last executing test programs:

28m46.865185291s ago: executing program 32 (id=841):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "c1c02e1fe6e029ecb0990c1440da2821938dbcb1dd662539f680ab9a961f71432a743e3c89fb4a8e76c60c5abd290059fa67d83335d39e57aac046ac5a47c5fb", 0x15}, 0x48, 0xffffffffffffffff)
keyctl$describe(0x6, r4, &(0x7f0000000580)=""/4096, 0x1000)
ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8000, 0xa, 0x2, 0x4, 0xffffffffffffffff, 0x11c706ea, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x9, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b52, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x208008de, &(0x7f00000004c0)=ANY=[], 0x82, 0x1503, &(0x7f0000000580)="$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")
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x1b8, 0x3})
fcntl$lock(r6, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd})
fcntl$lock(r6, 0x6, &(0x7f0000000300)={0x0, 0x2, 0x400, 0x10001})
fcntl$lock(r6, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0x7})

26m33.650549594s ago: executing program 33 (id=1303):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x40000000)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x65)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x401c2103, &(0x7f0000000140)={0x0, 0x3, 0xffffffffffffffff, 0x6, 0x80000})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,')
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd23, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080)

21m48.372998621s ago: executing program 34 (id=1972):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8)
r1 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xc)
r2 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r7, &(0x7f0000000100)={'syz0\x00', {0x0, 0x36df}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1e00, 0x0, 0x10000000, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x7, 0x0, 0x0, 0x0, 0xd], [0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78a2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)
ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0)
write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

18m36.227516672s ago: executing program 35 (id=2583):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000140)={0x5, 0xe, 0x8000000000000001, 0xce, 0x0, 0x800, 0x7ff, 0x3}, 0x0, &(0x7f0000000380), 0x0)
fsetxattr$security_selinux(r1, 0x0, &(0x7f0000000580)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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")
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000540)=ANY=[], 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x29}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

12m39.660272102s ago: executing program 36 (id=3575):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x5, 0x6)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(r2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r5}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000180))
setuid(0xee00)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000020000009500000000000001"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
umount2(&(0x7f0000000000)='./file0\x00', 0x9)

12m19.061301549s ago: executing program 37 (id=3693):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x11, &(0x7f0000000300)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}], &(0x7f0000000240)='GPL\x00', 0x4, 0x70, &(0x7f00000003c0)=""/112, 0x41000, 0x22, '\x00', r6, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0x7, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[r3], &(0x7f0000000580)=[{0x5, 0x3, 0x9, 0x3}, {0x5, 0x4, 0xd, 0x4}, {0x2, 0x5, 0xe, 0xc}, {0x0, 0x1, 0xe, 0x5}, {0x5, 0x2, 0x8, 0xc}, {0x0, 0x5, 0x2, 0x4}, {0x1, 0x2, 0x7, 0x1}], 0x10, 0x7ff, @void, @value}, 0x94)
recvmmsg(r2, &(0x7f0000004880)=[{{&(0x7f00000006c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/180, 0xb4}], 0x1}, 0x5}, {{&(0x7f0000000840)=@x25, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/8, 0x8}, {&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000940)=""/17, 0x11}, {&(0x7f0000000b00)=""/194, 0xc2}], 0x4, &(0x7f0000000c00)=""/101, 0x65}, 0xfffff8d1}, {{&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d00)=""/207, 0xcf}, {&(0x7f0000000e00)=""/111, 0x6f}], 0x2, &(0x7f0000000ec0)=""/100, 0x64}, 0xd}, {{&(0x7f0000000f40)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000fc0)=""/148, 0x94}, {&(0x7f0000001080)=""/106, 0x6a}, {&(0x7f0000001100)=""/14, 0xe}], 0x3, &(0x7f0000001180)=""/47, 0x2f}, 0xd63e}, {{&(0x7f00000011c0)=@caif=@util, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001240)=""/128, 0x80}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/26, 0x1a}], 0x4, &(0x7f0000002400)=""/137, 0x89}, 0x4}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000024c0)=""/214, 0xd6}, {&(0x7f00000025c0)=""/213, 0xd5}, {&(0x7f00000026c0)=""/176, 0xb0}], 0x3, &(0x7f00000027c0)=""/52, 0x34}, 0xe2d5}, {{&(0x7f0000002800)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002880)=""/29, 0x1d}, {&(0x7f00000028c0)=""/212, 0xd4}, {&(0x7f00000029c0)=""/188, 0xbc}, {&(0x7f0000002a80)=""/52, 0x34}, {&(0x7f0000002ac0)=""/154, 0x9a}, {&(0x7f0000002b80)=""/205, 0xcd}], 0x6, &(0x7f0000002d00)=""/203, 0xcb}, 0x4000000}, {{&(0x7f0000002e00)=@alg, 0x80, &(0x7f0000003340)=[{&(0x7f0000002e80)=""/108, 0x6c}, {&(0x7f0000002f00)=""/37, 0x25}, {&(0x7f0000002f40)=""/163, 0xa3}, {&(0x7f0000003000)=""/188, 0xbc}, {&(0x7f00000030c0)=""/56, 0x38}, {&(0x7f0000003100)=""/212, 0xd4}, {&(0x7f0000003200)=""/118, 0x76}, {&(0x7f0000003280)=""/184, 0xb8}], 0x8, &(0x7f00000033c0)=""/235, 0xeb}, 0x4}, {{&(0x7f00000034c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003540)=""/229, 0xe5}], 0x1, &(0x7f0000003680)=""/232, 0xe8}, 0xffff}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000003780)=""/27, 0x1b}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/33, 0x21}], 0x3, &(0x7f0000004840)=""/17, 0x11}, 0xb}], 0xa, 0x141, &(0x7f0000004b00)={0x0, 0x3938700})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0103000000000000000032"], 0x28}}, 0x0)
rmdir(0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
unshare(0x62040200)

10m18.735517565s ago: executing program 38 (id=4072):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0xffffffffffffffff, 0x1, 0x18}, 0xc)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x81, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
open(0x0, 0x149442, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x18)
r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r8, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000001020"], 0xfe44, 0x0)

8m37.204606683s ago: executing program 39 (id=4267):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0xffffffffffffffff, 0x1, 0x18}, 0xc)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x81, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
open(0x0, 0x149442, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

7m38.887024767s ago: executing program 40 (id=4448):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

7m33.807367071s ago: executing program 41 (id=4474):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001a00010026bd7000000000000a0000", @ANYRES32=<r2=>0x0, @ANYRESHEX=r1], 0x30}, 0x1, 0x0, 0x0, 0x404c850}, 0x40000010)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, <r6=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
ioctl$FITHAW(r0, 0xc0045878)
read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r7, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000002280)='test_pages_isolated\x00', r10, 0x0, 0x3}, 0x18)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r8, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x480c}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r13 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x50c})
ioctl$UFFDIO_REGISTER(r13, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r13, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)

7m1.59495311s ago: executing program 42 (id=4553):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20000)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

5m3.866029301s ago: executing program 43 (id=4917):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

4m59.471778386s ago: executing program 44 (id=4932):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

4m54.047504143s ago: executing program 45 (id=4955):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xb0, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x24}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x1000}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x3f)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, <r5=>0xffffffffffffffff}, 0x4)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000006c0)={@broadcast, @initdev, <r6=>0x0}, &(0x7f0000000700)=0xc)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4)
r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000ac0)='bpf_lsm_bprm_creds_for_exec\x00')
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%-010d \x00'}, 0x20)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000bc0)='./file0\x00'}, 0x18)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={0xffffffffffffffff, 0x9, 0x10}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x18, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0x7, 0x8, 0xa, 0x80, 0xffffffffffffffff}, @ldst={0x3, 0x2, 0x4, 0x6, 0x7, 0x4, 0xfffffffffffffffc}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x26, &(0x7f00000005c0)=""/38, 0x100, 0x28, '\x00', r6, @fallback=0xe, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x4, 0x8, 0x9, 0x3}, 0x10, r8, r0, 0x9, &(0x7f0000000c80)=[r9, 0x1, 0xffffffffffffffff, r10, r1, r11], &(0x7f0000000cc0)=[{0x4, 0x2, 0x7, 0x4}, {0x4, 0x4, 0x7, 0x10}, {0x5, 0x4, 0xf, 0x9}, {0x3, 0x4, 0x9}, {0x1, 0x8, 0x9, 0xc}, {0x0, 0x3, 0x10, 0xc}, {0x4, 0x1, 0x8, 0x2}, {0x1, 0x4, 0x4, 0x3}, {0x5, 0x1, 0x0, 0x6}], 0x10, 0x3, @void, @value}, 0x94)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001fc0)={0x0, {{0x2, 0x4e24, @remote}}, 0x1, 0x9, [{{0x2, 0x4e21, @rand_addr=0x64010100}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e20, @private=0xa010101}}]}, 0x510)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r12, &(0x7f0000002f40)=""/4098, 0x1002)

4m49.900516612s ago: executing program 46 (id=4970):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02bca0010000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
fcntl$dupfd(r0, 0x0, r0)
lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00')

3m48.008730206s ago: executing program 47 (id=5270):
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
open(0x0, 0x149442, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000001020"], 0xfe44, 0x0)

3m44.202532201s ago: executing program 48 (id=5286):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, 0x0, 0xc4fffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x200000000000005e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (fail_nth: 1)

3m44.14559103s ago: executing program 49 (id=5288):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00n*', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, 0x0, 0xc4fffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="000000000000b200000035de16e3000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'veth0_to_batadv\x00', @random="000000009e00"})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c200000000000000000086dd600107000006110020010000000000000000000000000002ff0200000000000000000000060000010000000000089078aedb3c847a5367e71fef75feb36693568e7141c8dd36aa30ed70c2d25c65f9fd7322d2e184855ce2efab3c3aa7f0ef4dc3abb6d2cb7cc287c2aeabcd2d9922d7823bca1fd37c0fd0f46d8b1ab9d94828851c99907d7e95accf1678a82fb6c3e61866852dd2ebf69256043b19ed8664f5b7efc3e25896804dee73ea5abf27e89971c73ada850a288e6617919fb5fccb0235676490f319"], 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1c8, 0x20a, 0x278, 0x1c8, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x200000000000005e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)

3m38.529886824s ago: executing program 50 (id=5302):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000057c9fbee38b6974ebb42f1f2ac49522de308e5995a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000340)=""/212, &(0x7f0000000180)=0xd4)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c00)

3m37.410085435s ago: executing program 51 (id=5308):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018706758d96c2180964aae110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

3m35.262887548s ago: executing program 52 (id=5319):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), r2)
sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd30, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000040)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4, 0x5}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000002100000326df2502001405030000020f000000080900007f000000"], 0x24}}, 0x40000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff1}, {0x9, 0xffff}, {0x3, 0xfffffffffffffffe}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b00010100c0210904000002ef0101000905"], 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="02002bbd7000fedbdf25150000000c00018008000100", @ANYRES32=r6, @ANYBLOB="2400018008000100", @ANYRES32=r1, @ANYBLOB="0800030002000000080003000200000008000300030000001800018414000200677265746170300000000000000000004400018008000100", @ANYRES32=r8, @ANYBLOB="080003000300000014000200697036746e6c300000000000000000000800030002000000140002006c6f0000000000000000000000000000470001800800030000000000"], 0xac}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3m34.422581044s ago: executing program 53 (id=5327):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb1}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0x0, 0x80000)
r5 = eventfd(0x3)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0x0, 0x0, r5})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x7c, 0x3000, 0x2, r4})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x5000, 0x3000, 0x8, r4, 0x4})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10)
syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0)

3m31.143542129s ago: executing program 54 (id=5346):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = dup(r6)
sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3m27.71300511s ago: executing program 55 (id=5360):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

3m23.866326794s ago: executing program 56 (id=5376):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @empty, 0x8}, 0x1c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

3m21.573925495s ago: executing program 57 (id=5386):
syz_usb_connect$cdc_ecm(0x3, 0x78, 0x0, 0x0)
r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
fallocate(r0, 0x0, 0x0, 0x2000402)

3m20.944685084s ago: executing program 58 (id=5397):
socket$xdp(0x2c, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
lseek(0xffffffffffffffff, 0xae7d, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x12)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

3m17.475656925s ago: executing program 59 (id=5410):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRESDEC=r3, @ANYBLOB], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYBLOB="0000001000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x3c7)
unshare(0x42000000)
setitimer(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, 0x0, 0x100)
openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730105000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3m8.763521736s ago: executing program 60 (id=5455):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r3 = gettid()
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r3}, &(0x7f0000044000))
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800002f8dad722b0182eb000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000565a6037b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
connect$inet(r8, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10)
rt_sigaction(0x40, &(0x7f0000000000)={&(0x7f00000000c0)="2437460f1c2bdfd5c4a2f10027c6c43b660feb2841d3ca0f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0))
r10 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
preadv(r10, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
ioctl$VT_WAITACTIVE(r2, 0x5607)
io_setup(0xfffffffd, &(0x7f00000000c0)=<r11=>0x0)
r12 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
preadv(r12, &(0x7f0000000000)=[{&(0x7f0000000640)=""/147, 0x93}], 0x1, 0xfffe, 0x1000)
io_cancel(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x5, r5, &(0x7f0000000240)="d945366bf62e9f47a16150aa9039437aba1c08b50f725b2e6b6392e4b3f886680e0460564494aee20053330025888fc4167eb3b6f0311eaa84e456f718330767d422d0d94bd16e222646989f9c3988e86fb0bcb79bf804d631ebfa0100cb86c4dcb4cbdb24ec0397ad9c451cb10e9db4b090ab94496fada5999d2520", 0x7c, 0x2, 0x0, 0x0, r12}, &(0x7f0000000300))

3m8.500446142s ago: executing program 61 (id=5461):
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x50, 0x31, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x3c, 0x1, [@m_police={0x38, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xa, 0x6, "004a001295ab"}, {0xc, 0x3, {0x1}}, {0x5}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001800b68d3e11000000ff46106bb6eea909ca82fdfd469e92ddc4d462ca07ec49c5928091d1fe26fcc73e22fdd41ca2efdc919999807357f6fb74ad1cc528b339e14c9db216600f1e1dedf7a7459dfaa0488d7b004d53fa091d14c62e118f1db160b12324969e212ea775177e8714990f0cb40f5882be3d68f3291617c21b92f78d0648503a2d90c9bea0d2925aba760a"], 0x1c}}, 0x40080)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000f6d0b453e4a0a6bb6c0f6c1545d2936ab24fb9492f5e3817aac127ee8497064b15ff964476abe43ba6fe4781cbf9af1bea1d73764dd2cee419d3d3e12c1c915da756adb97a9415afb976da6fdddf9b1e827246ab09c5e0b3a1b28eb8d5093c8f823fd8ecd5ce261301ff3dcb5525ab4616d8c5490883af2c90ecbdfd6e80f6", @ANYRES16=r6, @ANYBLOB="0100800000000000000002000000080003005b8c10d55896e71ab89ef333f9ad9dbb054f37d97cf7780719387bbf5ceddf80d47863e79904139ce3daafbe5908a2246ee89c38d3a8c39c52d1f7f8983ae1", @ANYRES32=r5, @ANYBLOB="080026006c09000008089f0002000000"], 0x2c}}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x9, 0x13, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)

3m6.880459384s ago: executing program 62 (id=5466):
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="d81ac1c9ef4d1fce5f047d59305bc86a73d5de8bef47260eca9e0148b1024332c1bf739f1e6fb30f1215514004aefabac7133621606ca13d61b4a046d06fcd44971d14adddaa073047ec2e283c52df77aa0a794fdbc61fdae29842f9b7c52b39d98871bba0dad414db778540e6ecdbd94dd699e0d7c58d332edf1504231898a309c0f330d4491db4bedd50d348d306be06f42c21e913c184ba4c80dd875acb2cba514b7a2892300d3ccf46809eb2e5a739957ed9872dbd9434227d6c68b9e7"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40)
r2 = gettid()
ptrace$cont(0x1f, r2, 0x3, 0x8)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10)
read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01ceaebd7000ffdbdf250f00000020000780080001"], 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='io_uring_req_failed\x00', r0, 0x0, 0x3000000000}, 0x18)

3m6.197195933s ago: executing program 63 (id=5471):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)

3m5.615381902s ago: executing program 64 (id=5475):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340009100000109022400010000b00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x40, 0x21, 0xaf, {0xaf, 0xd, "7fb248362eb426709e1c28a9a9d6717034978890bc1a5e111f519372cb88047840a9d9b2f153d9daddf9fde8ff9efc5860e8ece7c0ae8ecc42043ba6ed0a515d381fe4516e2696290be756f3bb7568dfc6964a56fcb41333c6905ecfe66d23ea38d485654952325e99afbf750feaa346e12719ad77c208b776ed84b19edd3e38141200a33aac6d1396c3bc07d021014b4bf0f38fe84f6bc805858b1bf6dc39286fb5ffde4709ec9fcdd0a1204a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}, &(0x7f0000000400)={0x0, 0xf, 0x5a, {0x5, 0xf, 0x5a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0xd, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "67f9102fb121396c9101cc71d63c12b3"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x63, 0x4, 0x3, 0x4, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x4, 0xf00, 0x7, [0xc03f, 0x3f00, 0xc0]}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0xfff, 0xf00, 0x9, [0xc0, 0xcf]}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x8, 0x6, "51b34a43", "6f2447cb"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x8b, 0x7f, 0x8, 0xf54e, 0x2}}}, &(0x7f0000000900)={0x84, &(0x7f00000004c0)={0x20, 0x14, 0x31, "fa69099630794aba4a2c68ac39ae7eb4691d785fa4f949b17cd7dce2dd5e03b52ab3b47e118b126d9e1f5290216cf8317a"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xb0}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x160, 0x4, [0xf000]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "89bc"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x76}, &(0x7f0000000740)={0x40, 0x13, 0x6, @random="190f3e0a3b1f"}, &(0x7f0000000780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "a053"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x10}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m3.464282276s ago: executing program 65 (id=5482):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

3m1.457079992s ago: executing program 66 (id=5491):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20)
r4 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @empty, 0x8}, 0x1c)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2m57.095358277s ago: executing program 67 (id=5512):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
prlimit64(0x0, 0xa, &(0x7f00000003c0)={0x10000000008, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x10)
close(r5)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=r8, @ANYRESOCT=r3], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

2m47.394912092s ago: executing program 68 (id=5547):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1, 0x3})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000032d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000000e90000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r7, &(0x7f0000000180), 0x40010)
fcntl$lock(r2, 0x26, &(0x7f0000000380))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r8, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r9, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10})
pipe2$9p(&(0x7f0000000240)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r11, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r12 = dup(r11)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB='\n\b'])

2m40.29195054s ago: executing program 69 (id=5576):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_procfs(r2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
write(0xffffffffffffffff, &(0x7f0000000180)=' ', 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r8 = socket(0x1e, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000480)=0x2, 0x4)

2m36.276904472s ago: executing program 70 (id=5602):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x4000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x4, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10)
lstat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900))
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf79d}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r10 = dup(r9)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000000c0)=@x86={0x1, 0x6, 0xc7, 0x0, 0x7f, 0x6, 0xc6, 0x0, 0x81, 0xf7, 0xff, 0x5, 0x0, 0x0, 0x8, 0x9, 0xc, 0xe, 0x6, '\x00', 0x9, 0x6})

2m31.889171117s ago: executing program 5 (id=5629):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x48004)
r0 = socket$inet6(0xa, 0x80002, 0x88)
sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000940)=[{0x0, 0xfd}, {&(0x7f0000000b40)="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", 0xc51}, {&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f00000008c0)}], 0x6}}], 0x1, 0x40000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
bind$netlink(r3, 0x0, 0x0)
ptrace$getsig(0x4202, r4, 0x10001, &(0x7f0000000440))
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x401, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x16}, {0x100000004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0xfff}, 0xfffffffe, 0x6e6bb9, 0x1, 0x1}, {{@in=@loopback, 0xfffffffc, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x0, 0x2, 0x3, 0x200}}, 0xe8)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r9, 0xae9a)

2m31.641909733s ago: executing program 6 (id=5632):
socket$inet(0x2, 0x5, 0xf8c)
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00), 0x3, 0x5f5, &(0x7f0000001040)="$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")
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000a40)={0x3, 0x0, [{0xeeee5000, 0xf0, &(0x7f0000000940)=""/240}, {0x4, 0x5a, &(0x7f00000006c0)=""/90}, {0x2, 0x2b, &(0x7f0000000200)=""/43}]})
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x52, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
renameat2(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4)
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)
syz_emit_ethernet(0x4b, &(0x7f00000000c0)=ANY=[@ANYBLOB="476e97303b0700000000000008004500003d0000000000119078000000000000000000004e2200299078040000000000000000009d9e6dbd39d9859e6d414cee66a73191a5abbd177c05a6"], 0x0)

2m30.89698357s ago: executing program 5 (id=5635):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$selinux_validatetrans(r2, &(0x7f0000000580)={'system_u:object_r:devicekit_disk_exec_t:s0', 0x20, 'system_u:object_r:crontab_exec_t:s0', 0x20, 0x74, 0x20, '/usr/sbin/ntpd\x00'}, 0x4c)

2m30.668019086s ago: executing program 5 (id=5636):
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(r0, &(0x7f0000000000)='net/ip_mr_cache\x00')
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000040000000000000000008500000023000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18)
r6 = syz_pidfd_open(r0, 0x0)
setns(r6, 0x24020000)
syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0)

2m28.875595356s ago: executing program 5 (id=5638):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20)
r3 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @empty, 0x8}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2m28.750971193s ago: executing program 5 (id=5640):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000374559825efd9482deb6555c000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
close(r1)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read(r2, &(0x7f0000000180)=""/247, 0xf7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000008000c3a000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xa8, &(0x7f0000000340)=""/168, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(r1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYBLOB="0467719536f9139b6f5d69898a34ec4a49c986dd401be786e1ab1311a391d926eec8", @ANYRES8=r4, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r2], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r6}, 0x18)
syz_mount_image$f2fs(&(0x7f0000000480), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f5f686561702c6772706a71756f74613d2d732e2c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c6e6f61636c2c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6e6f696e6c696e655f646174612c686561702c6a71666d743d7666736f6c642c6d656d6f72793d6c6f772c00cf4a004bb47f3e65628a"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r7, &(0x7f00000017c0)="c6", 0x1, 0x200980)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r8, 0x8, 0x4000, 0x4000)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffc000/0x1000)=nil)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r9, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4103, 0x1007}], 0x1, 0x200, 0xfffffff9)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3], &(0x7f0000000240)='GPL\x00', 0xe00000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r10}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

2m28.53663192s ago: executing program 5 (id=5642):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x408)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})

2m28.192917594s ago: executing program 71 (id=5642):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x408)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})

2m28.158385193s ago: executing program 9 (id=5646):
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
close(r0)
timerfd_create(0x9, 0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000100), 0x8, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2m28.157188043s ago: executing program 6 (id=5647):
mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0)

2m27.96989172s ago: executing program 6 (id=5648):
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0xa000, 0x0, 0x0, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async)
mount$bind(&(0x7f0000000040)='./file2\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) (async)
mount$incfs(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)='./file2/file0\x00', &(0x7f0000000000), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x185040, 0x0)

2m27.96915054s ago: executing program 6 (id=5650):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20)
r3 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @empty, 0x8}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2m27.736338376s ago: executing program 6 (id=5651):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/uevent_helper', 0x20842, 0x2)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000006100)={0x28, 0x4, 0x0, {0x6, 0x7}}, 0x28)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f000001b040)={[0x3, 0xfffffffffffffff7, 0x1, 0x3, 0x2, 0x4, 0x8001, 0x0, 0x3, 0x48eb, 0x5, 0x4, 0x4, 0x4, 0x8, 0xfffffffffffffbff], 0xeeee8000, 0x4})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000000000900d"])
dup(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f000001b000)=0x1000000400000bce)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x804001, &(0x7f0000000100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r4, &(0x7f0000000200)="3c9c20523ded4c0f106ae6b96d6b7c81dd12652802946ac25759763c968d6b9e50a9ffdca850ab65da37d03cd977de1c00849b4b64b7f7d8087576752468d6d010dc4dbf741ef8a0ac3f7f5e5a9ca0d96399660a17960c45137169f24f0bbf258dc68d62291617bf96648992ea261cf1b85662010d9fefdcd72730abce7bd15e6bbbdf23709fc161f43e02c77839c6208e381a4cdead31a44bebe16f240c5658b177618b38905afa550955915a3effef2f37ca73fd99586ab777695fd6f4c223424d7927d0cf9fed3985d7e188fbe0d97f6903dbc6cfd5c7cb90baf93c4cf5a0096139b6e461ebdf826e1c6e59f1cf82256df35eef636d26afd07f2787cacd2575c7551d67039fd61470b15523ac8f032cb142f71939bc376bc75864ebce299982b4e521521f3f25d44651157e00a6d1098df73a002bb65403a1dc9f2d4082d9cdb81380a9776e6bc1009c6b2e95f5f0a726e0a0e821cf577ee471373261bc251a77fdb7900e6b063d5f8f2ae455f013ac763150215c641b3ed93b3cae765b9074e2779a0ec7431b042ec0c7245e83f5bc7b203f01e989c8659117e19bcb272190bd22758963988e62c315a27e7a894749c552d59c307e4f1de677c59912227ef4ff00168b1bedf09cb5e8498e8926e286eb3ac3f27e2b3a551a0554c1963b976e0875913d0b139b1fef3b856452f493a26858ce54aea75418798cf70287f9c0572341edbe66ab66e862bff4184906daa99eb484ba9a8fe9c6f2b94b5a2519bb0d2816bc597a692ae91e089c3f922c6992fdf0a45ffa2d4555493b4e2ad45b92bd98bc1ea9cd7b46e0d6aa2611734a314602587c7348cd6cb2b6207da9bbc6318dc7791d8d3530dfc1649edea2aee299387f9f004cfbd1c260b49c26b850f341bcab52d9a0cdc13e530f1614b48d935c140f2ddb5206a04c917aa4e530fa2f93d2093b955dfa893508e5f0717e3ba58bbbf7c83a0b96a9ab00ccb564ae3da0160ed6277bebb4f014b4a77862ebb503dbd456010eb67bf8c518cc60b6c460e7929d650faa63b3e0207857e17d8e88b7cacf8854543f6eaf5f86015f6091baaaa50a03f3915eaea9fc5e6e0be736017628f721963f8716d162dd52c295e8da6d492722c685535a87c96f9dd341463aff98241003dc8b2e4135bba31745e9353235caccb3d4064adaafb371b79540f95681ffb1f6ac8116f42a175ffd31f1df99c0f89b20c07f121fe1dc630b432a39bef3e3cfbf92574a6c9ca71ac889adcc47644e1ea0f11f8c21a509b1ca1b275e21fdceb3e553045721c4e030ae4454376660142890d753c072624c2ee5d27a25ebd6b9b2a923b62c510719791c22d33a61c002b8af5948779ce70b90f69aba9f504c8d3f2649d74fd02feeefe327d9474677be4bf110d6fa97fdf4d89484154755a30dbea41194ec7c46b28f397c49b5aa4888f1fedeb7d7fd12229ba4dedb1a02f46a5cd990c1dcfec6e3d533a4f9587f6a28f838225b74076e18c69b501f0ebdf33562e6b9047f94dde375f295d782d16da09aa141e79fc96124f7297b97ddc8d59e239a0783ad9ef3294068b91c3ab9ada4419fb4132c7ddd8dd653167af8b9435fad20db5a0ffce5d496ae656843f4cb1bf98c190dc17555bbafb7081cd935d9623ec2ffec4dd176ef4400f4ef83f0df958bd18e21809e019b8a57bfb89f68ac636da4041f202d24186dab8f8d4157789e32d03759e70c136bb758bfd1b5d49a3fa1b9fb551939fc9ba7b7afeaaee00cf7e019c716998e233e040498b46ca35a87ec2743167646287898bdc47f44da28ad4853020b1d22852ca201b7b8ef41653f502b09756183fdded700521b7b3110ca92d8c545b2f1b26d5c371f5afd3353c12a06ef9e533a1f3b787c5fb107a05b58440d4a6de49f0c34c4f2801d8e4ca1f6f5eee0af97ff50628457ba364283d2d992b4f9b62daafc6135279ebb9263b0cf3b8026cbe58f5b2f4f6c3cf1e841e16525327335e2d86c83a8d7f59f67db18db1fd518474ef630f9d2f4a03d4f0f00a61513c849c6fc85e7a7da40ed4604f0908c3852a515aab56198bc489f51606148832d24163e020a8723b0d6c84b343a485ec52882c584b32e3441058c181a22b8e093d88776bf43ae66c3de0d0babafc0dd341e1f385d6e54ec4959cf1accb88318c37a0488d893575e6a38ea6b1b94da576b0a2f5d253bff49c5d4f21aaf441deeaa748011488e8ed571baf16cc8bf50f1dcaf1415e1dfa251831166a075f19fb33adde935512ef8cffc91a607abad19fd56a137ea2b519c6d413b36c7d6d592f4d4a6b8ada921ec066233d53836ed2fb22275d6b4f38dd295da21f73afd8ba9075edb9ad253a721caa08c4aaedb77434cdf37f3c9bfbce1753dae7771d57cb37d60bdb711b01a27224e8c7e0624ae23401d9676e8b926c55061f67aa7f4a9312f414c7f23f2388cb4af37405994bf0e685f88341224d6a036891919bc175033d477d2e9f71b3f62e53d5ddfc1f27c607adf802659ecae88ae5ab362fdeb413a926c559ebd39f9f8abac01f938c62f25281ce29b32acf10003edf87941e3bac7ab8fc5f23b7091f25708968ac6b4eee6d7eaff8dba0ee43645845c68d179bf9f6ab9f348a3391fe4a7e9387d0afbfdddc6f65053305ec9c6b6947cd6812f58f66dff62be596f57f49e25fa2a772d1626befe49083cab88f9ec597eae0748018007776728c76761e90ab4341e2b8ebeb6aff6fc2fd4f28f1f9d295193eb0a34bc50974c1c93d6f480d3f65b3dc412cc72a25e1054b661139f7fdd84ce01d8fd40d73ad4c420e51b5bedee1c89dd58c3e5b1560c310e7e2287f8f0a01f823bfae541db946b0d7ea87e772b2881f5d5f36f09ecbf21df27151257857badefc198927343294623ded45662ef48f966ee7bce73e5116b49739a92b5f34c5359990fb3524c33219d3c3414b1d9b643ae7b2c188cd3118a76ee9ec5335c95afa5e96ccf7ab072754dfebd4afa2492681480399cd388d82ba6118d0c2d00b9534ac27e15a141fbd92cc4b52730ee7fe7f1150ab062772fbfe4956ea0ba731814dabc4a05d0327f5b51ca395e6ba74aeb76c698f35db68c7d09a70ab26d1b1bd5941d2d72f08ce0328002ea5e1c2fd0583e99233112f1ce3647e47362c20f2c231499a5c1474917bdfed84d1a02b2b2bd05ef07b0624d1089b7aeb7b0350ee656876901ca438df1df85b6a0ec27843b4ffaf97e47c478cf5e2bc95f1dbc26a39a56718970d0c7a4d1d1fa4f3760e30381d19de5d9b00aba120049a424b7586aefed101fab0fc064355e81ff4f41ec33a5e818a87712db81454574dc6b9dcaf2725bfeaf00905fbc09a6b6518303913b56a12149e7affad6cb62fc866ba5ad868f5356bbcc08292796659f0a38b92ffaf21a79e7a63283dc2d851ec5b8152868c0cbacdcb53f276a6a307587c5a951fedfc9c9a221efd0c03a6a35017ee3c70f1c64366603ad50ff2fb6298cb29ca59825d191fbf46941e0109049c9a0f399055187968f903174b028a59ed91188bc3aa3502bbf64bf9151536987d13a738060ba0607700e27ca75d8f11897c1656a2d11e54620b0c140bcc5d114d53e16791726592fb5cfde119462341f4a3313186467ac23e42bcfe01c5b33e499ce14e5b20559cfddbc1385cedaf71ba49113d3e24847b0f5d1011bf173b48009f840e10cb6e0e3fdea52a7468ec4edf35396c64ce7484e6eb9ed4f809b31bbc8a8097e3e2b1839b4bd2bd840f9aa3652e85aeda6ed7dcf242fb11a94710a0031bf2b0683538c292d3af365a57a69ba327692cb6c163cf7c4698851b2e158cf3abb223e00a3c835981cd261460e382780fca37530249c9ed33a8b857ba6414336bab255f8e2e750a79c36641a0dd54671f98f7280f7679147f108603394bd143f9385a0d114609b308f973feca21ea2e53de1bd6bd7809efacdc5b4487f7ffbca05dd803fc12e13b8103da1723cc8bc73f26de7d256bf7d60c7c1ac47dc47a7810c43403b780052e42b74e69e1a3380fe9b80c7a2b7f4617f4009230e8688afccd99ff92a69b1487b385ef2fb7729546c317d7b3106af5f2ac26222057158240bb07a3a61a359d1bf3e809220529580f3298b0dff10c8fe1265c8e5ea41424e5a0941c5dc94fd9d7a33ef1550f3f30a4f73ac5fab6b6c34a03f1575abebee4625d041843ec815ecf854c8455a5897a9533e4d5e95a1c5121d4716a82da80abe9325a92904837a586adb63b31ce0464b7cf0e9ac48125ccef7da201292a02b9aff8622f8334ca34447861873cb640a44dae8e5837f9add02bd1f5f577957d82021c805f1d9d00de7a1a71dc5e3fea80bad67aa76a51053290821521eb20385925d668c733859ed4e0d923c72d4ed7a20b90ac87de48ba4bfb6a3bcc63907a205bb721ce181a9bf6470a70b7ffbff9f20703243cd0a10afd1f93c781ab8cc8cff9283aa94a28a35642e09d3f7843a91a2581fc8dea10dc63efd8e1e9ded53372f4e080e3d1258e0a5ba26ea97c0e25de7df6ddd230d2345f36e7c4fe1890473fc029055b8158c4f691ef3e65c0370d8e299bc978e6c861683a5e6a448e18b145f515cbc8b89addb7ad0482057a1d8df5da6ee12501782529e871cf6f82427e0780ba8f66c00d43b8a09ea3fc58cfc5a5e1191528f0e6f4368add0d8ca5424334500fc26e52648d0761e8f81a666b27f581cc43d3515766ee0212d2d996b2442dfc660bca3598c61fac63e866c2b8749f78cecd90c6aa0eb344016f36f079202b9b43eaa9a924427d44f4de3a96957aa87429c2f88b80247b931355b53fe7bfb69264eb2838e392368e236ddeb578188fff1006a7ceb6207962cf0b61bd3cbe213ae9b5f0357a160aa697275bdb821d436cbcfcfb1f406ba5fe6c449f81d49912ac17f66088dbf6cc02ccc6e4a58b258e02e7f0b86bfc5eb792c8115ecce5c95e49213f6f831c658d6c12678c59b760b0888dd6abb9c51aceedf982e0a99e4263966e7b3efe4141fcdd2763146eb183130ebb708a2d86c09dcc91f60ebb07b427f2f53169057235c3cbc75153323ebcd86834d5abb87eb5bedbd3537af4e7070127ec5ee42b98fced9bc84e14a7ab170becfaf0d05b6b55b58d4e650190d5722497daee40c580ee433bb5889bed411d7dca299c12a347046e4f4afa55d014178cc4f488d0958c6e9e9614ffa3f51a687a9d1d0c45794e1632b8934558feedc13e5667e73a3d6d8b1152968628b084eec9b1d7719438ffb61164e2638afc45a2790a8e7b0505ab46b2a07f14345f8bc6a025c054c71183d9165fda5e72717e5b1ea63d814ae11f5291a82ff799a265ffeed035af29706f7045565e0c36519d2a65a10971a7c147cf76614c92feeedf6cb06a7440bc01229088e492158bb4b5f1533c040701e2e27d627cfb07b645c895ddc3bc6e182176ea7012261bef6be384a1fe33fd9e46962652b36dd8dd9872dcd1700901605c40b2e56f5b37d06715b297c67c61c0ed9f240644314acdd1567b533dbcf3ef37c9c7692039323dde20756d7d8c87fe87304e6657475550b0f809994918d7da380c7a70a178fe9666494854d0a8e741de4f5dc296a10a1801738d49fd23f8ade43c20cf12c1cd8691d0a08a0dac811ab87b6cfb16431d0a2076ee16a2cd8706952a26d9d60634441c1f42690500e88dbaa3ca5739cdb903ea9a0e4a3ebcd55ff10188c550a381a4c650972ad89635d493966a16ec8da9d7b87ed087129df490f83cedcdd2b5dc24c377e208d850e4c987f7fea345bb86cb16da33f43b3ccc62fe31aa102a9e49d49c0f16eeff031bf12496f440100000000000000d3fd4dfa7535155145c365e826bdad6734ffb47ffb1ae4d900cd27fa691ea28b15346f68f47ae2ce0a83a3005d5858e6e587f1609517d8d9330718c647c9b08dd925338406d4cef2a39bab25a37c8092185a7fcf36324fa0648ff8da6317d55355fd18932ad3404eb010bb29aed83982514eb74be3ec28f5c84ab6dbac7bf4e7aa399cf2461bce9bc4600a8ed1e37f3a31b2bae2c92f3c8ccfec5aa296e8499ef76014661dbd0d672fa8f16b7e1bbc864b215e702cd7c12eb5be6dc3239b52a59025a2a7ed459b7def94018a62d5ae7eb059d930a4c3eef8e3ce6ea3bb09a2817c92d28065d610e4e8d943df84961e8ea31cc77bd8250d352302227ec3a9bfdf7249e2c9c6094dc5a949ec003f2c1325506b17ca0ef12d7c650ef253d51d89b40f790b7492252273222225e245c833d64c55a48d971c510a9dbaff075ce7b53422ab68747703bed9fb94c60f857f14d07119fe17ee693af929802885acd14a9893a87085944260a596180cff4bbe4151ba1b19266c1d13a491c5bc983f158d6d5d218cabc78063baf95b6e93beb3d1cbbf72b984664b01330f39b5169d517d13cbbe2f5d6290d746a45fd5c0072a6e96a885d5324b139937d23f4a7282b7ef5c598aac3cb4eee4b25ad296d7e12ea3f27f58374d2ea4154ce22065a391d0b718aa89c9438346318c584613b065af2f32d18b1bae2aa17b8480c3698188257bc2797172c78bf0b163405c1d6fe4cd1c6c68d5a72c032dabbb8e84e767882d34854e30b4264dddcd0ba7c3d03f8b543d16391dc6a4f4110f57ceda8ed64fe9087789191cd471b1bd53b3825749c84e55a425546b7bbde748270296bb207d50bfe7cdbe13734d04ba7fbd8e684f435a397f9747286b9f791b6172bd12761dee4a00852a830ea14eeb1d2834c51af097fc72f44f8122c2a05996c21222b55d6f41abf0f3f7bf58343da4cebb5f59921ee4956e4b8e6690b2313cd59d3939d8dc7ec394c01800058b614a478d69f84abc3941ab10d69029dce4acfd11ae4252d5154d2c1b4b7d68fd3fd9adedaf3686110be8cb656b9373bfd30178b3e9a998ae4d2793e6f1386b3809ab2d712ee89d45abc6e3d8e19e9e4c1f6621ad20410b3772ac920a7c94729eab9b508f0e493d36abe5df286158ea3cd5b1da16668b482dd5baa90c9d2b7a05f6f73012ba136d6e78ab935094f4f97ee7e156d6001bf2872dc7ee081e31850badf171ee96fa4c91751053e58822657a811f8db0e23e6ccd0e48f8a3bcbb90c2ec3e83989f583e51c496ac29b81b2af25988d8283c2201a6cc1f1e5cc4f926817a542b8821a8347140b2c4ef0ae629922e6625f7400b2bddb6783eded022a9f157c754e29c85f71a2d38dfade7851d182ff2100425a80ed829966238bc9e108d97dd086ba46cf623a0d5c0e5a0b1c86a304f1363034d880425d7a6fbc3ce234a0678604e74f0d40744f6ac68183d4b0570dbeb77e3b19f8ca204519015968d83ff7a39b8840170ae29f205c957ab3887eb8dbcb5339f1af44f566fa96be59f1bc82ef7edc6cb3b7860a746c4bac8ccf68a76bb9a934238e830f11d05171fe5aae1273d7446e5e80ff3959c9535215f30c63c7559561f288116c441080cd6ff338628e35eef6d92aae44866be47b0cda019bb18126fef4247c94db0c8fd29cde7460d0b2f710471564af2738ad782e16ea97cebe6a89ef8f3590d71d86257eae312ebf48e478366645c4ebf664a709bc553ca846758ba734170b26363bb88d408365827d61e16400b4b1de6e45a7e3e692459ef2b2002dc37cf91c8b8a5f8e6060fff0a72bd966b6c999322356154805586db159a874ccc52cbd9b6c5681ec8ad50b768546f2e6dd9ce4d1528203f73712ffd8be7fad6d786fc560e5047c0a87860987a6bebb9b025dd1bbbda3cdea5731c41e2e1975f7a889ff38d38fd2601d521b7e8ea833188e3af14caffa4b66c041103d55eb5511c5bbb85a0192aa7bf0acb17cb84a29456d466f6eda261f612d5e4603e4aea389b68648d5503e9c1b5c3984acdd325dc5dbaf35d9e44bdf7a8b4c89ce30b4b648b9e1d38fa91bc5c8d8f601a6b82e1f42f6e04acf3f9fac8d26b03a09bd7cdb35175ad55f17b22db328803d66324c0970c38d81cdc1b7ee67a2d910e8064f81fbc0d2a6a7aaade8000b8be4fe111d354731cea9380d39ece8b146d34f74b7ee87322e4d772f3570a46d81cdbbeb21f7f66fa8baa869e4b8637f8a061bb8efd7e06966f3186d1c730cc0a4f38683054f1fa775bbd3cae02102ad9c773fb7eb874bed5fd84167fa86029abeb7d9056d26b66bf7f4c5ba675482c71b08d2ecb9b23bd2be801a4df9531396c7f4bbb59602500464dc04ff7c5622eaa9887ccff24bd88a52ad69f58880012db03dc4d051626b1fb0faa510fccb6b73f3953e461165dc58eac1063b664a2a18adc06102af134737f34bace2fb21b8d54cbd674c1a10a75463345b4ffd0f9fb5894e6ff8b455f5d35bd1313392cef7c4c441ce8d21302dfd58688e5d9454bcdc03a9c3ef269697506ff9ef4522cc0efa935aa368aafcc48cc2a5b6be32a89b29d0062c33ecfe44dd070a43ebc63f3cf99a3a142176c93c1d7acef0d42261f8f6d50c837d9a43e8951b35516e050069af0633e6388323029c9092475e1a7e81639d9d2e5b81424e1576920b977d329b5b087011718a39ebd31983512c4c43df67c2919e29ef909fc8c79fe2ac41e08a269690a32b63037abfc9d5b1196b86edb8e4312f3b8b8d4e265c0e6b0db372d742f1ce5bde46490af51ee9ce24e36ce8b59f7213e68929e4174a2760f076cd1a7b38db164c67c0e902f05d4d3f8d77225586b975a1655f7dedc3c20e815f6e2cedfb8d331e9c4e0c8c2c21217fdfae1b2149612ef0eaf71bcd23224cda2d0ee00955d1ea88a56f508923ffa2fb1aeba4f4fc4a02c187fdf3b4d791d5566acfdf4b63e9c3990f12059fa2562206098967cd36f06c502ae79cb99f4880a8c28a14d207bd12c30f9604bb3bb2e00f46151bf5940445036dda64c135d8af713b033fd836ed11d64a18846c62fdb1310821901d18b45b337970a9949dc1ed45d4afb3596dde4a7df1c009f6cbdffd0f1f4eb12f1a1d23b87a72baf07b9d90913a7e247a2023e91ab2c77aae0e9d666593b61d85facac3c8f50cb4f2e9e4a435897623f3ce626edd98b50ca2a764756a438a63e26fe480bc5eb7c54ddf055cc985b051dbde037967ed3de9d08b2db79701608bdd2bb06d8471075dcd76d1422e4b3b221ec687b73056b74ff69e395da32447278dc9b6e499abeca743d4c0d2ae2cc3c0e1b253862cd22f4266e922d1c255fa755899d3d277ef04f55170e389b4c4f14e2c0ef58d9d9058e4f5122d96250d7f66288bdbac3959a6e674b51b0802cb451faf40376cf00022672766fc96e229d63d1fee5310fec48ee58b76a6d98770452b3a472ce5c20ca58e14538e961fb7dd969865e15be4c1ea65153c1d3e021f88fdc7630045b6db7d1f5b92b2fbbb1fcbd1c2175e8f6a5d00dce1400a34e3982f0115f60c4c4df2e0dfde764b10f08958ddf6955c8c5e7e287dc4328a00b74addb10a73131ff3bfd9779f23901ec8407369460d0d3f04f53b6445def63b7b19d8a38dab779ea3dd7bfc7cb74506358b23e0c190da6e306a4ade9a2dff29d4703ec25058d0034c5a84ef97a1120050155f29579b27f4fb7c400d1628e7b4312082e870e5cce27eb5eb811182a2535962e022979d2df66884ac2608175ef7b333ed88bbfa66644198ba201a700000000e604a0bf952f8e4edf3e73eb93c52f1a1f91190f9a1ec2010ca2e97d1a8acd310d802522ab38d10b9995f2d6ce43758a9ccafae4578b45b7ad69590d81c1c84172b7e81cbb813b381304e5524323436be4fa418af2924c972d17d3fdef13b3d15384c29da414fb5ce9c757d905380f5904ca24bd4dfda8e1e782f39a42f8920060c0ccb17a6db8a767ac9e33cb431593674ed9969f617f1cc6fe972e3455bdf31276eae587f3083a0826ed6516b7a8fabbf27bf23ffb806e566ed75fe93597d5ed4113244e98c61f42fd2ceacfdeb9610673b075b148fe23956109843e07ec5a1bc6004214351537613b8f7f2c4c0ae9484fee92f446e5d2fc4a2b44175022c0a5b7b4272df00002e4ffdf4eb56f632e6bf41fc6f8f7fcb04306ac0619b0eb8fc2751bb64cc29db25162baf8b6b5d61d45f041157b8412d699e8e615af31944d80fe52b89e1a21df2615b4abbe02ee7d936cacec938a813e5f867b541cb245e0cfb5f826bc017e958686ce3e6b888ab8230629356c0134c5b5cb0d8fc267338c336d5082d20c49c68739d6b56d22198a903c36fdb6d5db70785c65ca6286f4125083704e7f9607502a951297d1838f40e424d54ba94cd33748050d511625bf3d889a5bd0bb04e263f633b200fff59845b0fde945554ed4c3b7bcef65ecbb63c0979bd48149a19851d9dabff8e8f5b889e453a1b8bcff72ecf6280703cf90a5bc285469fc39d74c897fe5ec0a36b49825adcbbd412861b5a951dd7af16ebb70b921006ed14647afc1b115683a815dc3f4bd4983778573aefc6a637ae41dec4c041f6f6914f4e10c5c98fa6a5c052b64d3260cbef91fe234ac8127bcfa2c2031d581332c411b22d8617cd2720e1a4ccd6571e8c593457e038b387004e9c839b998384829d46e3d0ccd5ba8a1dcd338f1cf572e52a80e17c4f72fe147587735648b417858f27ef10eef745dafa9eea5f2d80c920d62e0cc2e3567fe9302ab8554e3c4a6c17a5fa5a8bcffa0df138a257fc308ad57a9ce63e6cae6e9cdf4f991f50a057daf64b20ef53b7056efbba8024eca0f703273e3c9be5e4f7008f44da6e9cb00cf3828acc53a7b12e48e1dbb778b61aea347a8f7b945a3f85745d640ce8a8567c0f00cdaef81f8a77ec849d0281c772cd276201a446a4522ba99a7426db7debabe8c98ad9aaa0f37fae2a73327d594540e015d5ad9b409a7c33e82ad27ec0a8ada34ece920e518ab6175726a904f9ccaa1fa243918d31b6728d88cbf05db8fda8d9f1155e23054eef268bb9f9f57fe887a5da5588013a6b642bd500d678671ceaae7f0c22ff7ea0ce48c055a65b2f7f8ee65ec7c00306d75efb2cb5b3385c18e05b9c9645f62b5bc363cfe8a363d77e9eedc2d7c936b5e880c30a17abdb2b33059302ab5182a6e04bc9f3a16121c86463c7a66398d7e6d98d62152429c149f4d7fbeb109eb19e8f36208d977dde6cdefd61ae2747ffc83812035a4427ab513fb0a7402adda1d3bd6aa5745cbea133a835006455aafb239b497e3b40533e8b3120053bfc2b296441fe2b2829dfbf79c325b7648981f87a1383efeb137d7e4fee9bd0a3a34a76334ee94ce7436454c99d6471c5c4e9fc937f62553e32dda49709d3873416be8da8430d0635ae982f999d95e04248504de9bb769d786a8eba4766ef18e528765dcaca0209ec27c713aac7d8da406d3f7db7812c8dfb9268b3a342b252f810e5461ac40e8fecc182898f7aa5398fe4867eb9a25c01f053843ce76c013c24a6b8861c60629e803da6b8d09e182013e417a0f5a504b1416707b9e5dfe9f2ef957487cf3cb477f0ff8347521325be19f7d382080e78764b35eccc0ab73b15179881d3cfb246033bfcac13ebdc153b3426694a40325a49f50d7c1f519b733b4b8544fea238fa4528bb654fef724447337888011e5", 0x2000, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x80}}}}})
open(&(0x7f0000002280)='./file0/file0\x00', 0xf0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000})
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

2m27.631245284s ago: executing program 6 (id=5652):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001010000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8)
creat(&(0x7f0000000000)='./file0\x00', 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmmsg$unix(r6, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="cb87843d", 0x87cb}], 0x1, 0x0, 0x0, 0x40000}}], 0x1, 0x20005000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18)
connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r11, &(0x7f0000000000), 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)

2m27.604799864s ago: executing program 72 (id=5652):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001010000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8)
creat(&(0x7f0000000000)='./file0\x00', 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmmsg$unix(r6, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="cb87843d", 0x87cb}], 0x1, 0x0, 0x0, 0x40000}}], 0x1, 0x20005000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18)
connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r11, &(0x7f0000000000), 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)

2m27.164387806s ago: executing program 9 (id=5654):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

2m27.143806246s ago: executing program 9 (id=5655):
socket$inet(0x2, 0x5, 0xf8c)
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00), 0x3, 0x5f5, &(0x7f0000001040)="$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")
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102020000082505a1a440000102030109025c0002010030ea0904000001ffffffff000000000105240005000d240f0101010000040002000706241a000010090581030800040d420904010000020d00000904010102020d0000090582020002090900090503020004060304"], &(0x7f00000011c0)={0x0, 0x0, 0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="050f1c1001025572210ff865310e0ce48aa4400001050300060c100a07200000000f0f03002b0e34e11cb570cafa98ae1f9fc44a9478a8817ae9fde94ec24adf5d9d8c0e5e32ca4671e734a754f7427df76dbcc13a00d4b8a30aec93a49cffab2d7eb8c1359511b27541f7391a3e3cd86e980000000000000034bf000000"]})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000a40)={0x3, 0x0, [{0xeeee0000, 0xe9, &(0x7f0000000940)=""/233}, {0x4, 0x5a, &(0x7f00000006c0)=""/90}, {0x100000, 0x2b, &(0x7f0000000500)=""/43}]})
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94)
unshare(0x64000600)
renameat2(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4)
socket$key(0xf, 0x3, 0x2)
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)
syz_emit_ethernet(0x4b, &(0x7f00000000c0)=ANY=[@ANYBLOB="476e97303b0700000000000008004500003d0000000000119078000000000000000000004e2200299078040000000000000000009d9e6dbd39d9859e6d414cee66a73191a5abbd177c05a6"], 0x0)

2m23.955325792s ago: executing program 9 (id=5671):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20)
r3 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @empty, 0x8}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2m23.163131658s ago: executing program 9 (id=5675):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000)

2m22.507340277s ago: executing program 9 (id=5679):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f40), 0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)

2m22.442270936s ago: executing program 73 (id=5679):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f40), 0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)

2m15.757609902s ago: executing program 4 (id=5713):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @empty, 0x8}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2m14.647840943s ago: executing program 4 (id=5715):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @rand_addr=0x64010102}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180))
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
close(0x3)

2m14.219965115s ago: executing program 4 (id=5717):
r0 = getpid()
r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_user(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27)
write$selinux_access(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='system_u:object_r::ing_exec_t:s0 unconfined 0'], 0x41)
r4 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TCSBRK(r5, 0x5409, 0xf)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000040)={0x2, 0x5, 0x0, 0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10)
syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff01"], 0x0)
process_vm_readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/138, 0x8a}, {&(0x7f00000000c0)=""/181, 0xb5}, {&(0x7f0000000180)=""/171, 0xab}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f00000002c0)=""/123, 0x7b}, {&(0x7f0000000340)=""/99, 0x63}], 0x6, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
fspick(r4, &(0x7f0000000b00)='./file0\x00', 0x1)

2m11.012329741s ago: executing program 4 (id=5726):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @empty, 0x8}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2m9.158271999s ago: executing program 4 (id=5732):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
epoll_create(0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000007000000060000000c00000000000000", @ANYRES32, @ANYBLOB="00002200800000000000000009000200e1457f83", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffd)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20)
unshare(0x62040200)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0x10001, 0x0, 0xf0})
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0xee01, r7, 0xffffffffffffffff)
getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))

2m9.015789177s ago: executing program 4 (id=5733):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1b7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r5, 0x0, 0x8, 0xc, 0xffffff97, 0x18, @local, @loopback={0x0, 0x460c6}, 0x8000, 0x0, 0x1, 0xfffffffc}})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10)
socket(0xa, 0x2400000001, 0x0)
ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000040)={0x3, 0x200, 0xfffffff7, 0x5, 0xf28, 0x7})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

2m8.946762796s ago: executing program 74 (id=5733):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1b7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r5, 0x0, 0x8, 0xc, 0xffffff97, 0x18, @local, @loopback={0x0, 0x460c6}, 0x8000, 0x0, 0x1, 0xfffffffc}})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10)
socket(0xa, 0x2400000001, 0x0)
ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000040)={0x3, 0x200, 0xfffffff7, 0x5, 0xf28, 0x7})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

35.394945091s ago: executing program 8 (id=6194):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001800010025bd7000fbdbdf250a140007ff00fe02006c000008001e80"], 0x4c}}, 0x4004004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000e6ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)

32.678406746s ago: executing program 8 (id=6201):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYBLOB="01000000feffff7f1c0012000c0001"], 0x3c}}, 0x0)

31.61315289s ago: executing program 8 (id=6209):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
socket$packet(0x11, 0x3, 0x300)
timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0)
rt_sigtimedwait(&(0x7f0000000640)={[0x68]}, 0x0, 0x0, 0x8)

30.350850736s ago: executing program 8 (id=6212):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20)
r3 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @empty, 0x8}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

29.126251232s ago: executing program 8 (id=6215):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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")
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x1}]}]}}, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc5e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
chown(&(0x7f0000000100)='./file1\x00', r6, r7)

28.467490561s ago: executing program 8 (id=6222):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
socket$packet(0x11, 0x3, 0x300)
timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0)
rt_sigtimedwait(&(0x7f0000000640)={[0x68]}, 0x0, 0x0, 0x8)

28.467302341s ago: executing program 75 (id=6222):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
socket$packet(0x11, 0x3, 0x300)
timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0)
rt_sigtimedwait(&(0x7f0000000640)={[0x68]}, 0x0, 0x0, 0x8)

8.367266441s ago: executing program 3 (id=6314):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000a000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setregid(0xee00, 0xee00)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x4, 0x0, 0x0, 0xc, 0x4, 0xd, 0x3, 0xb8, 0x4, 0x2, 0x5, 0x0, 0x8, 0x1, 0x3, 0x9, 0x6d, 0x81, '\x00', 0x2, 0xfff})
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x200, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x35, 0xff}, {0x20, 0xa, 0xfc}, {0x0, 0x0, 0x6, '\x00', 0x7}, {0x20}, {0x2, 0x2, 0x7}, {0x0, 0x0, 0x8}, {0x0, 0x1, 0x2}, {0x0, 0x0, 0xfe, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0xfc}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x0, 0x75, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0x20}, {}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x0, '\x00', 0x1}, {0x0, 0xfc}]}})
syz_open_procfs(r1, &(0x7f0000000240)='fdinfo\x00')
syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)

8.116564745s ago: executing program 3 (id=6319):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
dup2(r0, r0)
r1 = getpid()
r2 = gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
rt_tgsigqueueinfo(r1, r2, 0x2d, &(0x7f0000000080)={0x0, 0x0, 0x2})

7.342975655s ago: executing program 3 (id=6322):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee8, 0x8031, 0xffffffffffffffff, 0xffc0d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1900000004"], 0x48)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read(r2, &(0x7f00000000c0)=""/226, 0xe2)
read$watch_queue(r2, &(0x7f0000002d40)=""/4104, 0x1008)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='ext4_ext_rm_idx\x00', r2, 0x0, 0x2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)}], 0x1}, 0x20000044)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)=0x10005)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8080)
ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000040)=0x41)

5.716111646s ago: executing program 3 (id=6332):
syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0xff2e)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0)

5.224810292s ago: executing program 0 (id=6335):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
setpriority(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000007000000073112273a7efa"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003c7"], 0x0, 0x0}, 0x0)

4.189321776s ago: executing program 3 (id=6337):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x9, &(0x7f0000000840)=@framed={{}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x82000003}, @map_fd={0x18, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001280), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000180)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000c2}, 0x800c016)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg2\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r9], 0x20}}, 0x40000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
splice(r10, 0x0, r12, 0x0, 0x7, 0x9)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000780)={[0x2, 0x8, 0x7, 0x1, 0x80000001, 0x2, 0x0, 0x7, 0x2, 0x3, 0xb627, 0x4, 0x3, 0xb, 0x5, 0x5], 0xffff1000, 0x90691})
write$P9_RWRITE(r12, &(0x7f0000000040)={0xb}, 0x11000)
getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000180)={<r13=>0x0, @empty, @multicast1}, &(0x7f0000000200)=0xc)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', r13, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x3, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @jmp={0x5, 0x1, 0x3, 0x8, 0x8, 0x0, 0xfffffffffffffffc}], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x52, &(0x7f0000000300)=""/82, 0x40f00, 0x0, '\x00', r13, @fallback=0x13, r11, 0x8, &(0x7f0000000380)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x4, 0x1ff, 0x9}, 0x10, 0xffffffffffffffff, r12, 0x6, &(0x7f0000000400)=[r11, r12, r12], &(0x7f00000004c0)=[{0x1, 0x5, 0x6, 0x6}, {0x2, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xe, 0xb}, {0x5, 0x1, 0xe, 0x6}, {0x0, 0x3, 0x6}, {0x4, 0x2, 0x1, 0x3}], 0x10, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

3.944400418s ago: executing program 1 (id=6340):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

3.928150799s ago: executing program 1 (id=6341):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000a000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setregid(0xee00, 0xee00)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x4, 0x0, 0x0, 0xc, 0x4, 0xd, 0x3, 0xb8, 0x4, 0x2, 0x5, 0x0, 0x8, 0x1, 0x3, 0x9, 0x6d, 0x81, '\x00', 0x2, 0xfff})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x200, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x35, 0xff}, {0x20, 0xa, 0xfc}, {0x0, 0x0, 0x6, '\x00', 0x7}, {0x20}, {0x2, 0x2, 0x7}, {0x0, 0x0, 0x8}, {0x0, 0x1, 0x2}, {0x0, 0x0, 0xfe, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0xfc}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x0, 0x75, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0x20}, {}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x0, '\x00', 0x1}, {0x0, 0xfc}]}})
syz_open_procfs(r1, &(0x7f0000000240)='fdinfo\x00')
syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)

3.81593195s ago: executing program 1 (id=6342):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x10c00, &(0x7f0000000100)=ANY=[], 0x3, 0x150f, &(0x7f0000000780)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0x0, 0x238, 0xfeffffff, 0x0, 0x0, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @broadcast, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x238}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffdfffb702000008000000b70200000400000085000000060000009a00000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x34, r7, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080)

3.295983807s ago: executing program 2 (id=6344):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x10)
fstat(r1, 0x0)

3.281664607s ago: executing program 2 (id=6345):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000540)={{r2}, "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"})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000200)="f36360c5d1339e4a7b42c55e6367066e", 0x10)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000340)=""/166, 0xa6, 0x10023, &(0x7f0000000180)={0xa, 0x4e23, 0x4, @remote, 0x74}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a001f"], 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

3.199986148s ago: executing program 2 (id=6346):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1200000, &(0x7f0000000400)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@mblk_io_submit}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {}, [], {}, [{0x8, 0x5}, {}]}, 0x34, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x1f, 0x3, &(0x7f0000000340)="14cc09"})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1294, 0x1320, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x9ad, 0xfb, 0x1, {0x22, 0x161}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x6, 0x5}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xf, 0x51, 0xec, 0x40}, 0x26, &(0x7f0000000080)={0x5, 0xf, 0x26, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x4, 0x8, 0x3, 0xf}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2c, 0x41, 0x77, 0x389, 0x58}, @wireless={0xb, 0x10, 0x1, 0x0, 0x3, 0xfb, 0x8, 0xd}]}, 0x1, [{0x28, &(0x7f0000000140)=@string={0x28, 0x3, "04fce3cf65cadeaf135f863c2c353952d25e9d816c858867587c54283bf4392dc25b132ccdd8"}}]})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "2a3b8902"}]}}, 0x0}, 0x0)

2.924214472s ago: executing program 1 (id=6350):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x85, 0x3, 0x1, {0x22, 0x9}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x1, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x7)
syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="2ef2dd050080000048b84441000000000000b9130b00000f320f21f8350000ce00010123f836362e6726af4b0f20c1350e000000440f22c0b805000000b9009800000f01d97c0f01c9c947338c01c4c40f79d226660f013b", 0x58}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x202402, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@orlov}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x0, 0x45d, &(0x7f00000009c0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_usb_control_io(r3, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x40, 0xf, 0xa, {0xa, 0x23, "ee5094f0ae9f9dff"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.123352722s ago: executing program 0 (id=6351):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eeb1948bf42bc7fc2cb274849c9524154fa24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a8684853abf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000400000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f500000010000000000944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a808000000000000000562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844892f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

2.120881592s ago: executing program 0 (id=6352):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000a000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setregid(0xee00, 0xee00)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x4, 0x0, 0x0, 0xc, 0x4, 0xd, 0x3, 0xb8, 0x4, 0x2, 0x5, 0x0, 0x8, 0x1, 0x3, 0x9, 0x6d, 0x81, '\x00', 0x2, 0xfff})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x200, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x35, 0xff}, {0x20, 0xa, 0xfc}, {0x0, 0x0, 0x6, '\x00', 0x7}, {0x20}, {0x2, 0x2, 0x7}, {0x0, 0x0, 0x8}, {0x0, 0x1, 0x2}, {0x0, 0x0, 0xfe, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0xfc}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x0, 0x75, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0x20}, {}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x0, '\x00', 0x1}, {0x0, 0xfc}]}})
syz_open_procfs(r1, &(0x7f0000000240)='fdinfo\x00')
syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)

2.005439054s ago: executing program 0 (id=6355):
exit(0x1ff)

1.147916555s ago: executing program 0 (id=6363):
syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0)

1.147575285s ago: executing program 3 (id=6364):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x18007, &(0x7f0000000100)={[{@abort}, {@bh}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@minixdf}, {@nobh}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000900)=[{0x6, 0x0, 0x7, 0xec}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
r4 = epoll_create1(0x0)
r5 = timerfd_create(0x0, 0x0)
timerfd_settime(r5, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0)
epoll_pwait(r4, &(0x7f00000000c0)=[{}], 0x1, 0x7fffffff, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000040)={0x80002003})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000080))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000002140), 0x64, 0x50b, &(0x7f0000002180)="$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")
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a000000632900000300000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000280)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000580), &(0x7f0000000180)=""/11, 0x2}, 0x20)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0)

1.147140125s ago: executing program 7 (id=6365):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)

1.104581205s ago: executing program 7 (id=6366):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000a000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setregid(0xee00, 0xee00)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x4, 0x0, 0x0, 0xc, 0x4, 0xd, 0x3, 0xb8, 0x4, 0x2, 0x5, 0x0, 0x8, 0x1, 0x3, 0x9, 0x6d, 0x81, '\x00', 0x2, 0xfff})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x200, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x35, 0xff}, {0x20, 0xa, 0xfc}, {0x0, 0x0, 0x6, '\x00', 0x7}, {0x20}, {0x2, 0x2, 0x7}, {0x0, 0x0, 0x8}, {0x0, 0x1, 0x2}, {0x0, 0x0, 0xfe, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0xfc}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x0, 0x75, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0x20}, {}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x0, '\x00', 0x1}, {0x0, 0xfc}]}})
syz_open_procfs(r1, &(0x7f0000000240)='fdinfo\x00')
syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)

624.759112ms ago: executing program 1 (id=6367):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896) (fail_nth: 1)

521.368593ms ago: executing program 2 (id=6368):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000280)={[{@utf8}, {@rodir}, {@uni_xlateno}, {@fat=@check_strict}, {@utf8no}, {@uni_xlateno}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@uni_xlate}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_win95}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@discard}]}, 0x1, 0x369, &(0x7f0000000700)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000280)={[{@utf8}, {@rodir}, {@uni_xlateno}, {@fat=@check_strict}, {@utf8no}, {@uni_xlateno}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@uni_xlate}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_win95}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@discard}]}, 0x1, 0x369, &(0x7f0000000700)="$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") (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async)
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) (async)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) (async)

482.554944ms ago: executing program 2 (id=6369):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
ioctl$TIOCL_SETSEL(r2, 0x560d, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x23, 0x101}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$USBDEVFS_GETDRIVER(r9, 0x8008550e, &(0x7f0000000180)={0x7, "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"})
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r6, r10, 0x0, 0x20000023896)

481.938473ms ago: executing program 7 (id=6370):
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
umount2(&(0x7f0000000180)='./file0/file0/file0/file0/file0\x00', 0x1)
close_range(r1, 0xffffffffffffffff, 0x0)

400.006925ms ago: executing program 2 (id=6371):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000100)={0x1, 0xffffffff, 0x1, 0x6, 0x3, 0x8})
r2 = syz_usb_connect$uac1(0x4, 0xb7, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x1, 0xa0, 0xbc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xc}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x1, 0x1, 0x7, 0x8, 0xab}, @selector_unit={0x8, 0x24, 0x5, 0x2, 0x6, "c26d6b"}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x1, "95"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0x0, "14f9d3a8048c19"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1, 0x1}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xfa, 0x4, 0x3, 0xf2, "2090f2478a1b09"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x9, 0x9, {0x7, 0x25, 0x1, 0x42, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x9, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x10, 0x8, {0x7, 0x25, 0x1, 0x82, 0x0, 0x6}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x4c, 0x4, 0x3, 0x8, 0x6}, 0x38, &(0x7f0000000280)={0x5, 0xf, 0x38, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x2, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xf3, 0x7, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x3, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "85ed51668f655e89fa82efcb9d4e4e22"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x4}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44e}}]})
syz_usb_control_io$uac1(r2, &(0x7f0000000440)={0x14, &(0x7f00000003c0)={0x0, 0x23, 0x66, {0x66, 0x31, "a76cb2c075a3e125819cd0da15d046cd14a5f583b47507ac0999cea8be257381d0c9f6045f058e1f086e00b46229ffaf08ac4c368e7110e5fb1ecc1bd2fe08e1018fd3ddd78cec3df8c166acd9b4da748896811f5b0aebdce9436ae2d3ba82a2b8d32cba"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x0, 0x16, 0x8c, "20760d56ce83d6036ef841cd0fd698dc9109160e841cbde76ff56f3179e210c3982edd0295279df2130cf98b6946e8dfe2111ac5426047e66fab2fa783ea971eeb2d0ffc2f07c0fd811704709a1a5ba3d52d935d2492f3272544f20958ed75b7d88c25f537dd758f59d40d7f9ca139f04ed876b835504bb6153639097c19a39e58f6f6a136792723e41f9aa6"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x81, 0x3, "8f3578"}, &(0x7f0000000640)={0x20, 0x82, 0x1, 'V'}, &(0x7f0000000680)={0x20, 0x83, 0x2, "e0be"}, &(0x7f00000006c0)={0x20, 0x84, 0x3, "2ce09a"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "2b488b"}})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f00000000c0)=ANY=[@ANYBLOB='uni_xlate=1,rodir,shortname=mixed,utf8=0,iocharset=iso8859-15,flush,uni_xlate=0,shortname=win95,discard,codepage=1250,errors=remount-ro,uni_xlate=0,utf8=0,utf8=00,uni_xla4e=1,\x00'], 0x3, 0x284, &(0x7f00000008c0)="$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")
flock(0xffffffffffffffff, 0x5)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3, &(0x7f0000000540), 0x1, 0x4a1, &(0x7f0000000000)="$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")
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

200.446048ms ago: executing program 7 (id=6372):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close_range(r0, r3, 0x0)

187.350388ms ago: executing program 1 (id=6373):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18)
link(0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
exit(0x1ff)

177.053167ms ago: executing program 0 (id=6374):
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
umount2(&(0x7f0000000180)='./file0/file0/file0/file0/file0\x00', 0x1)
close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1)

123.018939ms ago: executing program 7 (id=6375):
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0)
mount$incfs(&(0x7f0000000240)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000280)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000300), 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="726c6f675f77616b65ebfe5f636e743d303030303030303030305e78549dc8cc4c0c30322d7375626a5f747970030000002c6f626a5f726f6c653d2c636f6e746578743d73797361646d5f752c7569643d2df75d510a8d7261de9b32025f0bdb52bb92d2b54027557454c74727832a00d5642a01e13275c37e3e3f7775c9a4a0665283fb79ae4c0fd26b5698d5faab94b0036ec2088838891f0005b0dadbc56a5ffc74b827a96277f2eaec3cfe1ef67a0af022d2152d55b1b7d6d6a1328fae490297c80cc0e28d60f40199dcbea75a1f6b163be1ff66b7", @ANYRESDEC, @ANYBLOB=',\x00'])
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0xfffff000)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x23, 0x14}, 0xc)
copy_file_range(r1, 0x0, r0, &(0x7f00000000c0)=0x4, 0x78e1, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085a58d1acf000100000000000000647077801bd115bc865afb310daf221c10e5ace09adc020805d170bfd16707bbffad1481"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1c, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
listen(r5, 0x0)
connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x18, 0x448d0}}], 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r8, r8)

0s ago: executing program 7 (id=6376):
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfdc5e000)
socketpair$unix(0x1, 0x2d8e86b67711ce56, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
mkdir(&(0x7f0000000040)='./bus\x00', 0x149)
mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x1200810, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x3ae4c21, &(0x7f0000000440)={[{@verity_require}]})
accept4$unix(r2, &(0x7f0000000300)=@abs, &(0x7f0000000280)=0x6e, 0x0)
sendmmsg$unix(r2, &(0x7f0000000380), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x1}, 0x18)
ptrace$getregset(0x4204, r0, 0x6, 0x0)
io_setup(0x8, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x3f, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@oldalloc}, {@errors_remount}, {@init_itable}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$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")
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000400)={0x10002000, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

oot:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1963.989841][T21841] usb 1-1: new low-speed USB device number 92 using dummy_hcd
[ 1964.649476][T21841] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[ 1964.706903][T21841] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[ 1964.734286][T23005] loop8: detected capacity change from 0 to 1024
[ 1964.740708][T21841] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1964.771993][T23005] EXT4-fs: Ignoring removed nobh option
[ 1964.777586][T23005] EXT4-fs: Ignoring removed bh option
[ 1964.783256][T21841] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[ 1964.809554][T21841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 is Bulk; changing to Interrupt
[ 1964.810676][   T28] audit: type=1326 audit(2220.845:12598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.1.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1964.849958][T21841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1964.860548][T23005] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1964.873257][T23007] loop3: detected capacity change from 0 to 2048
[ 1964.879889][T23007] EXT4-fs: Ignoring removed oldalloc option
[ 1964.890357][T21841] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[ 1964.910621][   T28] audit: type=1326 audit(2220.845:12599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.1.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1964.934939][   T28] audit: type=1326 audit(2220.885:12600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.1.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1964.956701][T23007] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1964.958852][   T28] audit: type=1326 audit(2220.885:12601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.1.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1964.969904][T23007] EXT4-fs error (device loop3): ext4_ext_precache:627: inode #2: comm syz.3.5871: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[ 1964.990379][   T28] audit: type=1326 audit(2220.885:12602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.1.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1965.008246][T21837] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1092 with max blocks 40 with error 28
[ 1965.029993][T21841] usb 1-1: string descriptor 0 read error: -22
[ 1965.030050][T21841] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[ 1965.043680][T23005] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1965.053454][T21841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1965.059858][   T28] audit: type=1326 audit(2220.885:12603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.1.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1965.067214][T21841] usb 1-1: config 0 descriptor??
[ 1965.075208][   T28] audit: type=1326 audit(2220.885:12604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.1.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1965.100266][T21837] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 1965.100266][T21837] 
[ 1965.109020][   T28] audit: type=1326 audit(2220.885:12605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.1.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1965.126626][T21841] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1965.136316][   T28] audit: type=1326 audit(2220.885:12606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23008 comm="syz.1.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1965.158583][T21837] EXT4-fs (loop2): Total free blocks count 0
[ 1965.193884][T22201] EXT4-fs (loop3): unmounting filesystem.
[ 1965.200701][T21837] EXT4-fs (loop2): Free/Dirty block details
[ 1965.206804][T21837] EXT4-fs (loop2): free_blocks=0
[ 1965.211932][T21837] EXT4-fs (loop2): dirty_blocks=43
[ 1965.217111][T21837] EXT4-fs (loop2): Block reservation details
[ 1965.223899][T21837] EXT4-fs (loop2): i_reserved_data_blocks=43
[ 1965.233258][T22225] EXT4-fs (loop2): unmounting filesystem.
[ 1965.243639][T21841] hub: probe of 1-1:0.0 failed with error -5
[ 1965.269813][T23022] loop3: detected capacity change from 0 to 256
[ 1965.282564][T23022] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[ 1965.299708][T21841] hid-generic 0000:0003:0000.0070: item fetching failed at offset 0/2
[ 1965.313336][T21841] hid-generic: probe of 0000:0003:0000.0070 failed with error -22
[ 1965.357756][T23027] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1965.377754][T23027] device bridge_slave_0 left promiscuous mode
[ 1965.397537][T23027] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1965.467047][T23027] device bridge_slave_1 left promiscuous mode
[ 1965.474179][T23027] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1965.481782][  T328] usb 1-1: USB disconnect, device number 92
[ 1965.575846][T23033] FAULT_INJECTION: forcing a failure.
[ 1965.575846][T23033] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1965.588942][T23033] CPU: 0 PID: 23033 Comm: syz.3.5876 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 1965.598862][T23033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 1965.608925][T23033] Call Trace:
[ 1965.612210][T23033]  <TASK>
[ 1965.615148][T23033]  __dump_stack+0x21/0x24
[ 1965.619495][T23033]  dump_stack_lvl+0xee/0x150
[ 1965.624097][T23033]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1965.629134][T23033]  dump_stack+0x15/0x24
[ 1965.633302][T23033]  should_fail_ex+0x3d4/0x520
[ 1965.638014][T23033]  should_fail+0xb/0x10
[ 1965.642177][T23033]  should_fail_usercopy+0x1a/0x20
[ 1965.647208][T23033]  _copy_from_user+0x1e/0xc0
[ 1965.651804][T23033]  ___sys_recvmsg+0x12b/0x510
[ 1965.656497][T23033]  ? __sys_recvmsg+0x270/0x270
[ 1965.661274][T23033]  ? security_file_permission+0x94/0xb0
[ 1965.666829][T23033]  ? __fget_files+0x2d5/0x330
[ 1965.671524][T23033]  ? __fdget+0x19c/0x220
[ 1965.675781][T23033]  __x64_sys_recvmsg+0x1ed/0x2c0
[ 1965.680739][T23033]  ? __cfi___x64_sys_recvmsg+0x10/0x10
[ 1965.686222][T23033]  ? fpregs_assert_state_consistent+0xb1/0xe0
[ 1965.692321][T23033]  x64_sys_call+0x75/0x9a0
[ 1965.696727][T23033]  do_syscall_64+0x4c/0xa0
[ 1965.701123][T23033]  ? clear_bhb_loop+0x15/0x70
[ 1965.705774][T23033]  ? clear_bhb_loop+0x15/0x70
[ 1965.710423][T23033]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1965.716291][T23033] RIP: 0033:0x7f349118e969
[ 1965.720680][T23033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1965.740270][T23033] RSP: 002b:00007f3491f29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1965.748671][T23033] RAX: ffffffffffffffda RBX: 00007f34913b6160 RCX: 00007f349118e969
[ 1965.756617][T23033] RDX: 0000000040000002 RSI: 0000200000000100 RDI: 0000000000000004
[ 1965.764561][T23033] RBP: 00007f3491f29090 R08: 0000000000000000 R09: 0000000000000000
[ 1965.772510][T23033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1965.780466][T23033] R13: 0000000000000000 R14: 00007f34913b6160 R15: 00007ffcf38d7ff8
[ 1965.788434][T23033]  </TASK>
[ 1965.794335][T22321] EXT4-fs (loop8): unmounting filesystem.
[ 1967.429594][T23045] loop8: detected capacity change from 0 to 512
[ 1967.519888][T23045] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1967.705474][T23045] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[ 1967.796196][T23040] loop2: detected capacity change from 0 to 8192
[ 1967.807336][T23045] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.5880: invalid indirect mapped block 2683928664 (level 1)
[ 1967.967697][T23045] EXT4-fs (loop8): Remounting filesystem read-only
[ 1968.106981][T23045] EXT4-fs (loop8): 1 truncate cleaned up
[ 1968.395051][T23045] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1968.413809][T23055] tmpfs: Unknown parameter 'nolazytime1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[ 1968.732392][T22321] EXT4-fs (loop8): unmounting filesystem.
[ 1968.784664][  T328] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1968.910198][   T28] kauditd_printk_skb: 70 callbacks suppressed
[ 1968.910224][   T28] audit: type=1400 audit(2224.945:12677): avc:  denied  { bind } for  pid=23060 comm="syz.1.5885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1969.019336][   T28] audit: type=1326 audit(2224.995:12678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23060 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1969.051603][   T28] audit: type=1326 audit(2224.995:12679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23060 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1969.075212][   T28] audit: type=1326 audit(2225.065:12680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23060 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1969.101326][   T28] audit: type=1326 audit(2225.065:12681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23060 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1969.177916][T23072] syz.8.5884[23072] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1969.178205][T23072] syz.8.5884[23072] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1969.199642][T23072] loop8: detected capacity change from 0 to 128
[ 1970.699745][   T28] audit: type=1326 audit(2225.065:12682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23060 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1970.732081][T23071] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1970.738698][   T28] audit: type=1326 audit(2225.065:12683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23060 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1970.767434][T23071] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64
[ 1970.776658][   T28] audit: type=1326 audit(2225.065:12684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23060 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1970.899649][T23076] loop2: detected capacity change from 0 to 512
[ 1970.907219][T23076] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1970.938269][T23076] EXT4-fs (loop2): 1 truncate cleaned up
[ 1970.943988][T23076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1971.004435][  T328] usb 1-1: device not accepting address 93, error -71
[ 1971.014074][T22225] EXT4-fs (loop2): unmounting filesystem.
[ 1973.631382][  T293] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1973.841405][  T293] usb 2-1: Using ep0 maxpacket: 16
[ 1973.848841][  T293] usb 2-1: New USB device found, idVendor=056a, idProduct=0032, bcdDevice= 0.00
[ 1973.885712][  T293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1973.899910][  T293] usb 2-1: config 0 descriptor??
[ 1974.377549][   T28] kauditd_printk_skb: 69 callbacks suppressed
[ 1974.436934][   T28] audit: type=1400 audit(2230.345:12753): avc:  denied  { create } for  pid=23099 comm="syz.2.5896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1978.934565][T23106] loop8: detected capacity change from 0 to 512
[ 1978.971391][  T293] wacom 0003:056A:0032.0071: unknown main item tag 0x5
[ 1978.978304][  T293] wacom 0003:056A:0032.0071: item fetching failed at offset 5/9
[ 1978.986165][  T293] wacom 0003:056A:0032.0071: parse failed
[ 1978.992059][  T293] wacom: probe of 0003:056A:0032.0071 failed with error -22
[ 1979.049887][  T293] usb 2-1: USB disconnect, device number 15
[ 1980.421263][   T28] audit: type=1326 audit(2236.455:12754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23120 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1980.491335][   T28] audit: type=1326 audit(2236.495:12755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23120 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1980.649197][T23138] loop8: detected capacity change from 0 to 16
[ 1980.661343][   T28] audit: type=1326 audit(2236.495:12756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23120 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1980.704636][   T28] audit: type=1326 audit(2236.495:12757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23120 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1980.727839][   T28] audit: type=1326 audit(2236.495:12758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23120 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1980.761303][T23138] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1980.781319][   T28] audit: type=1326 audit(2236.495:12759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23120 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1980.824479][   T28] audit: type=1326 audit(2236.495:12760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23120 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1980.865302][T23138] device vlan0 entered promiscuous mode
[ 1980.922434][   T28] audit: type=1326 audit(2236.495:12761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23120 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc898d8d37c code=0x7ffc0000
[ 1980.987032][   T28] audit: type=1326 audit(2236.585:12762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23120 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc898d8d41f code=0x7ffc0000
[ 1981.010203][   T28] audit: type=1326 audit(2236.585:12763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23120 comm="syz.8.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1981.045526][T23113] loop2: detected capacity change from 0 to 40427
[ 1981.053756][T23113] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[ 1981.060900][T23113] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1981.072021][T23113] F2FS-fs (loop2): invalid crc value
[ 1981.091149][T23113] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1981.148041][T23113] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1981.162883][T23113] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1981.173915][T23158] loop8: detected capacity change from 0 to 256
[ 1981.202107][T23158] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[ 1981.332098][T21837] kworker/u4:1: attempt to access beyond end of device
[ 1981.332098][T21837] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1982.031559][T23182] syz.1.5919[23182] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1982.031840][T23182] syz.1.5919[23182] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1982.394776][T23191] loop2: detected capacity change from 0 to 256
[ 1982.412729][T23191] exfat: Deprecated parameter 'utf8'
[ 1982.418078][T23191] exfat: Deprecated parameter 'utf8'
[ 1982.427875][T23191] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[ 1982.930939][T23203] loop8: detected capacity change from 0 to 8192
[ 1982.976901][T23209] FAULT_INJECTION: forcing a failure.
[ 1982.976901][T23209] name failslab, interval 1, probability 0, space 0, times 0
[ 1982.999497][T23209] CPU: 0 PID: 23209 Comm: syz.1.5927 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 1983.009419][T23209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 1983.019484][T23209] Call Trace:
[ 1983.022766][T23209]  <TASK>
[ 1983.025711][T23209]  __dump_stack+0x21/0x24
[ 1983.030059][T23209]  dump_stack_lvl+0xee/0x150
[ 1983.034660][T23209]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1983.039698][T23209]  dump_stack+0x15/0x24
[ 1983.043868][T23209]  should_fail_ex+0x3d4/0x520
[ 1983.048559][T23209]  ? prepare_creds+0x2f/0x640
[ 1983.053244][T23209]  __should_failslab+0xac/0xf0
[ 1983.058017][T23209]  should_failslab+0x9/0x20
[ 1983.062534][T23209]  kmem_cache_alloc+0x3b/0x330
[ 1983.067308][T23209]  ? __cfi_make_kgid+0x10/0x10
[ 1983.072080][T23209]  prepare_creds+0x2f/0x640
[ 1983.076593][T23209]  __sys_setregid+0xfd/0x640
[ 1983.081190][T23209]  ? __bpf_trace_sys_enter+0x62/0x70
[ 1983.086485][T23209]  __x64_sys_setregid+0x5a/0x70
[ 1983.091343][T23209]  x64_sys_call+0x63a/0x9a0
[ 1983.095853][T23209]  do_syscall_64+0x4c/0xa0
[ 1983.100266][T23209]  ? clear_bhb_loop+0x15/0x70
[ 1983.104936][T23209]  ? clear_bhb_loop+0x15/0x70
[ 1983.109606][T23209]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1983.115495][T23209] RIP: 0033:0x7fd39598e969
[ 1983.119902][T23209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1983.139497][T23209] RSP: 002b:00007fd3968b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072
[ 1983.147907][T23209] RAX: ffffffffffffffda RBX: 00007fd395bb5fa0 RCX: 00007fd39598e969
[ 1983.155872][T23209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1983.163832][T23209] RBP: 00007fd3968b2090 R08: 0000000000000000 R09: 0000000000000000
[ 1983.171795][T23209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1983.179760][T23209] R13: 0000000000000000 R14: 00007fd395bb5fa0 R15: 00007ffc96c59f38
[ 1983.187732][T23209]  </TASK>
[ 1983.391762][T23215] loop3: detected capacity change from 0 to 256
[ 1983.415850][T23215] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[ 1983.506229][T23219] loop8: detected capacity change from 0 to 512
[ 1983.571631][T23219] EXT4-fs: Ignoring removed orlov option
[ 1983.598081][T23219] ext4: Unknown parameter 'obj_type'
[ 1983.605662][T23225] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5929'.
[ 1984.831750][T23231] loop2: detected capacity change from 0 to 512
[ 1984.842133][T23231] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1984.964456][T23231] EXT4-fs (loop2): 1 truncate cleaned up
[ 1984.970289][T23231] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1985.050700][T23235] loop3: detected capacity change from 0 to 512
[ 1985.105681][T23241] FAULT_INJECTION: forcing a failure.
[ 1985.105681][T23241] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1985.693905][T23241] CPU: 0 PID: 23241 Comm: syz.8.5932 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 1985.696482][T23240] 9pnet_fd: Insufficient options for proto=fd
[ 1985.703836][T23241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 1985.703853][T23241] Call Trace:
[ 1985.703860][T23241]  <TASK>
[ 1985.703868][T23241]  __dump_stack+0x21/0x24
[ 1985.703898][T23241]  dump_stack_lvl+0xee/0x150
[ 1985.703921][T23241]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1985.740067][T23241]  dump_stack+0x15/0x24
[ 1985.744220][T23241]  should_fail_ex+0x3d4/0x520
[ 1985.748896][T23241]  should_fail+0xb/0x10
[ 1985.753049][T23241]  should_fail_usercopy+0x1a/0x20
[ 1985.758068][T23241]  _copy_from_user+0x1e/0xc0
[ 1985.762651][T23241]  __sys_bpf+0x277/0x780
[ 1985.766893][T23241]  ? bpf_link_show_fdinfo+0x320/0x320
[ 1985.772265][T23241]  ? fpregs_restore_userregs+0x128/0x260
[ 1985.777895][T23241]  __x64_sys_bpf+0x7c/0x90
[ 1985.782309][T23241]  x64_sys_call+0x488/0x9a0
[ 1985.786803][T23241]  do_syscall_64+0x4c/0xa0
[ 1985.791212][T23241]  ? clear_bhb_loop+0x15/0x70
[ 1985.795882][T23241]  ? clear_bhb_loop+0x15/0x70
[ 1985.800565][T23241]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1985.806465][T23241] RIP: 0033:0x7fc898d8e969
[ 1985.810874][T23241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1985.830472][T23241] RSP: 002b:00007fc899c79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1985.838884][T23241] RAX: ffffffffffffffda RBX: 00007fc898fb6160 RCX: 00007fc898d8e969
[ 1985.846848][T23241] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a
[ 1985.854808][T23241] RBP: 00007fc899c79090 R08: 0000000000000000 R09: 0000000000000000
[ 1985.862770][T23241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1985.870735][T23241] R13: 0000000000000000 R14: 00007fc898fb6160 R15: 00007ffc5937f6f8
[ 1985.878704][T23241]  </TASK>
[ 1985.889278][T23235] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1985.908892][T22201] EXT4-fs (loop3): unmounting filesystem.
[ 1986.008473][T23254] syz.0.5939[23254] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1986.008556][T23254] syz.0.5939[23254] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1986.027055][   T28] kauditd_printk_skb: 38 callbacks suppressed
[ 1986.027072][   T28] audit: type=1400 audit(2242.065:12802): avc:  denied  { accept } for  pid=23249 comm="syz.0.5939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1986.065090][T22225] EXT4-fs (loop2): unmounting filesystem.
[ 1986.117671][T23263] loop2: detected capacity change from 0 to 8192
[ 1986.143115][   T28] audit: type=1326 audit(2242.185:12803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23265 comm="syz.8.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1986.166625][   T28] audit: type=1326 audit(2242.185:12804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23265 comm="syz.8.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1986.217930][   T28] audit: type=1326 audit(2242.205:12805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23265 comm="syz.8.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1986.242165][   T28] audit: type=1326 audit(2242.205:12806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23265 comm="syz.8.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1986.265600][   T28] audit: type=1326 audit(2242.205:12807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23265 comm="syz.8.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1986.293493][   T28] audit: type=1326 audit(2242.225:12808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23265 comm="syz.8.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1986.317031][   T28] audit: type=1326 audit(2242.225:12809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23265 comm="syz.8.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 1986.340950][T23274] loop8: detected capacity change from 0 to 8192
[ 1986.400673][T23283] loop2: detected capacity change from 0 to 512
[ 1986.445176][T23283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1986.488054][T22225] EXT4-fs (loop2): unmounting filesystem.
[ 1986.508682][T23289] 9pnet_fd: Insufficient options for proto=fd
[ 1986.741402][T21841] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1986.809086][T23295] loop2: detected capacity change from 0 to 40427
[ 1986.817054][T23295] F2FS-fs (loop2): Unrecognized mount option "errors=continue" or missing value
[ 1986.973515][T21841] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 1986.990974][T21841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1987.023983][T21841] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1987.061309][T21841] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1987.094653][T21841] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[ 1987.114816][T21841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1987.133967][T21841] usb 4-1: Product: syz
[ 1987.138206][T21841] usb 4-1: Manufacturer: syz
[ 1987.143050][T21841] usb 4-1: SerialNumber: syz
[ 1987.158307][T21841] usb 4-1: config 0 descriptor??
[ 1987.175456][T21841] usb 4-1: Found UVC 0.00 device syz (8086:0b5b)
[ 1987.191876][T23295] loop2: detected capacity change from 0 to 40427
[ 1987.193372][T21841] usb 4-1: No valid video chain found.
[ 1987.199431][T23295] F2FS-fs (loop2): invalid crc value
[ 1987.223446][T23295] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1987.249137][T23303] loop8: detected capacity change from 0 to 8192
[ 1987.268630][T23295] F2FS-fs (loop2): Start checkpoint disabled!
[ 1987.275608][T23295] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[ 1987.381668][T21950] usb 4-1: USB disconnect, device number 57
[ 1987.488424][T23313] loop2: detected capacity change from 0 to 512
[ 1987.567397][T23313] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.5959: invalid block
[ 1987.579834][T23313] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5959: invalid indirect mapped block 10 (level 1)
[ 1987.594754][T23313] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5959: invalid indirect mapped block 8 (level 1)
[ 1987.609498][T23313] EXT4-fs (loop2): 1 truncate cleaned up
[ 1987.615240][T23313] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1988.373243][T23320] loop3: detected capacity change from 0 to 512
[ 1988.414338][T23320] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1988.502590][T23333] tmpfs: Unknown parameter 'nolazytime1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[ 1988.537421][T22201] EXT4-fs (loop3): unmounting filesystem.
[ 1988.662527][T22225] EXT4-fs (loop2): unmounting filesystem.
[ 1988.664605][T23337] device syzkaller0 entered promiscuous mode
[ 1988.694172][T23337] 9pnet_fd: Insufficient options for proto=fd
[ 1988.704179][T23344] tmpfs: Unknown parameter 'nolazytime1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[ 1988.730073][T23342] bridge0: port 1(vlan2) entered blocking state
[ 1988.736399][T23342] bridge0: port 1(vlan2) entered disabled state
[ 1988.743355][T23342] device vlan2 entered promiscuous mode
[ 1988.748915][T23342] device vlan1 entered promiscuous mode
[ 1988.755055][T23342] bridge0: port 1(vlan2) entered blocking state
[ 1988.761324][T23342] bridge0: port 1(vlan2) entered forwarding state
[ 1988.793994][T23348] xt_bpf: check failed: parse error
[ 1988.886803][T23361] FAULT_INJECTION: forcing a failure.
[ 1988.886803][T23361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1988.903852][T23361] CPU: 1 PID: 23361 Comm: syz.1.5977 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 1988.913786][T23361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 1988.923847][T23361] Call Trace:
[ 1988.927103][T23361]  <TASK>
[ 1988.930008][T23361]  __dump_stack+0x21/0x24
[ 1988.934315][T23361]  dump_stack_lvl+0xee/0x150
[ 1988.938879][T23361]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1988.943878][T23361]  dump_stack+0x15/0x24
[ 1988.948008][T23361]  should_fail_ex+0x3d4/0x520
[ 1988.952659][T23361]  should_fail+0xb/0x10
[ 1988.956798][T23361]  should_fail_usercopy+0x1a/0x20
[ 1988.961841][T23361]  _copy_from_user+0x1e/0xc0
[ 1988.966453][T23361]  __sys_bpf+0x277/0x780
[ 1988.970720][T23361]  ? bpf_link_show_fdinfo+0x320/0x320
[ 1988.976121][T23361]  ? __cfi_ksys_write+0x10/0x10
[ 1988.980994][T23361]  ? debug_smp_processor_id+0x17/0x20
[ 1988.986379][T23361]  __x64_sys_bpf+0x7c/0x90
[ 1988.990812][T23361]  x64_sys_call+0x488/0x9a0
[ 1988.995330][T23361]  do_syscall_64+0x4c/0xa0
[ 1988.999768][T23361]  ? clear_bhb_loop+0x15/0x70
[ 1989.004467][T23361]  ? clear_bhb_loop+0x15/0x70
[ 1989.009155][T23361]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1989.015058][T23361] RIP: 0033:0x7fd39598e969
[ 1989.019454][T23361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1989.039048][T23361] RSP: 002b:00007fd3968b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1989.047439][T23361] RAX: ffffffffffffffda RBX: 00007fd395bb5fa0 RCX: 00007fd39598e969
[ 1989.055394][T23361] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 0000000000000018
[ 1989.063352][T23361] RBP: 00007fd3968b2090 R08: 0000000000000000 R09: 0000000000000000
[ 1989.071334][T23361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1989.079316][T23361] R13: 0000000000000000 R14: 00007fd395bb5fa0 R15: 00007ffc96c59f38
[ 1989.087301][T23361]  </TASK>
[ 1989.408532][T23380] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5983'.
[ 1989.451317][T21950] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1989.537272][T23385] FAULT_INJECTION: forcing a failure.
[ 1989.537272][T23385] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1989.550647][T23385] CPU: 0 PID: 23385 Comm: syz.1.5984 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 1989.560559][T23385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 1989.570628][T23385] Call Trace:
[ 1989.573917][T23385]  <TASK>
[ 1989.576862][T23385]  __dump_stack+0x21/0x24
[ 1989.581215][T23385]  dump_stack_lvl+0xee/0x150
[ 1989.585818][T23385]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1989.590857][T23385]  dump_stack+0x15/0x24
[ 1989.595111][T23385]  should_fail_ex+0x3d4/0x520
[ 1989.599801][T23385]  should_fail_alloc_page+0x61/0x90
[ 1989.605013][T23385]  prepare_alloc_pages+0x148/0x5f0
[ 1989.610143][T23385]  ? __alloc_pages_bulk+0x9c0/0x9c0
[ 1989.615354][T23385]  ? new_inode_pseudo+0xa2/0x1f0
[ 1989.620301][T23385]  ? new_inode+0x28/0x1e0
[ 1989.624639][T23385]  ? proc_pid_make_inode+0x27/0x1d0
[ 1989.629851][T23385]  ? proc_pident_instantiate+0x69/0x2b0
[ 1989.631310][T21950] usb 3-1: Using ep0 maxpacket: 16
[ 1989.635406][T23385]  ? proc_pident_lookup+0x1c7/0x270
[ 1989.645700][T23385]  ? path_openat+0xff3/0x2f50
[ 1989.646139][T21950] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[ 1989.650386][T23385]  __alloc_pages+0x115/0x3a0
[ 1989.663104][T23385]  ? __cfi___alloc_pages+0x10/0x10
[ 1989.667639][T21950] usb 3-1: config 0 has no interface number 0
[ 1989.668225][T23385]  __folio_alloc+0x12/0x40
[ 1989.678673][T23385]  handle_mm_fault+0x18ef/0x2640
[ 1989.679642][T21950] usb 3-1: config 0 interface 255 altsetting 121 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1989.683622][T23385]  ? __cfi_handle_mm_fault+0x10/0x10
[ 1989.683647][T23385]  ? down_read_trylock+0x273/0x640
[ 1989.705289][T23385]  ? lock_mm_and_find_vma+0x9e/0x320
[ 1989.706727][T21950] usb 3-1: config 0 interface 255 altsetting 121 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1989.710587][T23385]  ? do_user_addr_fault+0x2ee/0x1050
[ 1989.725906][T23385]  do_user_addr_fault+0x63b/0x1050
[ 1989.731034][T23385]  exc_page_fault+0x51/0xb0
[ 1989.731302][T21950] usb 3-1: config 0 interface 255 has no altsetting 0
[ 1989.735572][T23385]  asm_exc_page_fault+0x27/0x30
[ 1989.747150][T23385] RIP: 0010:clear_user_erms+0xa/0x10
[ 1989.751308][T21950] usb 3-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00
[ 1989.752443][T23385] Code: 74 03 f3 48 ab 83 e2 07 74 04 89 d1 f3 aa 31 c0 c3 48 c1 e1 03 83 e2 07 48 01 d1 eb f1 90 90 90 48 83 f9 40 0f 82 76 ff ff ff <f3> aa 31 c0 c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 d4 72 ba fd
[ 1989.769583][T21950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1989.781050][T23385] RSP: 0018:ffffc90002a279b8 EFLAGS: 00050206
[ 1989.781076][T23385] RAX: 0000000000000000 RBX: ffffc90002a27d30 RCX: 0000000000000380
[ 1989.781091][T23385] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000b36000
[ 1989.781104][T23385] RBP: ffffc90002a27b18 R08: ffff88810e42a880 R09: 0000000000000005
[ 1989.781117][T23385] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000b34000
[ 1989.781130][T23385] R13: 0000200000b35380 R14: dffffc0000000000 R15: 0000000000001000
[ 1989.831624][T21950] usb 3-1: config 0 descriptor??
[ 1989.834970][T23385]  ? iov_iter_zero+0x3bf/0xf30
[ 1989.844645][T23385]  ? __cfi_iov_iter_zero+0x10/0x10
[ 1989.849769][T23385]  ? kstrtoull+0x137/0x1d0
[ 1989.854196][T23385]  ? avc_policy_seqno+0x1b/0x70
[ 1989.859061][T23385]  read_iter_zero+0x8d/0x2c0
[ 1989.863669][T23385]  do_iter_read+0x662/0xb30
[ 1989.868182][T23385]  ? _copy_from_user+0x8f/0xc0
[ 1989.872951][T23385]  ? iovec_from_user+0x2a2/0x2e0
[ 1989.877907][T23385]  ? vfs_iter_read+0xa0/0xa0
[ 1989.882516][T23385]  ? import_iovec+0x7c/0xb0
[ 1989.887039][T23385]  do_preadv+0x1f6/0x330
[ 1989.891287][T23385]  ? vfs_writev+0x590/0x590
[ 1989.895887][T23385]  ? __kasan_check_write+0x14/0x20
[ 1989.901018][T23385]  ? ksys_write+0x1eb/0x240
[ 1989.905531][T23385]  ? __cfi_ksys_write+0x10/0x10
[ 1989.910396][T23385]  __x64_sys_preadv2+0xd7/0x100
[ 1989.915263][T23385]  x64_sys_call+0x243/0x9a0
[ 1989.919779][T23385]  do_syscall_64+0x4c/0xa0
[ 1989.924209][T23385]  ? clear_bhb_loop+0x15/0x70
[ 1989.928897][T23385]  ? clear_bhb_loop+0x15/0x70
[ 1989.933580][T23385]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1989.939492][T23385] RIP: 0033:0x7fd39598e969
[ 1989.943910][T23385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1989.963617][T23385] RSP: 002b:00007fd396891038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147
[ 1989.972050][T23385] RAX: ffffffffffffffda RBX: 00007fd395bb6080 RCX: 00007fd39598e969
[ 1989.980038][T23385] RDX: 0000000000000002 RSI: 0000200000001540 RDI: 0000000000000009
[ 1989.988020][T23385] RBP: 00007fd396891090 R08: 0000000000000000 R09: 0000000000000000
[ 1989.996001][T23385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1990.003983][T23385] R13: 0000000000000000 R14: 00007fd395bb6080 R15: 00007ffc96c59f38
[ 1990.011967][T23385]  </TASK>
[ 1990.533195][T21950] uclogic 0003:28BD:0934.0072: interface is invalid, ignoring
[ 1990.586712][T23394] tmpfs: Unknown parameter 'nolazytime1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[ 1990.601898][T23392] FAULT_INJECTION: forcing a failure.
[ 1990.601898][T23392] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1990.631225][T23392] CPU: 0 PID: 23392 Comm: syz.3.5988 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 1990.641158][T23392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 1990.651308][T23392] Call Trace:
[ 1990.654594][T23392]  <TASK>
[ 1990.657530][T23392]  __dump_stack+0x21/0x24
[ 1990.661893][T23392]  dump_stack_lvl+0xee/0x150
[ 1990.666509][T23392]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1990.671555][T23392]  ? __kmalloc_node+0x125/0x1e0
[ 1990.676426][T23392]  dump_stack+0x15/0x24
[ 1990.680604][T23392]  should_fail_ex+0x3d4/0x520
[ 1990.685299][T23392]  should_fail+0xb/0x10
[ 1990.689462][T23392]  should_fail_usercopy+0x1a/0x20
[ 1990.694503][T23392]  _copy_from_user+0x1e/0xc0
[ 1990.699102][T23392]  vmemdup_user+0x63/0xe0
[ 1990.703451][T23392]  setxattr+0x1e6/0x2d0
[ 1990.707629][T23392]  ? path_setxattr+0x280/0x280
[ 1990.712419][T23392]  ? mnt_want_write_file+0x258/0x470
[ 1990.717715][T23392]  __se_sys_fsetxattr+0x168/0x1e0
[ 1990.722752][T23392]  __x64_sys_fsetxattr+0xbf/0xd0
[ 1990.727712][T23392]  x64_sys_call+0x1c5/0x9a0
[ 1990.732225][T23392]  do_syscall_64+0x4c/0xa0
[ 1990.736659][T23392]  ? clear_bhb_loop+0x15/0x70
[ 1990.741346][T23392]  ? clear_bhb_loop+0x15/0x70
[ 1990.746030][T23392]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1990.751936][T23392] RIP: 0033:0x7f349118e969
[ 1990.756366][T23392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1990.775978][T23392] RSP: 002b:00007f3491f6b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[ 1990.784403][T23392] RAX: ffffffffffffffda RBX: 00007f34913b5fa0 RCX: 00007f349118e969
[ 1990.792386][T23392] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 0000000000000006
[ 1990.800379][T23392] RBP: 00007f3491f6b090 R08: 0000000000000000 R09: 0000000000000000
[ 1990.808359][T23392] R10: 000000000000fe44 R11: 0000000000000246 R12: 0000000000000001
[ 1990.816338][T23392] R13: 0000000000000000 R14: 00007f34913b5fa0 R15: 00007ffcf38d7ff8
[ 1990.824329][T23392]  </TASK>
[ 1990.882018][ T8261] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1990.904938][T23403] loop3: detected capacity change from 0 to 16
[ 1990.944435][T23405] loop8: detected capacity change from 0 to 8192
[ 1991.062646][T23403] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1991.076752][T23405] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1991.140125][   T28] audit: type=1400 audit(2247.175:12810): avc:  denied  { map } for  pid=23402 comm="syz.3.5990" path="/66/file3/file2" dev="loop3" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1991.171176][T23403] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89
[ 1991.259877][   T47] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[8192]
[ 1991.270685][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.281529][T23407] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.292764][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.303757][T23407] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.318053][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.333992][T23407] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.367383][T23408] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.384222][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.395433][T23407] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.406452][T23405] overlayfs: filesystem on './file2' not supported
[ 1991.413268][T23408] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.425308][T23408] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.439103][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.439147][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.439231][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.439267][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.440044][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.440081][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.440311][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.440347][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.440385][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.440418][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.440576][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.440611][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.440648][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.440681][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.440921][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.440957][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.440994][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.441028][T23403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[ 1991.457454][   T28] audit: type=1400 audit(2247.495:12811): avc:  denied  { associate } for  pid=23410 comm="syz.3.5992" name="67" dev="tmpfs" ino=380 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[ 1991.492828][T23413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1991.492932][T23413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1991.711787][   T28] audit: type=1400 audit(2247.755:12812): avc:  denied  { remove_name } for  pid=22201 comm="syz-executor" name="binderfs" dev="tmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[ 1991.712209][   T28] audit: type=1400 audit(2247.755:12813): avc:  denied  { rmdir } for  pid=22201 comm="syz-executor" name="67" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[ 1991.832912][T23426] loop8: detected capacity change from 0 to 512
[ 1991.931839][T23426] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1991.938501][T23426] EXT4-fs: Ignoring removed orlov option
[ 1991.944477][T23426] ext4: Unknown parameter 'obj_type'
[ 1992.081313][T21949] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1992.261306][T21949] usb 1-1: Using ep0 maxpacket: 16
[ 1992.267426][T21949] usb 1-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00
[ 1992.276629][T21949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1992.285125][T21949] usb 1-1: config 0 descriptor??
[ 1992.710457][T23419] netlink: 'syz.0.5994': attribute type 3 has an invalid length.
[ 1992.718849][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5994'.
[ 1992.737100][T21949] wacom 0003:056A:00B7.0073: Unknown device_type for 'HID 056a:00b7'. Assuming pen.
[ 1992.746628][  T856] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1992.750166][T21949] wacom 0003:056A:00B7.0073: hidraw0: USB HID v20.00 Device [HID 056a:00b7] on usb-dummy_hcd.0-1/input0
[ 1992.782333][T21949] input: Wacom Intuos3 4x6 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B7.0073/input/input253
[ 1992.797860][   T28] audit: type=1400 audit(2248.835:12814): avc:  denied  { read } for  pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=8474 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1992.823455][   T28] audit: type=1400 audit(2248.835:12815): avc:  denied  { open } for  pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=8474 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1992.861880][   T28] audit: type=1400 audit(2248.905:12816): avc:  denied  { ioctl } for  pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=8474 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1993.055079][T21949] usb 3-1: USB disconnect, device number 113
[ 1993.062895][  T925] usb 1-1: USB disconnect, device number 95
[ 1993.902577][T21949] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 1994.099511][T21949] usb 3-1: Using ep0 maxpacket: 16
[ 1994.107365][T21949] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[ 1994.116750][T21949] usb 3-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[ 1994.125080][T21949] usb 3-1: Product: syz
[ 1994.129372][T21949] usb 3-1: Manufacturer: syz
[ 1994.134142][T21949] usb 3-1: SerialNumber: syz
[ 1994.139676][T21949] usb 3-1: config 0 descriptor??
[ 1994.145211][T21949] usb 3-1: selecting invalid altsetting 1
[ 1994.151851][T21949] snd-usb-audio: probe of 3-1:0.0 failed with error -22
[ 1994.830932][  T925] hid-generic 0000:0003:0000.0074: item fetching failed at offset 0/2
[ 1994.845134][  T925] hid-generic: probe of 0000:0003:0000.0074 failed with error -22
[ 1994.864790][  T925] hid-generic 0000:0003:0000.0075: item fetching failed at offset 0/2
[ 1994.884526][  T925] hid-generic: probe of 0000:0003:0000.0075 failed with error -22
[ 1995.000355][T23478] loop8: detected capacity change from 0 to 512
[ 1995.091310][T23478] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1995.309034][T23488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6011'.
[ 1995.318070][T23488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6011'.
[ 1995.616827][T22321] EXT4-fs (loop8): unmounting filesystem.
[ 1995.689657][   T28] audit: type=1400 audit(2251.725:12817): avc:  denied  { write } for  pid=23493 comm="syz.8.6014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 1995.713393][T23494] loop8: detected capacity change from 0 to 128
[ 1995.742825][T23494] syz.8.6014: attempt to access beyond end of device
[ 1995.742825][T23494] loop8: rw=0, sector=121, nr_sectors = 120 limit=128
[ 1995.863818][T23498] FAULT_INJECTION: forcing a failure.
[ 1995.863818][T23498] name failslab, interval 1, probability 0, space 0, times 0
[ 1995.884033][T23498] CPU: 0 PID: 23498 Comm: syz.1.6017 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 1995.893957][T23498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 1995.904020][T23498] Call Trace:
[ 1995.907308][T23498]  <TASK>
[ 1995.910245][T23498]  __dump_stack+0x21/0x24
[ 1995.914596][T23498]  dump_stack_lvl+0xee/0x150
[ 1995.919198][T23498]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1995.924243][T23498]  ? longest_prefix_match+0x43c/0x640
[ 1995.929715][T23498]  dump_stack+0x15/0x24
[ 1995.933883][T23498]  should_fail_ex+0x3d4/0x520
[ 1995.938574][T23498]  ? prepare_creds+0x2f/0x640
[ 1995.943259][T23498]  __should_failslab+0xac/0xf0
[ 1995.948033][T23498]  should_failslab+0x9/0x20
[ 1995.952549][T23498]  kmem_cache_alloc+0x3b/0x330
[ 1995.957318][T23498]  ? __cfi_make_kgid+0x10/0x10
[ 1995.962092][T23498]  prepare_creds+0x2f/0x640
[ 1995.966601][T23498]  ? __cfi_ksys_write+0x10/0x10
[ 1995.971464][T23498]  __sys_setregid+0xfd/0x640
[ 1995.976068][T23498]  ? __bpf_trace_sys_enter+0x62/0x70
[ 1995.981379][T23498]  __x64_sys_setregid+0x5a/0x70
[ 1995.986243][T23498]  x64_sys_call+0x63a/0x9a0
[ 1995.990758][T23498]  do_syscall_64+0x4c/0xa0
[ 1995.995192][T23498]  ? clear_bhb_loop+0x15/0x70
[ 1995.999876][T23498]  ? clear_bhb_loop+0x15/0x70
[ 1996.004563][T23498]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1996.010470][T23498] RIP: 0033:0x7fd39598e969
[ 1996.014899][T23498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1996.034520][T23498] RSP: 002b:00007fd3968b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072
[ 1996.042949][T23498] RAX: ffffffffffffffda RBX: 00007fd395bb5fa0 RCX: 00007fd39598e969
[ 1996.050943][T23498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1996.058923][T23498] RBP: 00007fd3968b2090 R08: 0000000000000000 R09: 0000000000000000
[ 1996.066906][T23498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1996.074884][T23498] R13: 0000000000000000 R14: 00007fd395bb5fa0 R15: 00007ffc96c59f38
[ 1996.082874][T23498]  </TASK>
[ 1997.237965][  T328] usb 3-1: USB disconnect, device number 114
[ 1997.307430][   T28] audit: type=1326 audit(2253.345:12818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23509 comm="syz.1.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1997.336077][   T28] audit: type=1326 audit(2253.345:12819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23509 comm="syz.1.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1997.370878][   T28] audit: type=1326 audit(2253.345:12820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23509 comm="syz.1.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39598e969 code=0x7ffc0000
[ 1997.394759][T16346] kworker/u4:4: attempt to access beyond end of device
[ 1997.394759][T16346] loop8: rw=1, sector=241, nr_sectors = 800 limit=128
[ 1997.472216][T23521] tmpfs: Unknown parameter 'nolazytime1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[ 1997.491531][T23525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6025'.
[ 1997.500433][T23525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6025'.
[ 1997.694895][T23531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6020'.
[ 1997.703920][T23531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6020'.
[ 1998.262418][T23543] tmpfs: Unknown parameter 'nolazytime1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[ 1998.279414][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6031'.
[ 1998.313770][   T28] audit: type=1326 audit(2254.355:12821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23544 comm="syz.2.6032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f658e969 code=0x7ffc0000
[ 1998.358073][   T28] audit: type=1326 audit(2254.355:12822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23544 comm="syz.2.6032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f658e969 code=0x7ffc0000
[ 1998.382374][   T28] audit: type=1326 audit(2254.375:12823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23544 comm="syz.2.6032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f15f658e969 code=0x7ffc0000
[ 1998.406019][   T28] audit: type=1326 audit(2254.375:12824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23544 comm="syz.2.6032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f658e969 code=0x7ffc0000
[ 1998.429472][   T28] audit: type=1326 audit(2254.375:12825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23544 comm="syz.2.6032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f658e969 code=0x7ffc0000
[ 1998.564137][T23556] loop8: detected capacity change from 0 to 8192
[ 1998.621588][T21949] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1998.641354][T12038] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1998.801330][T21949] usb 1-1: Using ep0 maxpacket: 16
[ 1998.829804][T21949] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[ 1998.853154][T12038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1998.884686][T21949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1998.896293][T12038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1998.906760][T12038] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[ 1998.915944][T21949] usb 1-1: config 0 has no interface number 0
[ 1998.922354][T12038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1998.931674][T21949] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 1998.940795][T12038] usb 3-1: config 0 descriptor??
[ 1998.945804][T21949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1998.953932][T21949] usb 1-1: Product: syz
[ 1998.958421][T21949] usb 1-1: Manufacturer: syz
[ 1998.963048][T21949] usb 1-1: SerialNumber: syz
[ 1998.968004][T21949] usb 1-1: config 0 descriptor??
[ 1999.164775][T12038] usbhid 3-1:0.0: can't add hid device: -71
[ 1999.170819][T12038] usbhid: probe of 3-1:0.0 failed with error -71
[ 1999.180701][   T28] audit: type=1400 audit(2255.215:12826): avc:  denied  { connect } for  pid=23546 comm="syz.0.6033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1999.207975][T12038] usb 3-1: USB disconnect, device number 115
[ 1999.208936][   T28] audit: type=1400 audit(2255.215:12827): avc:  denied  { read } for  pid=23546 comm="syz.0.6033" path="socket:[96103]" dev="sockfs" ino=96103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1999.216697][T21949] usb 1-1: USB disconnect, device number 96
[ 2000.031220][T23597] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6050'.
[ 2000.111340][T21949] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 2000.131384][  T328] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 2000.292433][T21949] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 2000.302890][T21949] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 2000.312878][T21949] usb 4-1: config 220 interface 0 has no altsetting 0
[ 2000.312922][  T328] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 2000.328524][  T328] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2000.332585][T21949] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 2000.338824][  T328] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2000.356709][  T328] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2000.361293][T21949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2000.376897][  T328] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[ 2000.387690][T21949] usb 4-1: Product: syz
[ 2000.391757][  T328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2000.391981][T21949] usb 4-1: Manufacturer: syz
[ 2000.404531][  T328] usb 1-1: Product: syz
[ 2000.408770][  T328] usb 1-1: Manufacturer: syz
[ 2000.411288][T21949] usb 4-1: SerialNumber: syz
[ 2000.413509][  T328] usb 1-1: SerialNumber: syz
[ 2000.426907][  T328] usb 1-1: config 0 descriptor??
[ 2000.437328][  T328] usb 1-1: Found UVC 0.00 device syz (8086:0b5b)
[ 2000.443788][  T328] usb 1-1: No valid video chain found.
[ 2000.697163][  T328] usb 1-1: USB disconnect, device number 97
[ 2000.729530][T21949] usb 4-1: USB disconnect, device number 58
[ 2001.114760][T23608] TCP: TCP_TX_DELAY enabled
[ 2001.627067][T23633] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6063'.
[ 2001.637011][  T328] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 2001.669087][T23635] netlink: 'syz.8.6064': attribute type 6 has an invalid length.
[ 2001.821328][  T328] usb 4-1: Using ep0 maxpacket: 16
[ 2001.891336][  T328] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2001.911309][  T328] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2001.921058][  T328] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2001.941329][  T328] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2001.950391][  T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2001.971857][  T328] usb 4-1: config 0 descriptor??
[ 2002.380317][  T328] hid (null): invalid report_size 12202
[ 2002.386106][  T328] hid (null): unknown global tag 0xd
[ 2002.392740][  T328] hid (null): unknown global tag 0xd
[ 2002.399565][   T28] kauditd_printk_skb: 12 callbacks suppressed
[ 2002.399580][   T28] audit: type=1326 audit(2258.435:12840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23644 comm="syz.2.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f658e969 code=0x7ffc0000
[ 2002.431327][  T293] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 2002.442179][  T328] hid (null): invalid report_count 39847
[ 2002.450323][  T328] hid (null): unknown global tag 0xc
[ 2002.457102][  T328] hid (null): report_id 13250 is invalid
[ 2002.463318][  T328] hid (null): unknown global tag 0xe
[ 2002.470528][   T28] audit: type=1326 audit(2258.465:12841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23644 comm="syz.2.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f658e969 code=0x7ffc0000
[ 2002.494017][   T28] audit: type=1326 audit(2258.465:12842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23644 comm="syz.2.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f15f658e969 code=0x7ffc0000
[ 2002.517413][   T28] audit: type=1326 audit(2258.465:12843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23644 comm="syz.2.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f658e969 code=0x7ffc0000
[ 2002.546539][   T28] audit: type=1326 audit(2258.465:12844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23644 comm="syz.2.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f658e969 code=0x7ffc0000
[ 2002.597281][T12038] usb 4-1: USB disconnect, device number 59
[ 2002.632802][T23651] FAULT_INJECTION: forcing a failure.
[ 2002.632802][T23651] name failslab, interval 1, probability 0, space 0, times 0
[ 2002.645466][T23651] CPU: 1 PID: 23651 Comm: syz.2.6069 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2002.655367][T23651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2002.665433][T23651] Call Trace:
[ 2002.668727][T23651]  <TASK>
[ 2002.671667][T23651]  __dump_stack+0x21/0x24
[ 2002.676013][T23651]  dump_stack_lvl+0xee/0x150
[ 2002.680623][T23651]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2002.685664][T23651]  dump_stack+0x15/0x24
[ 2002.689828][T23651]  should_fail_ex+0x3d4/0x520
[ 2002.694521][T23651]  ? __alloc_file+0x28/0x2a0
[ 2002.699120][T23651]  __should_failslab+0xac/0xf0
[ 2002.703890][T23651]  should_failslab+0x9/0x20
[ 2002.708409][T23651]  kmem_cache_alloc+0x3b/0x330
[ 2002.713182][T23651]  ? capable_wrt_inode_uidgid+0xdd/0x120
[ 2002.718826][T23651]  __alloc_file+0x28/0x2a0
[ 2002.723255][T23651]  alloc_empty_file+0x97/0x180
[ 2002.728030][T23651]  dentry_open+0x4e/0x100
[ 2002.732361][T23651]  ovl_path_open+0x16e/0x190
[ 2002.736953][T23651]  ovl_dir_read+0x29/0x5c0
[ 2002.741364][T23651]  ? ovl_path_upper+0x22/0x120
[ 2002.746125][T23651]  ? ovl_path_next+0x1e1/0x270
[ 2002.750891][T23651]  ovl_dir_read_merged+0x134/0x2f0
[ 2002.755996][T23651]  ? ovl_check_empty_dir+0x480/0x480
[ 2002.761282][T23651]  ? lockref_put_or_lock+0x133/0x250
[ 2002.766590][T23651]  ? __cfi_ovl_fill_merge+0x10/0x10
[ 2002.771795][T23651]  ? __kasan_check_write+0x14/0x20
[ 2002.776919][T23651]  ? override_creds+0x7c/0x100
[ 2002.781692][T23651]  ovl_check_empty_dir+0xbb/0x480
[ 2002.786713][T23651]  ? ovl_lower_positive+0x331/0x350
[ 2002.791912][T23651]  ? __cfi_ovl_check_empty_dir+0x10/0x10
[ 2002.797538][T23651]  ovl_do_remove+0x180/0xba0
[ 2002.802125][T23651]  ? may_create+0x810/0x810
[ 2002.806629][T23651]  ? __cfi_selinux_inode_rmdir+0x10/0x10
[ 2002.812265][T23651]  ? ovl_set_redirect+0x6c0/0x6c0
[ 2002.817285][T23651]  ? selinux_inode_rmdir+0x22/0x30
[ 2002.822409][T23651]  ovl_rmdir+0x1a/0x20
[ 2002.826475][T23651]  vfs_rmdir+0x393/0x500
[ 2002.830713][T23651]  do_rmdir+0x259/0x6a0
[ 2002.834863][T23651]  ? __cfi_do_rmdir+0x10/0x10
[ 2002.839535][T23651]  ? getname_flags+0x206/0x500
[ 2002.844308][T23651]  __x64_sys_rmdir+0x49/0x50
[ 2002.848892][T23651]  x64_sys_call+0x68e/0x9a0
[ 2002.853394][T23651]  do_syscall_64+0x4c/0xa0
[ 2002.857807][T23651]  ? clear_bhb_loop+0x15/0x70
[ 2002.862476][T23651]  ? clear_bhb_loop+0x15/0x70
[ 2002.867148][T23651]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2002.873044][T23651] RIP: 0033:0x7f15f658e969
[ 2002.877453][T23651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2002.897054][T23651] RSP: 002b:00007f15f63de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[ 2002.905460][T23651] RAX: ffffffffffffffda RBX: 00007f15f67b6160 RCX: 00007f15f658e969
[ 2002.913430][T23651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380
[ 2002.921396][T23651] RBP: 00007f15f63de090 R08: 0000000000000000 R09: 0000000000000000
[ 2002.929363][T23651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2002.937326][T23651] R13: 0000000000000000 R14: 00007f15f67b6160 R15: 00007fffd3856168
[ 2002.945293][T23651]  </TASK>
[ 2002.973637][   T28] audit: type=1400 audit(2259.015:12845): avc:  denied  { watch } for  pid=23652 comm="syz.8.6071" path="/75/file0" dev="tmpfs" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 2002.995811][  T293] usb 1-1: Using ep0 maxpacket: 32
[ 2003.005771][T23653] loop8: detected capacity change from 0 to 256
[ 2003.012373][  T293] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 2003.013999][T23653] FAT-fs (loop8): bogus sectors per cluster 30
[ 2003.023726][  T293] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[ 2003.029570][T23653] FAT-fs (loop8): Can't find a valid FAT filesystem
[ 2003.040918][  T293] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2003.054982][  T293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2003.063014][  T293] usb 1-1: Product: ă Š
[ 2003.067221][  T293] usb 1-1: Manufacturer: ŕ �
[ 2003.071923][  T293] usb 1-1: SerialNumber: Đ 
[ 2003.096339][T23656] loop8: detected capacity change from 0 to 512
[ 2003.103336][T23656] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 438276)!
[ 2003.113918][T23656] EXT4-fs (loop8): group descriptors corrupted!
[ 2003.163531][   T28] audit: type=1400 audit(2259.205:12846): avc:  denied  { mount } for  pid=23655 comm="syz.8.6072" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 2003.186367][   T28] audit: type=1400 audit(2259.225:12847): avc:  denied  { unmount } for  pid=22321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 2003.278863][  T293] cdc_ncm 1-1:1.0: bind() failure
[ 2003.285085][  T293] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[ 2003.292160][  T293] cdc_ncm 1-1:1.1: bind() failure
[ 2003.298493][  T293] usb 1-1: USB disconnect, device number 98
[ 2003.650008][   T28] audit: type=1326 audit(2259.615:12848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23678 comm="syz.8.6079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 2003.767054][   T28] audit: type=1326 audit(2259.615:12849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23678 comm="syz.8.6079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc898d8e969 code=0x7ffc0000
[ 2003.804746][T23683] loop8: detected capacity change from 0 to 256
[ 2003.876818][T23683] exFAT-fs (loop8): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[ 2003.986457][  T293] kernel write not supported for file bpf-prog (pid: 293 comm: kworker/0:2)
[ 2004.025802][T23698] netlink: 165 bytes leftover after parsing attributes in process `syz.8.6080'.
[ 2006.925459][T23731] bridge: RTM_NEWNEIGH with invalid ether address
[ 2006.942859][T23734] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6097'.
[ 2008.106949][T23744] FAULT_INJECTION: forcing a failure.
[ 2008.106949][T23744] name failslab, interval 1, probability 0, space 0, times 0
[ 2009.345841][T23744] CPU: 0 PID: 23744 Comm: syz.0.6099 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2009.355774][T23744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2009.365843][T23744] Call Trace:
[ 2009.369130][T23744]  <TASK>
[ 2009.372067][T23744]  __dump_stack+0x21/0x24
[ 2009.376422][T23744]  dump_stack_lvl+0xee/0x150
[ 2009.381028][T23744]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2009.386067][T23744]  ? __local_bh_enable_ip+0x58/0x80
[ 2009.391282][T23744]  ? release_sock+0x169/0x1c0
[ 2009.395988][T23744]  dump_stack+0x15/0x24
[ 2009.400167][T23744]  should_fail_ex+0x3d4/0x520
[ 2009.404857][T23744]  __should_failslab+0xac/0xf0
[ 2009.409616][T23744]  should_failslab+0x9/0x20
[ 2009.414118][T23744]  kmem_cache_alloc_node+0x42/0x340
[ 2009.419309][T23744]  ? __alloc_skb+0xdf/0x7e0
[ 2009.423814][T23744]  __alloc_skb+0xdf/0x7e0
[ 2009.428139][T23744]  ? netlink_autobind+0x168/0x1a0
[ 2009.433162][T23744]  netlink_sendmsg+0x626/0xbc0
[ 2009.437924][T23744]  ? __cfi_netlink_sendmsg+0x10/0x10
[ 2009.443204][T23744]  ? security_socket_sendmsg+0x93/0xb0
[ 2009.448665][T23744]  ? __cfi_netlink_sendmsg+0x10/0x10
[ 2009.453943][T23744]  ____sys_sendmsg+0x5a9/0x990
[ 2009.458705][T23744]  ? __sys_sendmsg_sock+0x40/0x40
[ 2009.463727][T23744]  ? import_iovec+0x7c/0xb0
[ 2009.468227][T23744]  ___sys_sendmsg+0x21c/0x290
[ 2009.472904][T23744]  ? __sys_sendmsg+0x270/0x270
[ 2009.477671][T23744]  ? __kasan_check_write+0x14/0x20
[ 2009.482780][T23744]  ? proc_fail_nth_write+0x17a/0x1f0
[ 2009.488064][T23744]  ? vfs_write+0x9d6/0xca0
[ 2009.492481][T23744]  ? __fdget+0x19c/0x220
[ 2009.496724][T23744]  __x64_sys_sendmsg+0x1f0/0x2c0
[ 2009.501659][T23744]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 2009.507122][T23744]  ? fpregs_assert_state_consistent+0xb1/0xe0
[ 2009.513186][T23744]  x64_sys_call+0x171/0x9a0
[ 2009.517687][T23744]  do_syscall_64+0x4c/0xa0
[ 2009.522099][T23744]  ? clear_bhb_loop+0x15/0x70
[ 2009.526766][T23744]  ? clear_bhb_loop+0x15/0x70
[ 2009.531433][T23744]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2009.537325][T23744] RIP: 0033:0x7f6b0638e969
[ 2009.541738][T23744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2009.561340][T23744] RSP: 002b:00007f6b07148038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2009.569754][T23744] RAX: ffffffffffffffda RBX: 00007f6b065b5fa0 RCX: 00007f6b0638e969
[ 2009.577719][T23744] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[ 2009.585686][T23744] RBP: 00007f6b07148090 R08: 0000000000000000 R09: 0000000000000000
[ 2009.593649][T23744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2009.601615][T23744] R13: 0000000000000000 R14: 00007f6b065b5fa0 R15: 00007fff0dbf02b8
[ 2009.609583][T23744]  </TASK>
[ 2009.614228][T23747] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6100'.
[ 2009.692444][T23751] FAULT_INJECTION: forcing a failure.
[ 2009.692444][T23751] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2009.705571][T23751] CPU: 0 PID: 23751 Comm: syz.3.6101 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2009.715480][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2009.725555][T23751] Call Trace:
[ 2009.728851][T23751]  <TASK>
[ 2009.731797][T23751]  __dump_stack+0x21/0x24
[ 2009.736156][T23751]  dump_stack_lvl+0xee/0x150
[ 2009.740784][T23751]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2009.745840][T23751]  ? synchronize_rcu_expedited+0x733/0x810
[ 2009.751672][T23751]  dump_stack+0x15/0x24
[ 2009.755859][T23751]  should_fail_ex+0x3d4/0x520
[ 2009.760555][T23751]  should_fail+0xb/0x10
[ 2009.764724][T23751]  should_fail_usercopy+0x1a/0x20
[ 2009.769764][T23751]  strncpy_from_user+0x24/0x2d0
[ 2009.774634][T23751]  strncpy_from_user_nofault+0x73/0x150
[ 2009.780203][T23751]  bpf_probe_read_compat_str+0xe6/0x180
[ 2009.785773][T23751]  bpf_prog_d73d3bb03d5a037f+0x35/0x37
[ 2009.791255][T23751]  bpf_trace_run2+0xff/0x250
[ 2009.795862][T23751]  ? __cfi_bpf_trace_run2+0x10/0x10
[ 2009.801081][T23751]  ? synchronize_rcu+0x93/0x3a0
[ 2009.805960][T23751]  ? kvfree+0x35/0x40
[ 2009.809963][T23751]  ? __cfi_synchronize_rcu+0x10/0x10
[ 2009.815278][T23751]  ? kvfree+0x35/0x40
[ 2009.819292][T23751]  __bpf_trace_kfree+0x6f/0x90
[ 2009.824078][T23751]  ? kvfree+0x35/0x40
[ 2009.828077][T23751]  kfree+0xc9/0xf0
[ 2009.831810][T23751]  kvfree+0x35/0x40
[ 2009.835636][T23751]  bpf_map_area_free+0x15/0x20
[ 2009.840423][T23751]  cpu_map_free+0x263/0x2a0
[ 2009.844949][T23751]  map_create+0x9ec/0xd80
[ 2009.849306][T23751]  __sys_bpf+0x30b/0x780
[ 2009.853569][T23751]  ? bpf_link_show_fdinfo+0x320/0x320
[ 2009.858967][T23751]  ? __cfi_ksys_write+0x10/0x10
[ 2009.863834][T23751]  ? do_user_addr_fault+0x9ac/0x1050
[ 2009.869140][T23751]  ? debug_smp_processor_id+0x17/0x20
[ 2009.874529][T23751]  __x64_sys_bpf+0x7c/0x90
[ 2009.878966][T23751]  x64_sys_call+0x488/0x9a0
[ 2009.883485][T23751]  do_syscall_64+0x4c/0xa0
[ 2009.887917][T23751]  ? clear_bhb_loop+0x15/0x70
[ 2009.892607][T23751]  ? clear_bhb_loop+0x15/0x70
[ 2009.897299][T23751]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2009.903215][T23751] RIP: 0033:0x7f349118e969
[ 2009.907654][T23751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2009.927270][T23751] RSP: 002b:00007f3491f6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2009.935702][T23751] RAX: ffffffffffffffda RBX: 00007f34913b5fa0 RCX: 00007f349118e969
[ 2009.943690][T23751] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000
[ 2009.951674][T23751] RBP: 00007f3491f6b090 R08: 0000000000000000 R09: 0000000000000000
[ 2009.959657][T23751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2009.967635][T23751] R13: 0000000000000001 R14: 00007f34913b5fa0 R15: 00007ffcf38d7ff8
[ 2009.975626][T23751]  </TASK>
[ 2010.494884][   T28] kauditd_printk_skb: 6 callbacks suppressed
[ 2010.494903][   T28] audit: type=1400 audit(2266.535:12854): avc:  denied  { write } for  pid=23749 comm="syz.8.6103" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 2011.061068][T23766] input: syz0 as /devices/virtual/input/input256
[ 2012.223455][   T28] audit: type=1400 audit(2268.265:12855): avc:  denied  { open } for  pid=23764 comm="syz.3.6106" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=97433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2013.385616][T23789] loop8: detected capacity change from 0 to 256
[ 2013.413219][T23789] exFAT-fs (loop8): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[ 2013.552258][T23795] netlink: 165 bytes leftover after parsing attributes in process `syz.8.6115'.
[ 2015.461343][  T925] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 2015.524600][T23809] FAULT_INJECTION: forcing a failure.
[ 2015.524600][T23809] name failslab, interval 1, probability 0, space 0, times 0
[ 2015.542866][T23809] CPU: 0 PID: 23809 Comm: syz.3.6119 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2015.552780][T23809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2015.562844][T23809] Call Trace:
[ 2015.566127][T23809]  <TASK>
[ 2015.569063][T23809]  __dump_stack+0x21/0x24
[ 2015.573415][T23809]  dump_stack_lvl+0xee/0x150
[ 2015.578015][T23809]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2015.583051][T23809]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[ 2015.588788][T23809]  dump_stack+0x15/0x24
[ 2015.592958][T23809]  should_fail_ex+0x3d4/0x520
[ 2015.597634][T23809]  ? vm_area_dup+0x27/0x280
[ 2015.602134][T23809]  __should_failslab+0xac/0xf0
[ 2015.606896][T23809]  should_failslab+0x9/0x20
[ 2015.611399][T23809]  kmem_cache_alloc+0x3b/0x330
[ 2015.616157][T23809]  vm_area_dup+0x27/0x280
[ 2015.620482][T23809]  ? __split_vma+0x1a0/0x840
[ 2015.625080][T23809]  __split_vma+0x1b6/0x840
[ 2015.629493][T23809]  do_mas_align_munmap+0x2f6/0x11b0
[ 2015.634689][T23809]  ? kernel_text_address+0xa0/0xd0
[ 2015.639797][T23809]  ? do_mas_munmap+0x2b0/0x2b0
[ 2015.644557][T23809]  ? mas_find+0x307/0x370
[ 2015.648882][T23809]  do_mas_munmap+0x241/0x2b0
[ 2015.653469][T23809]  mmap_region+0x6d7/0x2140
[ 2015.657972][T23809]  ? __cfi_mmap_region+0x10/0x10
[ 2015.662902][T23809]  ? avc_has_perm+0x158/0x240
[ 2015.667575][T23809]  ? cap_mmap_addr+0x165/0x2e0
[ 2015.672335][T23809]  ? file_mmap_ok+0x127/0x180
[ 2015.677007][T23809]  do_mmap+0x7ae/0xcf0
[ 2015.681069][T23809]  ? __cfi_do_mmap+0x10/0x10
[ 2015.685658][T23809]  vm_mmap_pgoff+0x1f5/0x3f0
[ 2015.690249][T23809]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[ 2015.695358][T23809]  ? __fget_files+0x2d5/0x330
[ 2015.700036][T23809]  ksys_mmap_pgoff+0x161/0x1d0
[ 2015.704794][T23809]  __x64_sys_mmap+0xfa/0x110
[ 2015.709377][T23809]  x64_sys_call+0x8fd/0x9a0
[ 2015.713878][T23809]  do_syscall_64+0x4c/0xa0
[ 2015.718290][T23809]  ? clear_bhb_loop+0x15/0x70
[ 2015.722962][T23809]  ? clear_bhb_loop+0x15/0x70
[ 2015.727632][T23809]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2015.733521][T23809] RIP: 0033:0x7f349118e969
[ 2015.737927][T23809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2015.757532][T23809] RSP: 002b:00007f3491f6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 2015.765956][T23809] RAX: ffffffffffffffda RBX: 00007f34913b5fa0 RCX: 00007f349118e969
[ 2015.773927][T23809] RDX: 0000000000000006 RSI: 0000000000004000 RDI: 0000200000002000
[ 2015.781902][T23809] RBP: 00007f3491f6b090 R08: 0000000000000003 R09: 00000000a14ef000
[ 2015.789872][T23809] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000001
[ 2015.797835][T23809] R13: 0000000000000000 R14: 00007f34913b5fa0 R15: 00007ffcf38d7ff8
[ 2015.805804][T23809]  </TASK>
[ 2015.876982][T23817] tmpfs: Unknown parameter 'nolazytime1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[ 2016.891415][  T925] usb 2-1: Using ep0 maxpacket: 16
[ 2016.958703][T23828] loop8: detected capacity change from 0 to 512
[ 2017.020966][T23828] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 2017.101878][T23828] EXT4-fs (loop8): 1 truncate cleaned up
[ 2017.113720][T23828] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 2017.155188][T23828] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz.8.6126: corrupted in-inode xattr
[ 2017.168545][T23828] EXT4-fs (loop8): Remounting filesystem read-only
[ 2017.176807][T23828] EXT4-fs warning (device loop8): ext4_xattr_set_entry:1723: inode #15: comm syz.8.6126: unable to update i_inline_off
[ 2017.196013][T23833] device wg2 entered promiscuous mode
[ 2017.205600][T23828] EXT4-fs error (device loop8): ext4_xattr_ibody_get:603: inode #15: comm syz.8.6126: corrupted in-inode xattr
[ 2017.224584][T23828] EXT4-fs (loop8): Remounting filesystem read-only
[ 2017.232514][T23828] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz.8.6126: corrupted in-inode xattr
[ 2017.245835][T23828] EXT4-fs (loop8): Remounting filesystem read-only
[ 2017.256784][T23827] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz.8.6126: corrupted in-inode xattr
[ 2017.270180][T23827] EXT4-fs (loop8): Remounting filesystem read-only
[ 2017.278166][T23827] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz.8.6126: corrupted in-inode xattr
[ 2017.291514][T23827] EXT4-fs (loop8): Remounting filesystem read-only
[ 2017.298462][T23827] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz.8.6126: corrupted in-inode xattr
[ 2017.312048][T23827] EXT4-fs (loop8): Remounting filesystem read-only
[ 2017.319012][T23827] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz.8.6126: corrupted in-inode xattr
[ 2017.332477][T23827] EXT4-fs (loop8): Remounting filesystem read-only
[ 2017.339407][T23827] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz.8.6126: corrupted in-inode xattr
[ 2017.353646][T23827] EXT4-fs (loop8): Remounting filesystem read-only
[ 2017.360810][T23827] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz.8.6126: corrupted in-inode xattr
[ 2017.374253][T23827] EXT4-fs (loop8): Remounting filesystem read-only
[ 2017.381178][T23827] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz.8.6126: corrupted in-inode xattr
[ 2017.426463][  T925] usb 2-1: device descriptor read/all, error -71
[ 2017.554151][T23837] loop8: detected capacity change from 0 to 1024
[ 2017.650093][T23837] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities
[ 2018.370233][  T328] hid-generic 0000:0003:0000.0077: item fetching failed at offset 0/2
[ 2018.378533][  T328] hid-generic: probe of 0000:0003:0000.0077 failed with error -22
[ 2018.411476][   T19] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 2018.777826][T23851] overlayfs: missing 'lowerdir'
[ 2019.271302][   T19] usb 3-1: Using ep0 maxpacket: 32
[ 2019.277148][   T19] usb 3-1: device descriptor read/all, error -71
[ 2019.343219][T23868] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 2019.410167][   T28] audit: type=1400 audit(2275.445:12856): avc:  denied  { create } for  pid=23865 comm="syz.8.6138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 2019.435590][T23867] loop8: detected capacity change from 0 to 512
[ 2019.450206][T23867] FAT-fs (loop8): Unrecognized mount option "y˛[hżjś7'‡”{Lk~ÄÉPsőBLd·lŹ" or missing value
[ 2019.495749][   T28] audit: type=1400 audit(2275.535:12857): avc:  denied  { mounton } for  pid=23881 comm="syz.3.6145" path="/100/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[ 2020.511311][T21948] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 2020.539486][T23911] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6154'.
[ 2020.548492][T23911] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6154'.
[ 2020.560119][T23911] netlink: 'syz.3.6154': attribute type 6 has an invalid length.
[ 2020.567856][T23911] netlink: 'syz.3.6154': attribute type 5 has an invalid length.
[ 2020.575600][T23911] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6154'.
[ 2020.701325][T21948] usb 2-1: Using ep0 maxpacket: 32
[ 2020.708627][T21948] usb 2-1: config 0 has an invalid descriptor of length 219, skipping remainder of the config
[ 2020.718958][T21948] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2020.731941][T21948] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00
[ 2020.741010][T21948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2020.751415][T21948] usb 2-1: config 0 descriptor??
[ 2021.748813][T21948] usb 2-1: string descriptor 0 read error: -71
[ 2021.755439][T21948] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2021.763619][T21948] usb 2-1: USB disconnect, device number 18
[ 2023.170372][   T28] audit: type=1400 audit(2279.205:12858): avc:  denied  { listen } for  pid=23956 comm="syz.1.6168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 2023.197841][T23963] fuse: Bad value for 'fd'
[ 2024.486859][T23972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6173'.
[ 2024.566488][T23973] x_tables: duplicate underflow at hook 2
[ 2024.732271][   T28] audit: type=1400 audit(2280.775:12859): avc:  denied  { connect } for  pid=23980 comm="syz.1.6177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2024.741415][T23966] loop8: detected capacity change from 0 to 40427
[ 2024.767662][   T28] audit: type=1326 audit(2280.805:12860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23984 comm="syz.2.6179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15f658e969 code=0x0
[ 2024.905635][T23990] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6178'.
[ 2026.463883][T24014] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6185'.
[ 2026.581217][T24018] loop8: detected capacity change from 0 to 512
[ 2026.589772][T24018] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 2028.491578][T24018] EXT4-fs (loop8): 1 truncate cleaned up
[ 2028.497265][T24018] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 2028.551428][T24015] input: syz0 as /devices/virtual/input/input257
[ 2029.224445][T22321] EXT4-fs (loop8): unmounting filesystem.
[ 2031.791391][T21949] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 2031.995108][   T28] audit: type=1400 audit(2288.035:12861): avc:  denied  { read write } for  pid=24067 comm="syz.1.6203" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2032.057592][   T28] audit: type=1400 audit(2288.035:12862): avc:  denied  { open } for  pid=24067 comm="syz.1.6203" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2032.118641][   T28] audit: type=1400 audit(2288.075:12863): avc:  denied  { nlmsg_read } for  pid=24069 comm="syz.1.6205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[ 2032.139029][T21949] usb 4-1: Using ep0 maxpacket: 16
[ 2032.152091][T21949] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 2032.182456][T21949] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2032.199765][T21949] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 2032.210201][T21949] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30442, setting to 1024
[ 2032.279638][T24079] input: syz0 as /devices/virtual/input/input258
[ 2032.317538][T21949] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[ 2032.438668][T21949] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[ 2032.596864][T24081] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6201'.
[ 2032.612462][T21949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2032.636870][T21949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 2032.674363][T21949] usb 4-1: SerialNumber: syz
[ 2032.690380][T24054] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2032.704951][T21949] cdc_acm: probe of 4-1:1.0 failed with error -12
[ 2032.951658][T21949] usb 4-1: USB disconnect, device number 60
[ 2033.058062][T16662] usb 1-1: new full-speed USB device number 99 using dummy_hcd
[ 2034.244903][T24093] loop8: detected capacity change from 0 to 1024
[ 2034.261777][T24093] EXT4-fs: Ignoring removed nobh option
[ 2034.307651][T24093] EXT4-fs: Ignoring removed bh option
[ 2034.365981][T24093] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 2034.367665][  T328] hid-generic 0000:0000:0000.0078: unknown main item tag 0x0
[ 2034.382389][T16662] usb 1-1: config 8 has an invalid interface number: 223 but max is 0
[ 2034.386745][  T328] hid-generic 0000:0000:0000.0078: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2034.394169][T16662] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[ 2034.412258][T16662] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 2034.422677][T16662] usb 1-1: config 8 has no interface number 0
[ 2034.423092][T24093] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 2035.385298][T24098] overlayfs: unrecognized mount option "verity=on" or missing value
[ 2035.401281][T16662] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[ 2035.412397][T16662] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2035.579411][T16662] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[ 2035.594119][T16662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2035.768830][T24111] overlayfs: failed to resolve './file0': -2
[ 2035.786579][T16662] usb 1-1: Product: syz
[ 2035.791227][T24108] EXT4-fs (loop8): unmounting filesystem.
[ 2035.797327][T16662] usb 1-1: Manufacturer: syz
[ 2035.802303][T16662] usb 1-1: SerialNumber: syz
[ 2035.817800][T16662] usb 1-1: can't set config #8, error -71
[ 2035.827697][T16662] usb 1-1: USB disconnect, device number 99
[ 2036.071550][T21948] usb 4-1: new low-speed USB device number 61 using dummy_hcd
[ 2036.272450][T21948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2036.392586][T24132] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2036.399867][T24132] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2036.408788][T24132] device bridge_slave_0 entered promiscuous mode
[ 2036.416243][T24132] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2036.423862][T24132] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2036.433157][T24132] device bridge_slave_1 entered promiscuous mode
[ 2036.481913][T21948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2036.491869][T21948] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[ 2036.500900][T21948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2036.511061][T21948] usb 4-1: config 0 descriptor??
[ 2036.554464][T24132] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2036.561575][T24132] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2036.568864][T24132] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2036.575930][T24132] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2036.612169][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2036.620037][T15914] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2036.627743][T15914] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2036.637162][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2036.646160][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2036.654482][T15914] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2036.661523][T15914] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2036.671074][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2036.679531][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2036.688283][T15914] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2036.695357][T15914] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2036.703578][T24146] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6228'.
[ 2036.718320][T16346] device bridge_slave_1 left promiscuous mode
[ 2036.724718][T16346] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2036.732431][T16346] device bridge_slave_0 left promiscuous mode
[ 2036.738603][T16346] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2036.747567][T16346] device veth1_macvtap left promiscuous mode
[ 2036.753677][T16346] device veth0_vlan left promiscuous mode
[ 2036.924578][T21948] steelseries_srws1 0003:1038:1410.0079: unknown main item tag 0x0
[ 2036.964399][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2036.975968][T21948] steelseries_srws1 0003:1038:1410.0079: item fetching failed at offset 2/7
[ 2036.986200][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2037.019225][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2037.028913][T21948] steelseries_srws1 0003:1038:1410.0079: parse failed
[ 2037.045372][T21948] steelseries_srws1: probe of 0003:1038:1410.0079 failed with error -22
[ 2037.055254][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2037.098488][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2037.109095][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2037.154504][T24132] device veth0_vlan entered promiscuous mode
[ 2037.162509][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2037.172145][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2037.205738][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2037.215267][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2037.269664][T24132] device veth1_macvtap entered promiscuous mode
[ 2037.303000][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2037.345965][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2037.456308][   T28] audit: type=1400 audit(2293.495:12864): avc:  denied  { map } for  pid=24159 comm="syz.1.6233" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 2037.456649][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2037.496135][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2037.507168][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2037.546024][T24168] loop7: detected capacity change from 0 to 1024
[ 2037.553537][T24168] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[ 2037.627479][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2038.552610][T15914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2039.791895][   T28] audit: type=1400 audit(2295.835:12865): avc:  denied  { ioctl } for  pid=24177 comm="syz.2.6236" path="socket:[99619]" dev="sockfs" ino=99619 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2039.880227][T21949] usb 4-1: USB disconnect, device number 61
[ 2040.821441][T24188] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6238'.
[ 2041.739272][T24208] netlink: 'syz.1.6247': attribute type 27 has an invalid length.
[ 2041.986615][T24208] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2041.993907][T24208] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2042.031074][T24217] loop7: detected capacity change from 0 to 1024
[ 2042.043830][T24208] device wg2 left promiscuous mode
[ 2042.051837][T24216] FAULT_INJECTION: forcing a failure.
[ 2042.051837][T24216] name failslab, interval 1, probability 0, space 0, times 0
[ 2042.069827][T24216] CPU: 0 PID: 24216 Comm: syz.3.6250 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2042.071735][T24217] EXT4-fs: Ignoring removed nobh option
[ 2042.079748][T24216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2042.079764][T24216] Call Trace:
[ 2042.079771][T24216]  <TASK>
[ 2042.079778][T24216]  __dump_stack+0x21/0x24
[ 2042.097694][T24217] EXT4-fs: Ignoring removed bh option
[ 2042.098778][T24216]  dump_stack_lvl+0xee/0x150
[ 2042.106997][T24217] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 2042.111398][T24216]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2042.111430][T24216]  ? __stack_depot_save+0x36/0x480
[ 2042.137401][T24216]  dump_stack+0x15/0x24
[ 2042.141582][T24216]  should_fail_ex+0x3d4/0x520
[ 2042.146282][T24216]  __should_failslab+0xac/0xf0
[ 2042.151071][T24216]  should_failslab+0x9/0x20
[ 2042.155599][T24216]  slab_pre_alloc_hook+0x30/0x1e0
[ 2042.160641][T24216]  kmem_cache_alloc_lru+0x49/0x280
[ 2042.165771][T24216]  ? shmem_alloc_inode+0x28/0x40
[ 2042.170727][T24216]  shmem_alloc_inode+0x28/0x40
[ 2042.175512][T24216]  ? __cfi_shmem_alloc_inode+0x10/0x10
[ 2042.180991][T24216]  new_inode_pseudo+0x70/0x1f0
[ 2042.185774][T24216]  new_inode+0x28/0x1e0
[ 2042.185859][T24217] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2042.189937][T24216]  ? _raw_spin_lock+0x8e/0xe0
[ 2042.189972][T24216]  shmem_get_inode+0x349/0xc20
[ 2042.208241][T24216]  __shmem_file_setup+0x113/0x2b0
[ 2042.213291][T24216]  shmem_file_setup+0x2f/0x40
[ 2042.217988][T24216]  __se_sys_memfd_create+0x1e6/0x3b0
[ 2042.223296][T24216]  __x64_sys_memfd_create+0x5b/0x70
[ 2042.228511][T24216]  x64_sys_call+0x235/0x9a0
[ 2042.233043][T24216]  do_syscall_64+0x4c/0xa0
[ 2042.237487][T24216]  ? clear_bhb_loop+0x15/0x70
[ 2042.242180][T24216]  ? clear_bhb_loop+0x15/0x70
[ 2042.246891][T24216]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2042.252808][T24216] RIP: 0033:0x7f349118e969
[ 2042.257234][T24216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2042.276855][T24216] RSP: 002b:00007f3491f6ae18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[ 2042.285293][T24216] RAX: ffffffffffffffda RBX: 0000000000000bc2 RCX: 00007f349118e969
[ 2042.293289][T24216] RDX: 00007f3491f6aef0 RSI: 0000000000000000 RDI: 00007f3491211444
[ 2042.301277][T24216] RBP: 0000200000002a40 R08: 00007f3491f6abb7 R09: 00007f3491f6ae40
[ 2042.309266][T24216] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000240
[ 2042.317252][T24216] R13: 00007f3491f6aef0 R14: 00007f3491f6aeb0 R15: 0000200000000640
[ 2042.325247][T24216]  </TASK>
[ 2042.656352][T21949] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0
[ 2042.667550][T21949] hid-generic 0000:0000:0000.007A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2042.994950][T24244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6255'.
[ 2043.140487][T24132] EXT4-fs (loop7): unmounting filesystem.
[ 2043.187073][T24244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6255'.
[ 2043.237316][T24244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6255'.
[ 2043.469296][T24255] loop7: detected capacity change from 0 to 16
[ 2043.477739][T24255] erofs: (device loop7): mounted with root inode @ nid 36.
[ 2044.185960][T24267] FAULT_INJECTION: forcing a failure.
[ 2044.185960][T24267] name failslab, interval 1, probability 0, space 0, times 0
[ 2044.283093][T24267] CPU: 1 PID: 24267 Comm: syz.7.6264 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2044.293037][T24267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2044.303105][T24267] Call Trace:
[ 2044.306392][T24267]  <TASK>
[ 2044.309326][T24267]  __dump_stack+0x21/0x24
[ 2044.313677][T24267]  dump_stack_lvl+0xee/0x150
[ 2044.318280][T24267]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2044.323323][T24267]  ? __kasan_check_write+0x14/0x20
[ 2044.328451][T24267]  dump_stack+0x15/0x24
[ 2044.332620][T24267]  should_fail_ex+0x3d4/0x520
[ 2044.337314][T24267]  ? __build_skb+0x2d/0x410
[ 2044.341835][T24267]  __should_failslab+0xac/0xf0
[ 2044.346623][T24267]  should_failslab+0x9/0x20
[ 2044.351143][T24267]  kmem_cache_alloc+0x3b/0x330
[ 2044.355921][T24267]  __build_skb+0x2d/0x410
[ 2044.360263][T24267]  build_skb+0x24/0x200
[ 2044.364435][T24267]  ? tun_get_user+0x85b/0x31a0
[ 2044.369216][T24267]  tun_get_user+0x877/0x31a0
[ 2044.373831][T24267]  ? tun_do_read+0x1c20/0x1c20
[ 2044.378616][T24267]  ? __kasan_check_write+0x14/0x20
[ 2044.383743][T24267]  ? ref_tracker_alloc+0x30f/0x430
[ 2044.388870][T24267]  ? __cfi_ref_tracker_alloc+0x10/0x10
[ 2044.394358][T24267]  ? avc_policy_seqno+0x1b/0x70
[ 2044.399224][T24267]  ? selinux_file_permission+0x2a5/0x510
[ 2044.404866][T24267]  tun_chr_write_iter+0x1fb/0x300
[ 2044.409918][T24267]  vfs_write+0x5db/0xca0
[ 2044.414178][T24267]  ? slab_free_freelist_hook+0xc2/0x190
[ 2044.419742][T24267]  ? __cfi_vfs_write+0x10/0x10
[ 2044.424522][T24267]  ? __fget_files+0x2d5/0x330
[ 2044.429222][T24267]  ? __fdget_pos+0x1f2/0x380
[ 2044.433826][T24267]  ? ksys_write+0x71/0x240
[ 2044.438266][T24267]  ksys_write+0x140/0x240
[ 2044.442608][T24267]  ? __cfi_ksys_write+0x10/0x10
[ 2044.447473][T24267]  ? debug_smp_processor_id+0x17/0x20
[ 2044.452856][T24267]  __x64_sys_write+0x7b/0x90
[ 2044.457466][T24267]  x64_sys_call+0x27b/0x9a0
[ 2044.461983][T24267]  do_syscall_64+0x4c/0xa0
[ 2044.466415][T24267]  ? clear_bhb_loop+0x15/0x70
[ 2044.471101][T24267]  ? clear_bhb_loop+0x15/0x70
[ 2044.475790][T24267]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2044.481701][T24267] RIP: 0033:0x7f8b0878d41f
[ 2044.486123][T24267] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 2044.505739][T24267] RSP: 002b:00007f8b0959f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2044.514165][T24267] RAX: ffffffffffffffda RBX: 00007f8b089b5fa0 RCX: 00007f8b0878d41f
[ 2044.522145][T24267] RDX: 0000000000000036 RSI: 0000200000000340 RDI: 00000000000000c8
[ 2044.530124][T24267] RBP: 00007f8b0959f090 R08: 0000000000000000 R09: 0000000000000000
[ 2044.538101][T24267] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001
[ 2044.546077][T24267] R13: 0000000000000000 R14: 00007f8b089b5fa0 R15: 00007fff86d94788
[ 2044.554065][T24267]  </TASK>
[ 2046.179913][T24292] FAULT_INJECTION: forcing a failure.
[ 2046.179913][T24292] name failslab, interval 1, probability 0, space 0, times 0
[ 2046.194198][T24292] CPU: 0 PID: 24292 Comm: syz.1.6272 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2046.204116][T24292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2046.214185][T24292] Call Trace:
[ 2046.217478][T24292]  <TASK>
[ 2046.220419][T24292]  __dump_stack+0x21/0x24
[ 2046.224770][T24292]  dump_stack_lvl+0xee/0x150
[ 2046.229389][T24292]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2046.234440][T24292]  dump_stack+0x15/0x24
[ 2046.238617][T24292]  should_fail_ex+0x3d4/0x520
[ 2046.243311][T24292]  __should_failslab+0xac/0xf0
[ 2046.248091][T24292]  ? slhc_init+0x77/0x770
[ 2046.252441][T24292]  should_failslab+0x9/0x20
[ 2046.256970][T24292]  __kmem_cache_alloc_node+0x3d/0x2c0
[ 2046.262458][T24292]  ? security_file_permission+0x94/0xb0
[ 2046.268022][T24292]  ? slhc_init+0x77/0x770
[ 2046.272370][T24292]  kmalloc_trace+0x29/0xb0
[ 2046.276806][T24292]  slhc_init+0x77/0x770
[ 2046.281060][T24292]  ppp_ioctl+0x126d/0x1690
[ 2046.285477][T24292]  ? mutex_unlock+0x89/0x220
[ 2046.290071][T24292]  ? __cfi_mutex_unlock+0x10/0x10
[ 2046.295103][T24292]  ? __cfi_ppp_ioctl+0x10/0x10
[ 2046.299874][T24292]  ? __fget_files+0x2d5/0x330
[ 2046.304554][T24292]  ? security_file_ioctl+0x95/0xc0
[ 2046.309660][T24292]  ? __cfi_ppp_ioctl+0x10/0x10
[ 2046.314422][T24292]  __se_sys_ioctl+0x12f/0x1b0
[ 2046.319103][T24292]  __x64_sys_ioctl+0x7b/0x90
[ 2046.323691][T24292]  x64_sys_call+0x58b/0x9a0
[ 2046.328190][T24292]  do_syscall_64+0x4c/0xa0
[ 2046.332602][T24292]  ? clear_bhb_loop+0x15/0x70
[ 2046.337274][T24292]  ? clear_bhb_loop+0x15/0x70
[ 2046.341941][T24292]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2046.347838][T24292] RIP: 0033:0x7fd39598e969
[ 2046.352249][T24292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2046.371856][T24292] RSP: 002b:00007fd3968b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2046.380264][T24292] RAX: ffffffffffffffda RBX: 00007fd395bb5fa0 RCX: 00007fd39598e969
[ 2046.388227][T24292] RDX: 0000200000000180 RSI: 0000000040047451 RDI: 0000000000000003
[ 2046.396194][T24292] RBP: 00007fd3968b2090 R08: 0000000000000000 R09: 0000000000000000
[ 2046.404156][T24292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2046.412121][T24292] R13: 0000000000000000 R14: 00007fd395bb5fa0 R15: 00007ffc96c59f38
[ 2046.420091][T24292]  </TASK>
[ 2046.607676][T21949] hid (null): invalid report_count -17808080
[ 2046.618927][T21949] hid-generic 0005:03FF:0004.007B: collection stack underflow
[ 2046.645006][T21949] hid-generic 0005:03FF:0004.007B: item 0 2 0 12 parsing failed
[ 2046.665212][T21949] hid-generic: probe of 0005:03FF:0004.007B failed with error -22
[ 2048.850345][T24343] netem: change failed
[ 2048.877777][T24336] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6282'.
[ 2048.990678][   T28] audit: type=1400 audit(2305.025:12866): avc:  denied  { lock } for  pid=24346 comm="syz.2.6286" path="socket:[100090]" dev="sockfs" ino=100090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[ 2049.774191][   T28] audit: type=1400 audit(2305.815:12867): avc:  denied  { write } for  pid=24353 comm="syz.1.6289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2050.547201][   T28] audit: type=1400 audit(2306.575:12868): avc:  denied  { setopt } for  pid=24353 comm="syz.1.6289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2051.024204][T24373] loop7: detected capacity change from 0 to 128
[ 2051.174124][T24373] syz.7.6292: attempt to access beyond end of device
[ 2051.174124][T24373] loop7: rw=0, sector=121, nr_sectors = 120 limit=128
[ 2051.187636][T16662] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 2051.283327][T14415] kworker/u4:0: attempt to access beyond end of device
[ 2051.283327][T14415] loop7: rw=1, sector=241, nr_sectors = 800 limit=128
[ 2051.412434][T16662] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 2051.422418][T16662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2051.430999][T16662] usb 1-1: config 0 descriptor??
[ 2052.458713][T24395] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6299'.
[ 2052.541307][T21948] usb 8-1: new low-speed USB device number 19 using dummy_hcd
[ 2054.134401][T24402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2054.261570][T24402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2054.900699][T21948] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2054.919933][T21948] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2054.930226][T21948] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[ 2054.939513][T21948] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2055.321196][T24415] device pim6reg1 entered promiscuous mode
[ 2055.360233][T16662] usb 1-1: Cannot set autoneg
[ 2055.365028][T16662] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71
[ 2055.373712][T21948] usb 8-1: config 0 descriptor??
[ 2055.380373][T16662] usb 1-1: USB disconnect, device number 100
[ 2055.548062][T24425] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6308'.
[ 2055.630709][T24429] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6309'.
[ 2055.716897][T24426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6307'.
[ 2056.396518][T21948] usbhid 8-1:0.0: can't add hid device: -71
[ 2056.411444][T21948] usbhid: probe of 8-1:0.0 failed with error -71
[ 2056.427972][T21948] usb 8-1: USB disconnect, device number 19
[ 2057.609642][T24475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6323'.
[ 2057.750206][T24480] FAULT_INJECTION: forcing a failure.
[ 2057.750206][T24480] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2057.781331][T24480] CPU: 0 PID: 24480 Comm: syz.7.6324 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2057.791263][T24480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2057.801326][T24480] Call Trace:
[ 2057.804617][T24480]  <TASK>
[ 2057.807553][T24480]  __dump_stack+0x21/0x24
[ 2057.811902][T24480]  dump_stack_lvl+0xee/0x150
[ 2057.816502][T24480]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2057.821545][T24480]  dump_stack+0x15/0x24
[ 2057.825711][T24480]  should_fail_ex+0x3d4/0x520
[ 2057.830408][T24480]  should_fail+0xb/0x10
[ 2057.834576][T24480]  should_fail_usercopy+0x1a/0x20
[ 2057.839616][T24480]  _copy_from_user+0x1e/0xc0
[ 2057.844219][T24480]  iovec_from_user+0x1aa/0x2e0
[ 2057.849004][T24480]  __import_iovec+0x71/0x470
[ 2057.853623][T24480]  import_iovec+0x7c/0xb0
[ 2057.857930][T24480]  do_readv+0x1fe/0x3e0
[ 2057.862060][T24480]  ? generic_file_rw_checks+0x2a0/0x2a0
[ 2057.867590][T24480]  ? __kasan_check_write+0x14/0x20
[ 2057.872677][T24480]  ? fput+0x154/0x1a0
[ 2057.876646][T24480]  ? debug_smp_processor_id+0x17/0x20
[ 2057.882005][T24480]  __x64_sys_readv+0x7d/0x90
[ 2057.886577][T24480]  x64_sys_call+0x3bd/0x9a0
[ 2057.891056][T24480]  do_syscall_64+0x4c/0xa0
[ 2057.895452][T24480]  ? clear_bhb_loop+0x15/0x70
[ 2057.900115][T24480]  ? clear_bhb_loop+0x15/0x70
[ 2057.904769][T24480]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2057.910653][T24480] RIP: 0033:0x7f8b0878e969
[ 2057.915055][T24480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2057.934635][T24480] RSP: 002b:00007f8b0959f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[ 2057.943023][T24480] RAX: ffffffffffffffda RBX: 00007f8b089b5fa0 RCX: 00007f8b0878e969
[ 2057.950971][T24480] RDX: 0000000000000001 RSI: 0000200000001140 RDI: 0000000000000003
[ 2057.958919][T24480] RBP: 00007f8b0959f090 R08: 0000000000000000 R09: 0000000000000000
[ 2057.966866][T24480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2057.974810][T24480] R13: 0000000000000000 R14: 00007f8b089b5fa0 R15: 00007fff86d94788
[ 2057.982773][T24480]  </TASK>
[ 2058.086612][T24486] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6326'.
[ 2060.722302][T21949] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 2060.774006][T24519] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2060.911301][T21949] usb 1-1: Using ep0 maxpacket: 32
[ 2060.918335][T21949] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 2060.971759][T21949] usb 1-1: config 0 has no interface number 0
[ 2060.977986][T21949] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2060.989481][T21949] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2061.016206][T21949] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 2061.027076][T21949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2061.038226][T21949] usb 1-1: config 0 descriptor??
[ 2061.091592][T24537] FAULT_INJECTION: forcing a failure.
[ 2061.091592][T24537] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2061.104960][T24537] CPU: 1 PID: 24537 Comm: syz.2.6343 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2061.114860][T24537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2061.124927][T24537] Call Trace:
[ 2061.128216][T24537]  <TASK>
[ 2061.131155][T24537]  __dump_stack+0x21/0x24
[ 2061.135504][T24537]  dump_stack_lvl+0xee/0x150
[ 2061.140104][T24537]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2061.145151][T24537]  dump_stack+0x15/0x24
[ 2061.149318][T24537]  should_fail_ex+0x3d4/0x520
[ 2061.154006][T24537]  should_fail+0xb/0x10
[ 2061.158169][T24537]  should_fail_usercopy+0x1a/0x20
[ 2061.163201][T24537]  _copy_to_user+0x1e/0x90
[ 2061.167624][T24537]  simple_read_from_buffer+0xe9/0x160
[ 2061.173010][T24537]  proc_fail_nth_read+0x19a/0x210
[ 2061.178048][T24537]  ? __cfi_proc_fail_nth_read+0x10/0x10
[ 2061.183609][T24537]  ? security_file_permission+0x94/0xb0
[ 2061.189166][T24537]  ? __cfi_proc_fail_nth_read+0x10/0x10
[ 2061.194723][T24537]  vfs_read+0x26e/0x8c0
[ 2061.198894][T24537]  ? __cfi_vfs_read+0x10/0x10
[ 2061.203589][T24537]  ? __kasan_check_write+0x14/0x20
[ 2061.208716][T24537]  ? mutex_lock+0x8d/0x1a0
[ 2061.213146][T24537]  ? __cfi_mutex_lock+0x10/0x10
[ 2061.218016][T24537]  ? __fdget_pos+0x2cd/0x380
[ 2061.222622][T24537]  ? ksys_read+0x71/0x240
[ 2061.226975][T24537]  ksys_read+0x140/0x240
[ 2061.231229][T24537]  ? __cfi_ksys_read+0x10/0x10
[ 2061.236006][T24537]  ? __bpf_trace_sys_enter+0x62/0x70
[ 2061.241303][T24537]  __x64_sys_read+0x7b/0x90
[ 2061.245832][T24537]  x64_sys_call+0x2f/0x9a0
[ 2061.250263][T24537]  do_syscall_64+0x4c/0xa0
[ 2061.254694][T24537]  ? clear_bhb_loop+0x15/0x70
[ 2061.259376][T24537]  ? clear_bhb_loop+0x15/0x70
[ 2061.264055][T24537]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2061.269966][T24537] RIP: 0033:0x7f15f658d37c
[ 2061.274386][T24537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2061.293997][T24537] RSP: 002b:00007f15f730f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2061.302510][T24537] RAX: ffffffffffffffda RBX: 00007f15f67b5fa0 RCX: 00007f15f658d37c
[ 2061.310487][T24537] RDX: 000000000000000f RSI: 00007f15f730f0a0 RDI: 0000000000000006
[ 2061.318469][T24537] RBP: 00007f15f730f090 R08: 0000000000000000 R09: 0000000000000000
[ 2061.326442][T24537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2061.334415][T24537] R13: 0000000000000000 R14: 00007f15f67b5fa0 R15: 00007fffd3856168
[ 2061.342401][T24537]  </TASK>
[ 2061.691403][  T328] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 2061.717696][T24552] loop7: detected capacity change from 0 to 1024
[ 2061.724685][T24552] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[ 2061.752312][T21949] uclogic 0003:28BD:0094.007C: pen parameters not found
[ 2061.759263][T21949] uclogic 0003:28BD:0094.007C: interface is invalid, ignoring
[ 2061.998050][T21949] usb 1-1: USB disconnect, device number 101
[ 2062.224373][  T328] usb 3-1: Using ep0 maxpacket: 16
[ 2062.232003][  T328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2062.242912][  T328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2062.252710][  T328] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 2062.261790][  T328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2062.281446][  T328] usb 3-1: config 0 descriptor??
[ 2062.291276][   T19] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 2062.481264][   T19] usb 2-1: Using ep0 maxpacket: 16
[ 2062.488000][T24543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2062.488122][   T19] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[ 2062.496769][T24543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2062.505452][   T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2062.531532][   T19] usb 2-1: config 0 descriptor??
[ 2062.612597][T24567] device batadv_slave_1 entered promiscuous mode
[ 2062.630477][T24567] incfs_lookup_dentry err:-40
[ 2062.636421][T24567] incfs_lookup_dentry err:-40
[ 2062.641501][T24567] incfs_lookup_dentry err:-40
[ 2062.647222][T24567] incfs_lookup_dentry err:-40
[ 2062.653871][T24566] device batadv_slave_1 left promiscuous mode
[ 2062.709825][T24571] loop7: detected capacity change from 0 to 512
[ 2062.716536][T24571] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 2062.728239][T24571] EXT4-fs (loop7): 1 truncate cleaned up
[ 2062.734047][T24571] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2062.744115][  T328] hid-multitouch 0003:1FD2:6007.007D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[ 2062.794274][T24132] EXT4-fs (loop7): unmounting filesystem.
[ 2062.845227][T24576] loop7: detected capacity change from 0 to 512
[ 2062.851912][T24576] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 2062.863240][T24576] EXT4-fs (loop7): 1 truncate cleaned up
[ 2062.868888][T24576] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2062.892406][T24576] FAULT_INJECTION: forcing a failure.
[ 2062.892406][T24576] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2062.905492][T24576] CPU: 0 PID: 24576 Comm: syz.7.6357 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2062.915384][T24576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2062.925437][T24576] Call Trace:
[ 2062.928699][T24576]  <TASK>
[ 2062.931609][T24576]  __dump_stack+0x21/0x24
[ 2062.935918][T24576]  dump_stack_lvl+0xee/0x150
[ 2062.940485][T24576]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2062.945493][T24576]  ? _parse_integer+0x2a/0x40
[ 2062.950147][T24576]  dump_stack+0x15/0x24
[ 2062.954281][T24576]  should_fail_ex+0x3d4/0x520
[ 2062.958935][T24576]  should_fail+0xb/0x10
[ 2062.963070][T24576]  should_fail_usercopy+0x1a/0x20
[ 2062.968078][T24576]  _copy_from_user+0x1e/0xc0
[ 2062.972644][T24576]  ___sys_sendmsg+0x155/0x290
[ 2062.977310][T24576]  ? __sys_sendmsg+0x270/0x270
[ 2062.982053][T24576]  ? __kasan_check_write+0x14/0x20
[ 2062.987149][T24576]  ? proc_fail_nth_write+0x17a/0x1f0
[ 2062.992415][T24576]  ? vfs_write+0x9d6/0xca0
[ 2062.996820][T24576]  ? __fdget+0x19c/0x220
[ 2063.001065][T24576]  __x64_sys_sendmsg+0x1f0/0x2c0
[ 2063.005986][T24576]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 2063.011449][T24576]  ? fpregs_assert_state_consistent+0xb1/0xe0
[ 2063.017516][T24576]  x64_sys_call+0x171/0x9a0
[ 2063.022020][T24576]  do_syscall_64+0x4c/0xa0
[ 2063.026436][T24576]  ? clear_bhb_loop+0x15/0x70
[ 2063.031107][T24576]  ? clear_bhb_loop+0x15/0x70
[ 2063.035783][T24576]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2063.041678][T24576] RIP: 0033:0x7f8b0878e969
[ 2063.046088][T24576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2063.065692][T24576] RSP: 002b:00007f8b0959f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2063.074103][T24576] RAX: ffffffffffffffda RBX: 00007f8b089b5fa0 RCX: 00007f8b0878e969
[ 2063.082068][T24576] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[ 2063.090033][T24576] RBP: 00007f8b0959f090 R08: 0000000000000000 R09: 0000000000000000
[ 2063.097996][T24576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2063.105963][T24576] R13: 0000000000000000 R14: 00007f8b089b5fa0 R15: 00007fff86d94788
[ 2063.113931][T24576]  </TASK>
[ 2063.130626][T21948] usb 3-1: USB disconnect, device number 118
[ 2063.154486][T24132] EXT4-fs (loop7): unmounting filesystem.
[ 2063.202374][   T19] usbhid 2-1:0.0: can't add hid device: -71
[ 2063.208334][   T19] usbhid: probe of 2-1:0.0 failed with error -71
[ 2063.215952][   T19] usb 2-1: USB disconnect, device number 19
[ 2063.297767][T24588] loop7: detected capacity change from 0 to 512
[ 2063.305718][T24588] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 2063.317009][T24588] EXT4-fs (loop7): 1 truncate cleaned up
[ 2063.322717][T24588] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2063.362889][T24132] EXT4-fs (loop7): unmounting filesystem.
[ 2063.451568][T24597] loop7: detected capacity change from 0 to 256
[ 2063.457976][T24597] FAT-fs (loop7): Unrecognized mount option "short
Ňá~):0Z›üéname=win95" or missing value
[ 2064.061484][T21949] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 2064.129642][T24612] FAULT_INJECTION: forcing a failure.
[ 2064.129642][T24612] name failslab, interval 1, probability 0, space 0, times 0
[ 2064.155842][T24612] CPU: 1 PID: 24612 Comm: syz.1.6367 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2064.165777][T24612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2064.175848][T24612] Call Trace:
[ 2064.179140][T24612]  <TASK>
[ 2064.182083][T24612]  __dump_stack+0x21/0x24
[ 2064.186442][T24612]  dump_stack_lvl+0xee/0x150
[ 2064.191058][T24612]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2064.196124][T24612]  dump_stack+0x15/0x24
[ 2064.200312][T24612]  should_fail_ex+0x3d4/0x520
[ 2064.205026][T24612]  __should_failslab+0xac/0xf0
[ 2064.209819][T24612]  ? alloc_pipe_info+0xe7/0x4b0
[ 2064.214688][T24612]  should_failslab+0x9/0x20
[ 2064.219213][T24612]  __kmem_cache_alloc_node+0x3d/0x2c0
[ 2064.224608][T24612]  ? alloc_pipe_info+0xe7/0x4b0
[ 2064.229487][T24612]  kmalloc_trace+0x29/0xb0
[ 2064.233928][T24612]  alloc_pipe_info+0xe7/0x4b0
[ 2064.238623][T24612]  splice_direct_to_actor+0x956/0xb10
[ 2064.244018][T24612]  ? __kasan_check_read+0x11/0x20
[ 2064.249064][T24612]  ? preempt_schedule_irq+0xbb/0x110
[ 2064.254372][T24612]  ? __cfi_preempt_schedule_irq+0x10/0x10
[ 2064.260114][T24612]  ? selinux_file_permission+0x2a5/0x510
[ 2064.265753][T24612]  ? fsnotify_perm+0x67/0x5b0
[ 2064.270410][T24612]  ? security_file_permission+0x8a/0xb0
[ 2064.275937][T24612]  ? __cfi_direct_splice_actor+0x10/0x10
[ 2064.281548][T24612]  ? __cfi_splice_direct_to_actor+0x10/0x10
[ 2064.287429][T24612]  ? security_file_permission+0x94/0xb0
[ 2064.292954][T24612]  ? rw_verify_area+0xa7/0x1c0
[ 2064.297700][T24612]  do_splice_direct+0x1b3/0x2c0
[ 2064.302531][T24612]  ? avc_policy_seqno+0x1b/0x70
[ 2064.307369][T24612]  ? __cfi_do_splice_direct+0x10/0x10
[ 2064.312734][T24612]  ? security_file_permission+0x94/0xb0
[ 2064.318300][T24612]  do_sendfile+0x5c6/0xeb0
[ 2064.322729][T24612]  ? __cfi_vfs_write+0x10/0x10
[ 2064.327511][T24612]  ? do_preadv+0x330/0x330
[ 2064.331938][T24612]  __x64_sys_sendfile64+0x18f/0x1f0
[ 2064.337149][T24612]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[ 2064.342803][T24612]  ? __cfi___x64_sys_sendfile64+0x10/0x10
[ 2064.348524][T24612]  x64_sys_call+0x62c/0x9a0
[ 2064.353022][T24612]  do_syscall_64+0x4c/0xa0
[ 2064.357440][T24612]  ? clear_bhb_loop+0x15/0x70
[ 2064.362109][T24612]  ? clear_bhb_loop+0x15/0x70
[ 2064.366779][T24612]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2064.372678][T24612] RIP: 0033:0x7fd39598e969
[ 2064.377085][T24612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2064.396683][T24612] RSP: 002b:00007fd3968b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2064.405093][T24612] RAX: ffffffffffffffda RBX: 00007fd395bb5fa0 RCX: 00007fd39598e969
[ 2064.413057][T24612] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
[ 2064.421026][T24612] RBP: 00007fd3968b2090 R08: 0000000000000000 R09: 0000000000000000
[ 2064.428988][T24612] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001
[ 2064.436956][T24612] R13: 0000000000000000 R14: 00007fd395bb5fa0 R15: 00007ffc96c59f38
[ 2064.444922][T24612]  </TASK>
[ 2064.570893][T24634] FAULT_INJECTION: forcing a failure.
[ 2064.570893][T24634] name failslab, interval 1, probability 0, space 0, times 0
[ 2064.585575][T21949] usb 4-1: Using ep0 maxpacket: 16
[ 2064.590887][T24634] CPU: 1 PID: 24634 Comm: syz.0.6374 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2064.591304][   T19] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 2064.600797][T24634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2064.600812][T24634] Call Trace:
[ 2064.600819][T24634]  <TASK>
[ 2064.600827][T24634]  __dump_stack+0x21/0x24
[ 2064.629008][T24634]  dump_stack_lvl+0xee/0x150
[ 2064.633583][T24634]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2064.638582][T24634]  ? ____fput+0x15/0x20
[ 2064.642726][T24634]  ? exit_to_user_mode_loop+0x9b/0xb0
[ 2064.648071][T24634]  ? exit_to_user_mode_prepare+0x5a/0xa0
[ 2064.653676][T24634]  ? syscall_exit_to_user_mode+0x1a/0x30
[ 2064.659286][T24634]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2064.665340][T24634]  dump_stack+0x15/0x24
[ 2064.669489][T24634]  should_fail_ex+0x3d4/0x520
[ 2064.674148][T24634]  __should_failslab+0xac/0xf0
[ 2064.678926][T24634]  ? tracepoint_probe_unregister+0x1e6/0x8b0
[ 2064.684926][T24634]  should_failslab+0x9/0x20
[ 2064.689455][T24634]  __kmem_cache_alloc_node+0x3d/0x2c0
[ 2064.694845][T24634]  ? __cfi_mutex_lock+0x10/0x10
[ 2064.699713][T24634]  ? delete_node+0x2f4/0xa60
[ 2064.704326][T24634]  ? tracepoint_probe_unregister+0x1e6/0x8b0
[ 2064.710326][T24634]  __kmalloc+0xa1/0x1e0
[ 2064.714504][T24634]  ? __cfi___bpf_trace_sched_switch+0x10/0x10
[ 2064.720596][T24634]  tracepoint_probe_unregister+0x1e6/0x8b0
[ 2064.726423][T24634]  bpf_probe_unregister+0x61/0x70
[ 2064.731470][T24634]  bpf_raw_tp_link_release+0x63/0x90
[ 2064.731665][T24638] loop7: detected capacity change from 0 to 512
[ 2064.736775][T24634]  bpf_link_free+0x13a/0x390
[ 2064.743154][T24638] EXT4-fs: Ignoring removed oldalloc option
[ 2064.747580][T24634]  ? bpf_link_put_deferred+0x20/0x20
[ 2064.754488][T24638] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 2064.758740][T24634]  ? security_file_free+0xd8/0xf0
[ 2064.758771][T24634]  bpf_link_release+0x15f/0x170
[ 2064.769692][   T28] audit: type=1400 audit(2320.765:12869): avc:  denied  { remount } for  pid=24635 comm="syz.7.6376" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 2064.773569][T24634]  ? __cfi_bpf_link_release+0x10/0x10
[ 2064.773607][T24634]  __fput+0x1fc/0x8f0
[ 2064.773631][T24634]  ____fput+0x15/0x20
[ 2064.773649][T24634]  task_work_run+0x1db/0x240
[ 2064.773670][T24634]  ? __cfi_task_work_run+0x10/0x10
[ 2064.780126][T24638] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #16: comm syz.7.6376: invalid indirect mapped block 4294967295 (level 0)
[ 2064.798200][T24634]  ? __cfi___close_range+0x10/0x10
[ 2064.798230][T24634]  ? do_user_addr_fault+0x9ac/0x1050
[ 2064.798255][T24634]  exit_to_user_mode_loop+0x9b/0xb0
[ 2064.798275][T24634]  exit_to_user_mode_prepare+0x5a/0xa0
[ 2064.798294][T24634]  syscall_exit_to_user_mode+0x1a/0x30
[ 2064.804638][T24638] EXT4-fs (loop7): Remounting filesystem read-only
[ 2064.807633][T24634]  do_syscall_64+0x58/0xa0
[ 2064.807660][T24634]  ? clear_bhb_loop+0x15/0x70
[ 2064.807680][T24634]  ? clear_bhb_loop+0x15/0x70
[ 2064.811673][T24638] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #16: comm syz.7.6376: invalid indirect mapped block 4294967295 (level 1)
[ 2064.816216][T24634]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2064.816244][T24634] RIP: 0033:0x7f6b0638e969
[ 2064.821694][T24638] EXT4-fs (loop7): Remounting filesystem read-only
[ 2064.835198][T24634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2064.835217][T24634] RSP: 002b:00007f6b07127038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 2064.835240][T24634] RAX: 0000000000000000 RBX: 00007f6b065b6080 RCX: 00007f6b0638e969
[ 2064.840500][T24638] EXT4-fs (loop7): 1 orphan inode deleted
[ 2064.845619][T24634] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[ 2064.845636][T24634] RBP: 00007f6b07127090 R08: 0000000000000000 R09: 0000000000000000
[ 2064.845648][T24634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2064.845660][T24634] R13: 0000000000000001 R14: 00007f6b065b6080 R15: 00007fff0dbf02b8
[ 2064.845678][T24634]  </TASK>
[ 2064.856512][T21949] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2064.861980][T24638] EXT4-fs (loop7): 1 truncate cleaned up
[ 2064.882302][T21949] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2064.882329][T21949] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2064.882356][T21949] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2064.896232][T24638] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2064.896552][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2064.915558][T21949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2064.933286][T24634] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69)
[ 2064.941398][T21949] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69)
[ 2064.949146][T24634] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 2065.088155][T24634] CPU: 0 PID: 24634 Comm: syz.0.6374 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2065.098022][T24634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2065.108071][T24634] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0
[ 2065.114202][T24634] Code: 80 3c 30 00 74 05 e8 84 4a 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74
[ 2065.133783][T24634] RSP: 0018:ffffc9000144fc10 EFLAGS: 00010096
[ 2065.139827][T24634] RAX: 1ffff110280d3596 RBX: ffff88814069aca8 RCX: ffff888124132880
[ 2065.147787][T24634] RDX: ffff88811027a880 RSI: 0000000000000001 RDI: ffffc90002443000
[ 2065.155733][T24634] RBP: ffffc9000144fc50 R08: 0000000000000000 R09: fffffbfff0ee43d6
[ 2065.163680][T24634] R10: 00000000b720eca3 R11: 1ffffffff0ee43d5 R12: 0000000000000001
[ 2065.171624][T24634] R13: ffff88814069aca8 R14: dffffc0000000000 R15: ffffffff81710320
[ 2065.179574][T24634] FS:  00007f6b071276c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 2065.188475][T24634] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2065.195046][T24634] CR2: 00007f6b063edbf8 CR3: 0000000171bf2000 CR4: 00000000003506b0
[ 2065.202992][T24634] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000
[ 2065.210934][T24634] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2065.218880][T24634] Call Trace:
[ 2065.222134][T24634]  <TASK>
[ 2065.225042][T24634]  __schedule+0x1263/0x14e0
[ 2065.229523][T24634]  ? release_firmware_map_entry+0x194/0x194
[ 2065.235386][T24634]  ? probe_sched_wakeup+0x71/0x90
[ 2065.240384][T24634]  ? preempt_schedule+0xa7/0xb0
[ 2065.245220][T24634]  preempt_schedule_common+0x9b/0xf0
[ 2065.250491][T24634]  preempt_schedule+0xa7/0xb0
[ 2065.255140][T24634]  ? __cfi_preempt_schedule+0x10/0x10
[ 2065.260484][T24634]  ? try_to_wake_up+0x613/0x1220
[ 2065.265407][T24634]  preempt_schedule_thunk+0x16/0x18
[ 2065.270580][T24634]  _raw_spin_unlock_irq+0x60/0x70
[ 2065.275576][T24634]  do_group_exit+0x200/0x2d0
[ 2065.280143][T24634]  __x64_sys_exit_group+0x3f/0x40
[ 2065.285141][T24634]  x64_sys_call+0x7b4/0x9a0
[ 2065.289613][T24634]  do_syscall_64+0x4c/0xa0
[ 2065.294022][T24634]  ? clear_bhb_loop+0x15/0x70
[ 2065.298673][T24634]  ? clear_bhb_loop+0x15/0x70
[ 2065.303351][T24634]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2065.309219][T24634] RIP: 0033:0x7f6b0638e969
[ 2065.313636][T24634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2065.333216][T24634] RSP: 002b:00007f6b07126f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 2065.341605][T24634] RAX: ffffffffffffffda RBX: 00007f6b063edbf8 RCX: 00007f6b0638e969
[ 2065.349565][T24634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 2065.357513][T24634] RBP: 0000000000000009 R08: 00007f6b07124ce7 R09: 0000000000000001
[ 2065.365474][T24634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2065.373420][T24634] R13: 0000000000000001 R14: 00007f6b065b6080 R15: 00007fff0dbf02b8
[ 2065.381370][T24634]  </TASK>
[ 2065.384362][T24634] Modules linked in:
[ 2065.388236][T24634] ---[ end trace 0000000000000000 ]---
[ 2065.388268][T21949] invalid opcode: 0000 [#2] PREEMPT SMP KASAN
[ 2065.393674][T24634] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0
[ 2065.399733][T21949] CPU: 1 PID: 21949 Comm: kworker/1:12 Tainted: G      D            6.1.134-syzkaller-00012-g646380b087a5 #0
[ 2065.405953][T24634] Code: 80 3c 30 00 74 05 e8 84 4a 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74
[ 2065.417468][T21949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 2065.437057][T24634] RSP: 0018:ffffc9000144fc10 EFLAGS: 00010096
[ 2065.447103][T21949] Workqueue: usb_hub_wq hub_event
[ 2065.453152][T24634] RAX: 1ffff110280d3596 RBX: ffff88814069aca8 RCX: ffff888124132880
[ 2065.458163][T21949] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0
[ 2065.466122][T24634] RDX: ffff88811027a880 RSI: 0000000000000001 RDI: ffffc90002443000
[ 2065.472256][T21949] Code: 80 3c 30 00 74 05 e8 84 4a 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74
[ 2065.480210][T24634] RBP: ffffc9000144fc50 R08: 0000000000000000 R09: fffffbfff0ee43d6
[ 2065.499797][T21949] RSP: 0018:ffffc90000c17210 EFLAGS: 00010096
[ 2065.507751][T24634] R10: 00000000b720eca3 R11: 1ffffffff0ee43d5 R12: 0000000000000001
[ 2065.513804][T21949] RAX: 1ffff110280d3596 RBX: ffff88814069aca8 RCX: ffff88811e6be540
[ 2065.521774][T24634] R13: ffff88814069aca8 R14: dffffc0000000000 R15: ffffffff81710320
[ 2065.529734][T21949] RDX: ffff88811eb1a880 RSI: 0000000000000001 RDI: ffffc90002443000
[ 2065.537688][T24634] FS:  00007f6b071276c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 2065.545645][T21949] RBP: ffffc90000c17250 R08: 0000000000000000 R09: fffffbfff0ee43d6
[ 2065.554554][T24634] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2065.562510][T21949] R10: 00000000b720eca3 R11: 1ffffffff0ee43d5 R12: 0000000000000001
[ 2065.569078][T24634] CR2: 00007f6b063edbf8 CR3: 0000000171bf2000 CR4: 00000000003506b0
[ 2065.577036][T21949] R13: ffff88814069aca8 R14: dffffc0000000000 R15: ffffffff81710320
[ 2065.584994][T24634] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000
[ 2065.592947][T21949] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 2065.600902][T24634] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2065.609816][T21949] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2065.617773][T24634] Kernel panic - not syncing: Fatal exception
[ 2065.624343][T21949] CR2: 000000110c2e00df CR3: 000000011c2f0000 CR4: 00000000003506a0
[ 2065.624361][T21949] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2065.624371][T21949] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2065.624382][T21949] Call Trace:
[ 2065.624389][T21949]  <TASK>
[ 2065.624397][T21949]  __schedule+0x1263/0x14e0
[ 2065.624424][T21949]  ? release_firmware_map_entry+0x194/0x194
[ 2065.624447][T21949]  ? __cfi_vprintk_store+0x10/0x10
[ 2065.624464][T21949]  ? format_decode+0xbbf/0x1520
[ 2065.624486][T21949]  ? preempt_schedule+0xa7/0xb0
[ 2065.624507][T21949]  preempt_schedule_common+0x9b/0xf0
[ 2065.624528][T21949]  preempt_schedule+0xa7/0xb0
[ 2065.624548][T21949]  ? __cfi_preempt_schedule+0x10/0x10
[ 2065.624569][T21949]  ? __cfi_console_unlock+0x10/0x10
[ 2065.624587][T21949]  preempt_schedule_thunk+0x16/0x18
[ 2065.624609][T21949]  ? vprintk_emit+0x3aa/0x410
[ 2065.624626][T21949]  vprintk_emit+0x3af/0x410
[ 2065.624643][T21949]  ? __cfi_vprintk_emit+0x10/0x10
[ 2065.624659][T21949]  ? debug_smp_processor_id+0x17/0x20
[ 2065.624679][T21949]  dev_vprintk_emit+0x330/0x3d8
[ 2065.624699][T21949]  ? __cfi_dev_vprintk_emit+0x8/0x8
[ 2065.624718][T21949]  ? __kmem_cache_free+0xb7/0x1b0
[ 2065.624739][T21949]  dev_printk_emit+0xdd/0x120
[ 2065.624759][T21949]  ? __cfi_dev_printk_emit+0x8/0x8
[ 2065.624780][T21949]  __dev_printk+0x17f/0x1b0
[ 2065.624803][T21949]  _dev_info+0x107/0x150
[ 2065.624822][T21949]  ? __cfi__dev_info+0x8/0x8
[ 2065.624839][T21949]  ? usb_match_device+0x1bd/0x5e0
[ 2065.624862][T21949]  ? usb_detect_static_quirks+0x3f4/0x430
[ 2065.624887][T21949]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[ 2065.624909][T21949]  announce_device+0x11d/0x2b0
[ 2065.624929][T21949]  usb_new_device+0x4eb/0x1520
[ 2065.624951][T21949]  ? __cfi_usb_new_device+0x10/0x10
[ 2065.624971][T21949]  hub_event+0x2a5d/0x4680
[ 2065.625001][T21949]  ? __cfi_hub_event+0x10/0x10
[ 2065.625023][T21949]  ? preempt_schedule_thunk+0x16/0x18
[ 2065.625045][T21949]  process_one_work+0x71f/0xc40
[ 2065.625063][T21949]  worker_thread+0xa29/0x11f0
[ 2065.625083][T21949]  kthread+0x281/0x320
[ 2065.625099][T21949]  ? __cfi_worker_thread+0x10/0x10
[ 2065.625113][T21949]  ? __cfi_kthread+0x10/0x10
[ 2065.625129][T21949]  ret_from_fork+0x1f/0x30
[ 2065.625150][T21949]  </TASK>
[ 2065.625155][T21949] Modules linked in:
[ 2065.631208][T21949] ---[ end trace 0000000000000000 ]---
[ 2065.631216][T21949] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0
[ 2065.631235][T21949] Code: 80 3c 30 00 74 05 e8 84 4a 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74
[ 2065.631249][T21949] RSP: 0018:ffffc9000144fc10 EFLAGS: 00010096
[ 2065.631262][T21949] RAX: 1ffff110280d3596 RBX: ffff88814069aca8 RCX: ffff888124132880
[ 2065.631274][T21949] RDX: ffff88811027a880 RSI: 0000000000000001 RDI: ffffc90002443000
[ 2065.631286][T21949] RBP: ffffc9000144fc50 R08: 0000000000000000 R09: fffffbfff0ee43d6
[ 2065.631297][T21949] R10: 00000000b720eca3 R11: 1ffffffff0ee43d5 R12: 0000000000000001
[ 2065.631308][T21949] R13: ffff88814069aca8 R14: dffffc0000000000 R15: ffffffff81710320
[ 2065.631321][T21949] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 2065.631335][T21949] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2065.631347][T21949] CR2: 000000110c2e00df CR3: 000000011c2f0000 CR4: 00000000003506a0
[ 2065.631363][T21949] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2065.631373][T21949] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2066.784087][T24634] Shutting down cpus with NMI
[ 2067.123284][T24634] Kernel Offset: disabled
[ 2067.127617][T24634] Rebooting in 86400 seconds..