][ T1117] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5
[   64.724286][ T1117] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   64.724286][ T1117] 
[   64.742096][ T1117] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   64.765365][ T1117] EXT4-fs (loop4): 1 truncate cleaned up
[   64.812411][ T1117] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,noauto_da_alloc,noacl,discard,max_batch_time=0x0000000000000008,nolazytime,bsddf,max_batch_time=0x0000000000000995,sb=0x0000000000000010,,errors=continue. Quota mode: none.
[   64.880166][   T30] audit: type=1400 audit(1746341687.200:626): avc:  denied  { open } for  pid=1113 comm="syz.4.264" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   64.951391][   T30] audit: type=1400 audit(1746341687.200:627): avc:  denied  { ioctl } for  pid=1113 comm="syz.4.264" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   65.038615][  T297] usb 4-1: Using ep0 maxpacket: 8
[   65.552499][  T297] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.572525][  T297] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.592417][  T297] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[   65.601498][  T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.642329][ T1132] syz.4.269 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   66.099614][ T1142] loop2: detected capacity change from 0 to 2048
[   66.113705][  T297] logitech 0003:046D:C20E.0004: rdesc size test failed for formula gp
[   66.122250][  T297] logitech 0003:046D:C20E.0004: unknown main item tag 0x0
[   66.141457][  T297] logitech 0003:046D:C20E.0004: unknown main item tag 0x0
[   66.155337][  T297] logitech 0003:046D:C20E.0004: unknown main item tag 0x0
[   66.172636][  T297] logitech 0003:046D:C20E.0004: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.3-1/input0
[   66.188314][ T1142] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   66.220172][   T30] audit: type=1400 audit(1746341688.780:628): avc:  denied  { name_bind } for  pid=1137 comm="syz.2.271" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   66.314910][    T6] usb 4-1: USB disconnect, device number 5
[   66.604607][ T1148] xt_hashlimit: max too large, truncated to 1048576
[   66.612414][  T834] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[   66.666062][ T1150] loop4: detected capacity change from 0 to 256
[   66.732837][ T1150] exfat: Unknown parameter ''
[   66.777031][ T1150] loop4: detected capacity change from 0 to 256
[   66.909388][   T30] audit: type=1400 audit(1746341689.470:629): avc:  denied  { setattr } for  pid=1155 comm="syz.3.277" name="TIPC" dev="sockfs" ino=20949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   66.934821][  T441] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   66.946745][  T441] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   66.991886][ T1158] netlink: 68 bytes leftover after parsing attributes in process `syz.3.278'.
[   67.032385][  T374] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   67.199052][ T1158] kvm_set_msr_common: 15 callbacks suppressed
[   67.199075][ T1158] kvm [1157]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf948
[   67.219032][ T1158] kvm [1157]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0xb948
[   67.228434][ T1158] kvm [1157]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf0e2
[   67.237699][ T1158] kvm [1157]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xb0e2
[   67.251268][ T1158] kvm [1157]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xf3ce
[   67.260161][ T1158] kvm [1157]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xb3ce
[   67.272394][  T374] usb 3-1: Using ep0 maxpacket: 32
[   67.278887][ T1158] kvm [1157]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xe3de
[   67.288329][ T1158] kvm [1157]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0xa3de
[   67.297769][ T1158] kvm [1157]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x7eaf
[   67.307112][ T1158] kvm [1157]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x3eaf
[   67.336292][ T1158] kvm [1157]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe6f, nop
[   67.392454][  T374] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   67.410691][  T374] usb 3-1: config 0 has no interface number 0
[   67.417161][  T374] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.437889][  T374] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.458499][  T374] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[   67.480708][  T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.498484][  T374] usb 3-1: config 0 descriptor??
[   67.748214][ T1152] loop2: detected capacity change from 0 to 1024
[   67.813180][ T1152] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   67.873372][ T1152] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,dioread_nolock,. Quota mode: none.
[   67.894867][ T1152] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.009275][ T1169] FAULT_INJECTION: forcing a failure.
[   68.009275][ T1169] name failslab, interval 1, probability 0, space 0, times 0
[   68.022320][ T1169] CPU: 0 PID: 1169 Comm: syz.3.280 Not tainted 5.15.180-syzkaller-00024-g88c4075c39ed #0
[   68.032143][ T1169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   68.042200][ T1169] Call Trace:
[   68.045488][ T1169]  <TASK>
[   68.048420][ T1169]  __dump_stack+0x21/0x30
[   68.052763][ T1169]  dump_stack_lvl+0xee/0x150
[   68.057368][ T1169]  ? show_regs_print_info+0x20/0x20
[   68.062579][ T1169]  ? netlink_unicast+0x87c/0xa40
[   68.067520][ T1169]  ? ____sys_sendmsg+0x5a2/0x8c0
[   68.072463][ T1169]  ? ___sys_sendmsg+0x1f0/0x260
[   68.077315][ T1169]  ? __x64_sys_sendmsg+0x1e2/0x2a0
[   68.082434][ T1169]  ? do_syscall_64+0x4c/0xa0
[   68.087028][ T1169]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   68.093107][ T1169]  dump_stack+0x15/0x20
[   68.097271][ T1169]  should_fail+0x3c1/0x510
[   68.101689][ T1169]  __should_failslab+0xa4/0xe0
[   68.106551][ T1169]  should_failslab+0x9/0x20
[   68.111061][ T1169]  slab_pre_alloc_hook+0x3b/0xe0
[   68.116012][ T1169]  kmem_cache_alloc_trace+0x48/0x270
[   68.121301][ T1169]  ? __hw_addr_add_ex+0x205/0x800
[   68.126335][ T1169]  __hw_addr_add_ex+0x205/0x800
[   68.131198][ T1169]  dev_addr_init+0x138/0x210
[   68.135800][ T1169]  ? dev_addr_flush+0x230/0x230
[   68.140661][ T1169]  alloc_netdev_mqs+0x11a/0xc90
[   68.145529][ T1169]  ? wg_netns_pre_exit+0x180/0x180
[   68.150647][ T1169]  rtnl_create_link+0x2ef/0x9d0
[   68.155506][ T1169]  rtnl_newlink+0x103f/0x17b0
[   68.160200][ T1169]  ? rtnl_newlink+0x831/0x17b0
[   68.164971][ T1169]  ? rtnl_setlink+0x400/0x400
[   68.169667][ T1169]  ? __kernel_text_address+0xa0/0x100
[   68.175048][ T1169]  ? memcpy+0x56/0x70
[   68.179046][ T1169]  ? 0xffffffffa00282f0
[   68.183636][ T1169]  ? __kasan_check_write+0x14/0x20
[   68.188753][ T1169]  ? wait_for_completion_killable_timeout+0x10/0x10
[   68.195359][ T1169]  ? ns_capable+0x8c/0xf0
[   68.199696][ T1169]  ? netlink_net_capable+0x125/0x160
[   68.204986][ T1169]  ? rtnl_setlink+0x400/0x400
[   68.209719][ T1169]  rtnetlink_rcv_msg+0x9e4/0xb90
[   68.214663][ T1169]  ? rtnetlink_bind+0x80/0x80
[   68.219347][ T1169]  ? memcpy+0x56/0x70
[   68.223336][ T1169]  ? avc_has_perm_noaudit+0x2f4/0x460
[   68.228718][ T1169]  ? arch_stack_walk+0xee/0x140
[   68.233578][ T1169]  ? avc_denied+0x1b0/0x1b0
[   68.238095][ T1169]  ? stack_trace_save+0x98/0xe0
[   68.242956][ T1169]  ? avc_has_perm+0x158/0x240
[   68.247649][ T1169]  ? avc_has_perm_noaudit+0x460/0x460
[   68.253025][ T1169]  ? x64_sys_call+0x4b/0x9a0
[   68.257625][ T1169]  ? selinux_nlmsg_lookup+0x400/0x4c0
[   68.263004][ T1169]  netlink_rcv_skb+0x1e0/0x430
[   68.267878][ T1169]  ? rtnetlink_bind+0x80/0x80
[   68.272559][ T1169]  ? netlink_ack+0xb60/0xb60
[   68.277157][ T1169]  ? __netlink_lookup+0x387/0x3b0
[   68.282189][ T1169]  rtnetlink_rcv+0x1c/0x20
[   68.286610][ T1169]  netlink_unicast+0x87c/0xa40
[   68.291382][ T1169]  netlink_sendmsg+0x86a/0xb70
[   68.296152][ T1169]  ? netlink_getsockopt+0x530/0x530
[   68.301354][ T1169]  ? security_socket_sendmsg+0x82/0xa0
[   68.306820][ T1169]  ? netlink_getsockopt+0x530/0x530
[   68.312022][ T1169]  ____sys_sendmsg+0x5a2/0x8c0
[   68.316795][ T1169]  ? __sys_sendmsg_sock+0x40/0x40
[   68.321834][ T1169]  ? import_iovec+0x7c/0xb0
[   68.326356][ T1169]  ___sys_sendmsg+0x1f0/0x260
[   68.331051][ T1169]  ? __sys_sendmsg+0x250/0x250
[   68.335935][ T1169]  ? __fdget+0x1a1/0x230
[   68.340194][ T1169]  __x64_sys_sendmsg+0x1e2/0x2a0
[   68.345140][ T1169]  ? ___sys_sendmsg+0x260/0x260
[   68.350099][ T1169]  ? ksys_write+0x1eb/0x240
[   68.354619][ T1169]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   68.360699][ T1169]  x64_sys_call+0x4b/0x9a0
[   68.365126][ T1169]  do_syscall_64+0x4c/0xa0
[   68.369558][ T1169]  ? clear_bhb_loop+0x35/0x90
[   68.374238][ T1169]  ? clear_bhb_loop+0x35/0x90
[   68.378923][ T1169]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   68.384955][ T1169] RIP: 0033:0x7f0ae18b3969
[   68.389378][ T1169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.408989][ T1169] RSP: 002b:00007f0adff1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.417412][ T1169] RAX: ffffffffffffffda RBX: 00007f0ae1adafa0 RCX: 00007f0ae18b3969
[   68.425565][ T1169] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005
[   68.433550][ T1169] RBP: 00007f0adff1c090 R08: 0000000000000000 R09: 0000000000000000
[   68.441559][ T1169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   68.449535][ T1169] R13: 0000000000000000 R14: 00007f0ae1adafa0 R15: 00007ffe331aef98
[   68.457645][ T1169]  </TASK>
[   69.058143][ T1172] loop3: detected capacity change from 0 to 512
[   69.318103][ T1172] EXT4-fs (loop3): 1 orphan inode deleted
[   69.354441][ T1172] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   69.479837][ T1172] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.738050][ T1182] xt_hashlimit: max too large, truncated to 1048576
[   69.943871][ T1188] xt_hashlimit: size too large, truncated to 1048576
[   71.012183][ T1200] loop3: detected capacity change from 0 to 512
[   71.045890][ T1200] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   71.055827][ T1200] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   71.092613][  T374] usbhid 3-1:0.1: can't add hid device: -71
[   71.143612][  T374] usbhid: probe of 3-1:0.1 failed with error -71
[   71.261405][  T374] usb 3-1: USB disconnect, device number 7
[   71.415448][   T30] audit: type=1400 audit(1746341693.980:630): avc:  denied  { read } for  pid=1202 comm="syz.4.292" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   72.027594][ T1200] loop3: detected capacity change from 0 to 16
[   72.084753][ T1200] erofs: (device loop3): mounted with root inode @ nid 36.
[   72.102771][   T49] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   72.123677][ T1200] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   72.145705][ T1200] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   72.167627][ T1200] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   72.189360][ T1200] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   72.447303][ T1212] xt_hashlimit: max too large, truncated to 1048576
[   72.475366][ T1216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'.
[   72.492138][   T30] audit: type=1400 audit(1746341695.050:631): avc:  denied  { load_policy } for  pid=1211 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   72.492182][ T1217] SELinux:  policydb magic number 0xa5395497 does not match expected magic number 0xf97cff8c
[   72.542441][ T1216] loop3: detected capacity change from 0 to 1024
[   72.553153][ T1217] SELinux: failed to load policy
[   72.573776][ T1217] incfs: Error accessing: ./file0.
[   72.578959][ T1217] incfs: mount failed -20
[   72.586960][ T1216] EXT4-fs (loop3): Ignoring removed orlov option
[   72.587380][ T1217] incfs: Error accessing: ./file0.
[   72.621044][ T1216] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,bsddf,grpquota,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000001,,errors=continue. Quota mode: writeback.
[   72.622563][ T1217] incfs: mount failed -20
[   72.653362][   T30] audit: type=1400 audit(1746341695.220:632): avc:  denied  { remount } for  pid=1215 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   72.675059][ T1216] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback.
[   72.697322][   T30] audit: type=1326 audit(1746341695.260:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7942a1969 code=0x7ffc0000
[   72.720939][   T30] audit: type=1326 audit(1746341695.260:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7942a1969 code=0x7ffc0000
[   72.744465][   T30] audit: type=1326 audit(1746341695.260:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe7942a1969 code=0x7ffc0000
[   72.768050][   T30] audit: type=1326 audit(1746341695.260:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7942a1969 code=0x7ffc0000
[   72.777785][ T1216] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback.
[   72.791569][   T30] audit: type=1326 audit(1746341695.260:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7942a1969 code=0x7ffc0000
[   72.829829][ T1226] loop4: detected capacity change from 0 to 512
[   72.838554][   T30] audit: type=1326 audit(1746341695.260:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7942a1969 code=0x7ffc0000
[   72.868880][   T30] audit: type=1326 audit(1746341695.260:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7942a1969 code=0x7ffc0000
[   72.934341][ T1226] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   72.950062][ T1230] loop3: detected capacity change from 0 to 512
[   72.957702][ T1226] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.298: inode #1: comm syz.4.298: iget: illegal inode #
[   72.982605][ T1226] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.298: error while reading EA inode 1 err=-117
[   73.005957][ T1226] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   73.033061][ T1226] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.298: inode #1: comm syz.4.298: iget: illegal inode #
[   73.064039][ T1230] EXT4-fs (loop3): 1 orphan inode deleted
[   73.070066][ T1226] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.298: error while reading EA inode 1 err=-117
[   73.084415][ T1230] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   73.102760][ T1230] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.113485][ T1226] EXT4-fs (loop4): 1 orphan inode deleted
[   73.119229][ T1226] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,max_batch_time=0x0000000000000002,bsdgroups,mblk_io_submit,,errors=continue. Quota mode: none.
[   73.619678][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.645265][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.678974][ T1242] device bridge_slave_0 entered promiscuous mode
[   73.721646][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.736607][ T1240] loop2: detected capacity change from 0 to 40427
[   73.738394][ T1250] loop4: detected capacity change from 0 to 8192
[   73.758352][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.772931][ T1242] device bridge_slave_1 entered promiscuous mode
[   74.529236][  T441] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   75.431840][ T1261] netlink: 68 bytes leftover after parsing attributes in process `syz.2.307'.
[   75.443282][ T1260] xt_hashlimit: max too large, truncated to 1048576
[   75.492671][  T441] usb 5-1: Using ep0 maxpacket: 8
[   75.499953][   T45] device bridge_slave_1 left promiscuous mode
[   75.506676][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.514718][   T45] device bridge_slave_0 left promiscuous mode
[   75.521029][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.530073][   T45] device veth1_macvtap left promiscuous mode
[   75.536273][   T45] device veth0_vlan left promiscuous mode
[   75.612460][  T441] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.623999][  T441] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.628470][ T1261] kvm [1258]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf948
[   75.634147][  T441] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[   75.643872][ T1261] kvm [1258]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0xb948
[   75.654636][  T441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.672665][ T1261] kvm [1258]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf0e2
[   75.692158][ T1261] kvm [1258]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xb0e2
[   75.705102][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   75.716269][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.727476][ T1261] kvm [1258]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xf3ce
[   75.742793][ T1261] kvm [1258]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xb3ce
[   75.756663][ T1261] kvm [1258]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xe3de
[   75.777452][ T1261] kvm [1258]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0xa3de
[   75.786897][ T1261] kvm [1258]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x7eaf
[   75.796510][ T1261] kvm [1258]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x3eaf
[   75.809723][ T1261] kvm [1258]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe6f, nop
[   75.853730][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.867977][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.891387][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.898496][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.913222][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.923367][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.939034][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.946230][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.967924][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   75.983764][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   75.999979][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.017116][ T1270] netlink: 88 bytes leftover after parsing attributes in process `syz.3.310'.
[   76.027955][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.039409][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.074403][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.087396][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.110183][ T1242] device veth0_vlan entered promiscuous mode
[   76.123382][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.134828][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.150635][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.158972][  T441] logitech 0003:046D:C20E.0006: rdesc size test failed for formula gp
[   76.171888][  T441] logitech 0003:046D:C20E.0006: unknown main item tag 0x0
[   76.187903][  T441] logitech 0003:046D:C20E.0006: unknown main item tag 0x0
[   76.192019][ T1242] device veth1_macvtap entered promiscuous mode
[   76.203780][  T441] logitech 0003:046D:C20E.0006: unknown main item tag 0x0
[   76.213596][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.230003][  T441] logitech 0003:046D:C20E.0006: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.4-1/input0
[   76.248867][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.265648][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.302737][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.320532][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.363180][  T337] usb 5-1: USB disconnect, device number 4
[   76.454335][ T1278] overlayfs: unrecognized mount option "fowner<00000000000000000000" or missing value
[   76.469066][ T1283] loop2: detected capacity change from 0 to 2048
[   76.578376][ T1283] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   76.616215][   T30] kauditd_printk_skb: 87 callbacks suppressed
[   76.616232][   T30] audit: type=1326 audit(1746341699.180:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1282 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a091c8969 code=0x7ffc0000
[   76.652815][   T30] audit: type=1326 audit(1746341699.220:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1282 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a091ca887 code=0x7ffc0000
[   76.676934][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'.
[   76.679907][   T30] audit: type=1326 audit(1746341699.220:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1282 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1a091ca7fc code=0x7ffc0000
[   76.710607][   T30] audit: type=1326 audit(1746341699.220:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1282 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1a091ca734 code=0x7ffc0000
[   76.714960][ T1283] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   76.734793][   T30] audit: type=1326 audit(1746341699.220:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1282 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1a091ca734 code=0x7ffc0000
[   76.819871][   T30] audit: type=1326 audit(1746341699.220:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1282 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1a091c75ca code=0x7ffc0000
[   76.866836][ T1295] xt_hashlimit: max too large, truncated to 1048576
[   76.875831][   T30] audit: type=1326 audit(1746341699.220:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1282 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a091c8969 code=0x7ffc0000
[   76.961355][   T30] audit: type=1326 audit(1746341699.220:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1282 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a091c8969 code=0x7ffc0000
[   76.997105][ T1300] loop3: detected capacity change from 0 to 256
[   77.038083][ T1302] netlink: 'syz.4.320': attribute type 27 has an invalid length.
[   77.042496][   T30] audit: type=1326 audit(1746341699.240:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1282 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a091c8969 code=0x7ffc0000
[   77.104935][ T1300] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   77.123739][   T30] audit: type=1326 audit(1746341699.240:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1282 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a091c8969 code=0x7ffc0000
[   77.188508][ T1302] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.195801][ T1302] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.523895][ T1304] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.530966][ T1304] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.542263][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.549358][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.618478][ T1304] device veth0_vlan left promiscuous mode
[   77.625776][ T1304] device veth0_vlan entered promiscuous mode
[   77.633757][ T1304] device veth1_macvtap left promiscuous mode
[   77.640835][ T1304] device veth1_macvtap entered promiscuous mode
[   77.648383][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.662715][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   77.671569][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.684798][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.693182][ T1302] syz.4.320 (1302) used greatest stack depth: 20768 bytes left
[   77.693829][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.700939][ T1304] syz.4.320 (1304) used greatest stack depth: 20320 bytes left
[   77.709709][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.743001][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.765408][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   77.782787][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.801500][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.816153][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.837535][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   77.846175][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   77.854681][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   77.863361][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   77.871647][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   77.934908][ T1326] loop4: detected capacity change from 0 to 16
[   77.975485][ T1326] erofs: (device loop4): mounted with root inode @ nid 36.
[   77.985965][ T1326] FAULT_INJECTION: forcing a failure.
[   77.985965][ T1326] name failslab, interval 1, probability 0, space 0, times 0
[   77.998702][ T1326] CPU: 1 PID: 1326 Comm: syz.4.324 Not tainted 5.15.180-syzkaller-00024-g88c4075c39ed #0
[   78.008515][ T1326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   78.018581][ T1326] Call Trace:
[   78.021865][ T1326]  <TASK>
[   78.024799][ T1326]  __dump_stack+0x21/0x30
[   78.029142][ T1326]  dump_stack_lvl+0xee/0x150
[   78.033739][ T1326]  ? show_regs_print_info+0x20/0x20
[   78.038971][ T1326]  dump_stack+0x15/0x20
[   78.043134][ T1326]  should_fail+0x3c1/0x510
[   78.047572][ T1326]  __should_failslab+0xa4/0xe0
[   78.052347][ T1326]  should_failslab+0x9/0x20
[   78.056859][ T1326]  slab_pre_alloc_hook+0x3b/0xe0
[   78.061804][ T1326]  ? getname_flags+0xb9/0x500
[   78.066489][ T1326]  kmem_cache_alloc+0x44/0x260
[   78.070399][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   78.071280][ T1326]  getname_flags+0xb9/0x500
[   78.079510][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   78.083649][ T1326]  ? _copy_from_user+0x41/0xd0
[   78.083678][ T1326]  user_path_at_empty+0x30/0x1c0
[   78.091762][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   78.096210][ T1326]  __se_sys_mount+0x2e3/0x380
[   78.096234][ T1326]  ? __x64_sys_mount+0xd0/0xd0
[   78.118443][ T1326]  ? __kasan_check_write+0x14/0x20
[   78.123576][ T1326]  __x64_sys_mount+0xbf/0xd0
[   78.128179][ T1326]  x64_sys_call+0x6bf/0x9a0
[   78.132704][ T1326]  do_syscall_64+0x4c/0xa0
[   78.137140][ T1326]  ? clear_bhb_loop+0x35/0x90
[   78.141832][ T1326]  ? clear_bhb_loop+0x35/0x90
[   78.146520][ T1326]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   78.152440][ T1326] RIP: 0033:0x7fe7942a1969
[   78.156860][ T1326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.176479][ T1326] RSP: 002b:00007fe7928c8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   78.184918][ T1326] RAX: ffffffffffffffda RBX: 00007fe7944c9160 RCX: 00007fe7942a1969
[   78.192906][ T1326] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 0000000000000000
[   78.200892][ T1326] RBP: 00007fe7928c8090 R08: 0000200000000240 R09: 0000000000000000
[   78.208874][ T1326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.216850][ T1326] R13: 0000000000000000 R14: 00007fe7944c9160 R15: 00007ffdef40d4c8
[   78.224834][ T1326]  </TASK>
[   78.231812][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.238914][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.274836][ T1330] netlink: 68 bytes leftover after parsing attributes in process `syz.6.326'.
[   78.297942][ T1332] FAULT_INJECTION: forcing a failure.
[   78.297942][ T1332] name failslab, interval 1, probability 0, space 0, times 0
[   78.311095][ T1332] CPU: 0 PID: 1332 Comm: syz.3.328 Not tainted 5.15.180-syzkaller-00024-g88c4075c39ed #0
[   78.320913][ T1332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   78.330999][ T1332] Call Trace:
[   78.334314][ T1332]  <TASK>
[   78.337243][ T1332]  __dump_stack+0x21/0x30
[   78.341574][ T1332]  dump_stack_lvl+0xee/0x150
[   78.346171][ T1332]  ? show_regs_print_info+0x20/0x20
[   78.351374][ T1332]  dump_stack+0x15/0x20
[   78.355530][ T1332]  should_fail+0x3c1/0x510
[   78.359941][ T1332]  __should_failslab+0xa4/0xe0
[   78.364703][ T1332]  should_failslab+0x9/0x20
[   78.369207][ T1332]  slab_pre_alloc_hook+0x3b/0xe0
[   78.374155][ T1332]  ? avc_alloc_node+0x8f/0x4c0
[   78.378922][ T1332]  kmem_cache_alloc+0x44/0x260
[   78.383776][ T1332]  avc_alloc_node+0x8f/0x4c0
[   78.388368][ T1332]  ? __kasan_check_write+0x14/0x20
[   78.393477][ T1332]  ? _raw_spin_lock_irqsave+0xb0/0x110
[   78.398947][ T1332]  ? _raw_spin_lock+0xe0/0xe0
[   78.403618][ T1332]  ? avc_xperms_free+0x270/0x270
[   78.408552][ T1332]  avc_compute_av+0x142/0x830
[   78.413227][ T1332]  avc_has_perm_noaudit+0x2ae/0x460
[   78.418422][ T1332]  ? avc_denied+0x1b0/0x1b0
[   78.422940][ T1332]  avc_has_perm+0xd2/0x240
[   78.427349][ T1332]  ? avc_has_perm_noaudit+0x460/0x460
[   78.432724][ T1332]  ? selinux_determine_inode_label+0x290/0x3e0
[   78.438906][ T1332]  may_create+0x377/0x460
[   78.443227][ T1332]  ? selinux_determine_inode_label+0x3e0/0x3e0
[   78.449375][ T1332]  ? ovl_getattr+0xe20/0xe20
[   78.453969][ T1332]  selinux_inode_create+0x22/0x30
[   78.458985][ T1332]  security_inode_create+0xad/0x110
[   78.464176][ T1332]  path_openat+0xc57/0x2f10
[   78.468687][ T1332]  ? do_filp_open+0x3e0/0x3e0
[   78.473360][ T1332]  do_filp_open+0x1b3/0x3e0
[   78.477859][ T1332]  ? vfs_tmpfile+0x2d0/0x2d0
[   78.482445][ T1332]  do_sys_openat2+0x14c/0x7b0
[   78.487118][ T1332]  ? __kasan_check_write+0x14/0x20
[   78.492224][ T1332]  ? do_sys_open+0xe0/0xe0
[   78.496637][ T1332]  ? fput+0x1a/0x20
[   78.500442][ T1332]  ? ksys_write+0x1eb/0x240
[   78.504935][ T1332]  ? __ia32_sys_read+0x90/0x90
[   78.509691][ T1332]  __x64_sys_openat+0x136/0x160
[   78.514554][ T1332]  x64_sys_call+0x219/0x9a0
[   78.519050][ T1332]  do_syscall_64+0x4c/0xa0
[   78.523463][ T1332]  ? clear_bhb_loop+0x35/0x90
[   78.528227][ T1332]  ? clear_bhb_loop+0x35/0x90
[   78.532892][ T1332]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   78.538779][ T1332] RIP: 0033:0x7f0ae18b3969
[   78.543182][ T1332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.562785][ T1332] RSP: 002b:00007f0adff1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   78.571204][ T1332] RAX: ffffffffffffffda RBX: 00007f0ae1adafa0 RCX: 00007f0ae18b3969
[   78.579173][ T1332] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c
[   78.587142][ T1332] RBP: 00007f0adff1c090 R08: 0000000000000000 R09: 0000000000000000
[   78.595106][ T1332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.603069][ T1332] R13: 0000000000000000 R14: 00007f0ae1adafa0 R15: 00007ffe331aef98
[   78.611036][ T1332]  </TASK>
[   78.733986][ T1342] xt_hashlimit: max too large, truncated to 1048576
[   78.796883][ T1338] loop3: detected capacity change from 0 to 8192
[   78.954713][ T1330] kvm [1329]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf948
[   78.972654][ T1330] kvm [1329]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0xb948
[   78.994562][ T1330] kvm [1329]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xf3ce
[   79.022488][ T1330] kvm [1329]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xb3ce
[   79.042403][  T510] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   79.056718][ T1330] kvm [1329]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe6f, nop
[   79.132406][  T337] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   79.282452][  T510] usb 5-1: Using ep0 maxpacket: 8
[   79.362834][ T1356] loop6: detected capacity change from 0 to 256
[   79.412381][  T337] usb 4-1: Using ep0 maxpacket: 8
[   79.426276][ T1356] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   79.442453][  T510] usb 5-1: unable to get BOS descriptor or descriptor too short
[   79.532515][  T510] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16
[   79.547030][  T510] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 32
[   79.567785][  T510] usb 5-1: config 1 interface 0 has no altsetting 0
[   79.602434][  T337] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.619997][  T337] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.630446][  T337] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[   79.639776][  T337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.303040][  T337] logitech 0003:046D:C20E.0007: rdesc size test failed for formula gp
[   80.311561][  T337] logitech 0003:046D:C20E.0007: unknown main item tag 0x0
[   80.312493][  T510] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   80.321746][  T337] logitech 0003:046D:C20E.0007: unknown main item tag 0x0
[   80.335103][  T337] logitech 0003:046D:C20E.0007: unknown main item tag 0x0
[   80.348447][  T510] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.353613][  T337] logitech 0003:046D:C20E.0007: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.3-1/input0
[   80.363423][  T510] usb 5-1: Product: syz
[   80.372069][  T510] usb 5-1: Manufacturer: syz
[   80.379401][  T510] usb 5-1: SerialNumber: syz
[   80.412517][ T1344] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   80.419705][ T1344] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   80.433387][ T1365] device veth1_to_batadv entered promiscuous mode
[   80.440071][ T1365] device macsec1 entered promiscuous mode
[   80.476684][ T1369] 
@ÿ: renamed from bond_slave_0
[   80.505440][   T20] usb 4-1: USB disconnect, device number 6
[   80.652479][ T1310] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   80.712838][  T510] usb 5-1: bad CDC descriptors
[   80.721528][  T510] usb 5-1: USB disconnect, device number 5
[   81.012504][ T1310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.023815][ T1310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.033636][ T1310] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[   81.042838][ T1310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.051440][ T1310] usb 3-1: config 0 descriptor??
[   81.176800][ T1378] xt_hashlimit: max too large, truncated to 1048576
[   81.368933][ T1393] xt_CT: You must specify a L4 protocol and not use inversions on it
[   81.802433][ T1307] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   81.832487][ T1310] usbhid 3-1:0.0: can't add hid device: -71
[   81.839043][ T1310] usbhid: probe of 3-1:0.0 failed with error -71
[   81.856449][ T1310] usb 3-1: USB disconnect, device number 8
[   82.062467][ T1307] usb 4-1: Using ep0 maxpacket: 16
[   82.175286][ T1409] loop4: detected capacity change from 0 to 8192
[   82.182490][ T1307] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[   82.197162][ T1307] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.218725][ T1307] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   82.242058][ T1307] usb 4-1: config 0 interface 0 has no altsetting 0
[   82.249079][ T1307] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[   82.258312][ T1307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.285599][ T1415] loop2: detected capacity change from 0 to 128
[   82.302279][ T1307] usb 4-1: config 0 descriptor??
[   82.313529][   T30] kauditd_printk_skb: 90 callbacks suppressed
[   82.313545][   T30] audit: type=1400 audit(1746341704.880:827): avc:  denied  { setopt } for  pid=1419 comm="syz.6.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   82.351612][   T30] audit: type=1400 audit(1746341704.910:828): avc:  denied  { create } for  pid=1413 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   82.372642][   T30] audit: type=1326 audit(1746341704.910:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1413 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a091c8969 code=0x7ffc0000
[   82.401566][   T30] audit: type=1326 audit(1746341704.910:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1413 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1a091c8969 code=0x7ffc0000
[   82.425766][   T30] audit: type=1326 audit(1746341704.930:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1413 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a091c8969 code=0x7ffc0000
[   82.449429][   T30] audit: type=1326 audit(1746341704.940:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1421 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a091fb225 code=0x7ffc0000
[   82.450734][ T1422] SELinux: ebitmap: truncated map
[   82.472951][   T30] audit: type=1326 audit(1746341704.940:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1413 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f1a091c8969 code=0x7ffc0000
[   82.507447][ T1422] SELinux: failed to load policy
[   82.513346][   T30] audit: type=1326 audit(1746341704.940:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1413 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a091c8969 code=0x7ffc0000
[   82.552081][   T30] audit: type=1326 audit(1746341704.940:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1413 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f1a091c8969 code=0x7ffc0000
[   82.576908][   T30] audit: type=1400 audit(1746341705.100:836): avc:  denied  { bind } for  pid=1419 comm="syz.6.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   82.597586][ T1310] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   82.606155][ T1430] netlink: 96 bytes leftover after parsing attributes in process `syz.5.360'.
[   82.615669][  T299] attempt to access beyond end of device
[   82.615669][  T299] loop2: rw=1, want=633, limit=128
[   82.636741][ T1429] xt_hashlimit: max too large, truncated to 1048576
[   82.667258][ T1434] loop6: detected capacity change from 0 to 512
[   82.702149][ T1434] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.363: invalid indirect mapped block 10 (level 1)
[   82.715839][ T1434] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.363: invalid indirect mapped block 8 (level 1)
[   82.730240][ T1434] EXT4-fs (loop6): 1 truncate cleaned up
[   82.736185][ T1434] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   83.022554][  T841] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   83.203199][ T1307] magicmouse 0003:05AC:0265.0008: item fetching failed at offset 0/1
[   83.211597][ T1307] magicmouse 0003:05AC:0265.0008: magicmouse hid parse failed
[   83.219269][ T1307] magicmouse: probe of 0003:05AC:0265.0008 failed with error -22
[   83.237400][ T1307] usb 4-1: USB disconnect, device number 7
[   83.262429][ T1310] usb 5-1: Using ep0 maxpacket: 8
[   83.382548][ T1310] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.402477][ T1310] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.412560][ T1310] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[   83.421676][ T1310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.432476][  T841] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.442850][  T841] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   83.522518][  T841] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   83.531747][  T841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   83.540106][  T841] usb 3-1: SerialNumber: syz
[   83.747956][ T1461] loop6: detected capacity change from 0 to 512
[   83.823398][  T841] usb 3-1: 0:2 : does not exist
[   83.834615][ T1461] EXT4-fs (loop6): 1 orphan inode deleted
[   83.842999][ T1461] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   83.884583][ T1461] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.913091][ T1310] logitech 0003:046D:C20E.0009: rdesc size test failed for formula gp
[   84.002934][ T1470] loop3: detected capacity change from 0 to 512
[   84.064796][ T1470] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   84.074740][ T1470] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   84.104769][  T841] usb 3-1: USB disconnect, device number 9
[   85.165749][ T1475] loop2: detected capacity change from 0 to 512
[   85.272590][ T1310] logitech 0003:046D:C20E.0009: unknown main item tag 0x0
[   85.279776][ T1310] logitech 0003:046D:C20E.0009: unknown main item tag 0x0
[   85.286988][ T1310] logitech 0003:046D:C20E.0009: unknown main item tag 0x0
[   85.296586][ T1310] logitech 0003:046D:C20E.0009: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.4-1/input0
[   85.315271][ T1475] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   85.380806][ T1475] EXT4-fs (loop2): 1 truncate cleaned up
[   85.412415][ T1475] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[   85.443914][ T1310] usb 5-1: USB disconnect, device number 6
[   85.504263][ T1469] loop3: detected capacity change from 0 to 16
[   85.636417][ T1469] erofs: (device loop3): mounted with root inode @ nid 36.
[   85.646613][   T49] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   85.667882][ T1469] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   85.689138][ T1469] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   85.710322][ T1469] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   85.731479][ T1469] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   85.895930][ T1479] kvm_set_msr_common: 6 callbacks suppressed
[   85.895949][ T1479] kvm [1478]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf948
[   85.962595][ T1479] kvm [1478]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0xb948
[   86.007388][ T1491] loop3: detected capacity change from 0 to 512
[   86.022891][ T1479] kvm [1478]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf0e2
[   86.068108][ T1479] kvm [1478]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xb0e2
[   86.103094][ T1491] EXT4-fs (loop3): 1 orphan inode deleted
[   86.114996][ T1479] kvm [1478]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xf3ce
[   86.119019][ T1491] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   86.123915][ T1479] kvm [1478]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xb3ce
[   86.147181][ T1479] kvm [1478]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xe3de
[   86.156461][ T1479] kvm [1478]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0xa3de
[   86.165962][ T1479] kvm [1478]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x7eaf
[   86.174362][ T1491] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.175162][ T1479] kvm [1478]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x3eaf
[   86.201266][ T1479] kvm [1478]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe6f, nop
[   86.346976][ T1505] xt_hashlimit: max too large, truncated to 1048576
[   86.504473][ T1507] xt_hashlimit: max too large, truncated to 1048576
[   86.862270][ T1514] kvm [1511]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf948
[   86.884342][ T1513] kvm [1512]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf948
[   86.899144][ T1514] kvm [1511]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xf3ce
[   86.906720][ T1513] kvm [1512]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xf3ce
[   86.925412][ T1514] kvm [1511]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xb3ce
[   86.935831][ T1513] kvm [1512]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xb3ce
[   86.970217][ T1514] kvm [1511]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe6f, nop
[   86.985026][ T1513] kvm [1512]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe6f, nop
[   87.226345][ T1525] loop2: detected capacity change from 0 to 512
[   87.285814][ T1525] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   87.295745][ T1525] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   88.616751][ T1531] loop3: detected capacity change from 0 to 512
[   88.699904][ T1531] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   88.748607][ T1527] loop2: detected capacity change from 0 to 40427
[   88.779340][ T1531] EXT4-fs (loop3): 1 truncate cleaned up
[   88.785541][ T1531] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[   88.826531][ T1527] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   88.852461][ T1527] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   88.883700][ T1527] F2FS-fs (loop2): invalid crc value
[   88.913523][ T1527] F2FS-fs (loop2): Found nat_bits in checkpoint
[   88.953882][ T1527] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   88.961446][ T1527] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   89.037981][ T1553] xt_hashlimit: max too large, truncated to 1048576
[   89.249279][ T1555] kvm [1554]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xf3ce
[   89.257704][ T1555] kvm [1554]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xb3ce
[   89.266050][ T1310] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   89.281599][ T1555] kvm [1554]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe6f, nop
[   89.522387][ T1310] usb 3-1: Using ep0 maxpacket: 16
[   89.642478][ T1310] usb 3-1: config index 0 descriptor too short (expected 65372, got 249)
[   89.661170][ T1310] usb 3-1: config 105 has too many interfaces: 88, using maximum allowed: 32
[   89.670397][ T1310] usb 3-1: config 105 has an invalid descriptor of length 0, skipping remainder of the config
[   89.681909][ T1310] usb 3-1: config 105 has 1 interface, different from the descriptor's value: 88
[   89.695658][ T1310] usb 3-1: config 105 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[   89.710984][ T1310] usb 3-1: config 105 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[   89.730727][ T1310] usb 3-1: config 105 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[   89.750564][ T1310] usb 3-1: config 105 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[   89.771635][ T1310] usb 3-1: config 105 interface 0 has no altsetting 0
[   89.786314][ T1310] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[   89.804150][ T1310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.863100][ T1310] ums-sddr09 3-1:105.0: USB Mass Storage device detected
[   89.901441][ T1563] loop4: detected capacity change from 0 to 512
[   89.913415][ T1310] ums-sddr09: probe of 3-1:105.0 failed with error -22
[   90.024716][ T1563] EXT4-fs (loop4): 1 orphan inode deleted
[   90.030525][ T1563] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   90.052947][ T1563] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.074144][ T1310] usb 3-1: USB disconnect, device number 10
[   90.596813][   T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   90.607211][ T1577] loop6: detected capacity change from 0 to 512
[   90.615767][   T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   90.673812][ T1577] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   90.704134][ T1577] EXT4-fs (loop6): 1 truncate cleaned up
[   90.709821][ T1577] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,discard,journal_ioprio=0x0000000000000003,errors=remount-ro,lazytime,minixdf,noquota,usrjquota=,. Quota mode: none.
[   90.761357][ T1577] incfs_lookup_dentry err:-117
[   90.773906][ T1577] incfs: Can't find or create .index dir in ./file0
[   90.780675][ T1577] incfs: mount failed -117
[   90.925533][ T1595] xt_hashlimit: max too large, truncated to 1048576
[   90.940545][ T1594] loop4: detected capacity change from 0 to 512
[   91.000033][   T30] kauditd_printk_skb: 4 callbacks suppressed
[   91.000050][   T30] audit: type=1326 audit(1746341713.560:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae18b3969 code=0x7ffc0000
[   91.067098][   T30] audit: type=1326 audit(1746341713.600:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae18b3969 code=0x7ffc0000
[   91.100895][ T1594] EXT4-fs (loop4): 1 orphan inode deleted
[   91.112380][ T1594] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   91.120910][   T30] audit: type=1326 audit(1746341713.600:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ae18b3969 code=0x7ffc0000
[   91.142453][ T1594] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.184135][ T1587] kvm_set_msr_common: 22 callbacks suppressed
[   91.184156][ T1587] kvm [1586]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf948
[   91.219521][   T30] audit: type=1326 audit(1746341713.600:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae18b3969 code=0x7ffc0000
[   91.243029][ T1587] kvm [1586]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0xb948
[   91.252118][ T1587] kvm [1586]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf0e2
[   91.289848][   T30] audit: type=1326 audit(1746341713.600:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ae18b3969 code=0x7ffc0000
[   91.313347][ T1587] kvm [1586]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xb0e2
[   91.324721][ T1608] loop6: detected capacity change from 0 to 40427
[   91.349184][ T1587] kvm [1586]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xf3ce
[   91.372547][ T1587] kvm [1586]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xb3ce
[   91.386938][ T1587] kvm [1586]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xe3de
[   91.391041][   T30] audit: type=1326 audit(1746341713.600:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae18b3969 code=0x7ffc0000
[   91.398305][ T1587] kvm [1586]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0xa3de
[   91.422099][ T1608] ================================================================================
[   91.428990][ T1587] kvm [1586]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x7eaf
[   91.447059][ T1587] kvm [1586]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x3eaf
[   91.452369][ T1608] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:901:5
[   91.468740][   T30] audit: type=1326 audit(1746341713.600:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f0ae18b3969 code=0x7ffc0000
[   91.476689][ T1587] kvm [1586]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfe6f, nop
[   91.494126][ T1608] shift exponent 127 is too large for 32-bit type 'int'
[   91.519446][   T30] audit: type=1326 audit(1746341713.600:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae18b3969 code=0x7ffc0000
[   91.543113][ T1608] CPU: 0 PID: 1608 Comm: syz.6.413 Not tainted 5.15.180-syzkaller-00024-g88c4075c39ed #0
[   91.553085][ T1608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   91.563165][ T1608] Call Trace:
[   91.566494][ T1608]  <TASK>
[   91.569496][ T1608]  __dump_stack+0x21/0x30
[   91.573873][ T1608]  dump_stack_lvl+0xee/0x150
[   91.578493][ T1608]  ? show_regs_print_info+0x20/0x20
[   91.583715][ T1608]  ? slab_free_freelist_hook+0xc2/0x190
[   91.589313][ T1608]  dump_stack+0x15/0x20
[   91.593519][ T1608]  ubsan_epilogue+0xe/0x40
[   91.597953][ T1608]  __ubsan_handle_shift_out_of_bounds+0x37c/0x400
[   91.604391][ T1608]  ? match_int+0x13c/0x190
[   91.608840][ T1608]  parse_options+0x442f/0x4460
[   91.613665][ T1608]  ? default_options+0xb10/0xb10
[   91.618626][ T1608]  ? __kmalloc_track_caller+0x13c/0x2c0
[   91.624194][ T1608]  ? memcpy+0x56/0x70
[   91.628195][ T1608]  f2fs_fill_super+0x1f9d/0x6d10
[   91.633164][ T1608]  ? kill_f2fs_super+0x390/0x390
[   91.638120][ T1608]  ? vscnprintf+0x80/0x80
[   91.642479][ T1608]  ? mutex_unlock+0x89/0x220
[   91.647113][ T1608]  ? set_blocksize+0x1fc/0x380
[   91.651905][ T1608]  ? sb_set_blocksize+0xaa/0xf0
[   91.656788][ T1608]  ? kill_f2fs_super+0x390/0x390
[   91.661781][ T1608]  mount_bdev+0x2ae/0x3e0
[   91.666145][ T1608]  ? kill_f2fs_super+0x390/0x390
[   91.671126][ T1608]  f2fs_mount+0x34/0x40
[   91.675301][ T1608]  legacy_get_tree+0xed/0x190
[   91.680021][ T1608]  ? trace_raw_output_f2fs__rw_end+0x110/0x110
[   91.686309][ T1608]  vfs_get_tree+0x89/0x260
[   91.690783][ T1608]  do_new_mount+0x25a/0xa20
[   91.695331][ T1608]  path_mount+0x675/0x1020
[   91.699787][ T1608]  ? user_path_at_empty+0x161/0x1c0
[   91.705008][ T1608]  __se_sys_mount+0x318/0x380
[   91.709708][ T1608]  ? __x64_sys_mount+0xd0/0xd0
[   91.714496][ T1608]  __x64_sys_mount+0xbf/0xd0
[   91.719111][ T1608]  x64_sys_call+0x6bf/0x9a0
[   91.723652][ T1608]  do_syscall_64+0x4c/0xa0
[   91.728091][ T1608]  ? clear_bhb_loop+0x35/0x90
[   91.732828][ T1608]  ? clear_bhb_loop+0x35/0x90
[   91.737522][ T1608]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   91.743436][ T1608] RIP: 0033:0x7f6ac0b0510a
[   91.747874][ T1608] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.767502][ T1608] RSP: 002b:00007f6abf16be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   91.775940][ T1608] RAX: ffffffffffffffda RBX: 00007f6abf16bef0 RCX: 00007f6ac0b0510a
[   91.783935][ T1608] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 00007f6abf16beb0
[   91.792013][ T1608] RBP: 0000200000000080 R08: 00007f6abf16bef0 R09: 0000000000000000
[   91.800003][ T1608] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0
[   91.807994][ T1608] R13: 00007f6abf16beb0 R14: 0000000000005505 R15: 0000200000000300
[   91.815993][ T1608]  </TASK>
[   91.822421][   T30] audit: type=1326 audit(1746341713.600:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f0ae18b3969 code=0x7ffc0000
[   91.845861][   T30] audit: type=1326 audit(1746341713.600:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae18b3969 code=0x7ffc0000
[   91.870382][ T1608] ================================================================================
[   91.880010][ T1608] F2FS-fs (loop6): Not support -2147483648, larger than 256