last executing test programs:

13.046301412s ago: executing program 3 (id=81):
syz_usb_connect$uac1(0x3, 0xe2, &(0x7f0000000a40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0x3, 0x60, 0xf0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xf6}, [@processing_unit={0xd, 0x24, 0x7, 0x3, 0x3, 0x7, "00000000000e"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x5, 0x10, 0x61be, 0x6, 0x2}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x4, 0x2, "64f91eed"}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x4, 0x3, [0x7, 0xa, 0x3], 0x8f}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x6}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0xe, "d72b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x3, 0x87, 0x7}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7fff, 0x7fff, 0x1, "e49699dec16f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x80, 0x80, 0x5, {0x7, 0x25, 0x1, 0x47, 0x5, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0xc8b4, 0x0, "e4"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x0, 0x9, "03b778"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x3, 0x9a}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x0, 0x7f, {0x7, 0x25, 0x1, 0x1, 0x71, 0x3ff}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xc0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]}, {0xd, &(0x7f0000000400)=@string={0xd, 0x3, "af14e1e695e6dec5cfaf84"}}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18)
socket$packet(0x11, 0xa, 0x300)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000c62)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x5, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)

12.20814998s ago: executing program 3 (id=94):
r0 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000540)=<r1=>0x0, &(0x7f0000000680)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1})
io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0)

11.961469375s ago: executing program 3 (id=98):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34503, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x7}, 0x4, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xce0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000700)={{0xfffffffe, 0x7}, 0x100, './file2\x00'})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000a80)={[{@errors_remount}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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")
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000140)={0xe021, 0x1, [{0x1, 0x1}]})

11.048412943s ago: executing program 3 (id=105):
syz_usb_connect$uac1(0x3, 0xe2, &(0x7f0000000a40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0x3, 0x60, 0xf0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xf6}, [@processing_unit={0xd, 0x24, 0x7, 0x3, 0x3, 0x7, "00000000000e"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x5, 0x10, 0x61be, 0x6, 0x2}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x4, 0x2, "64f91eed"}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x4, 0x3, [0x7, 0xa, 0x3], 0x8f}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x6}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0xe, "d72b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x3, 0x87, 0x7}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7fff, 0x7fff, 0x1, "e49699dec16f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x80, 0x80, 0x5, {0x7, 0x25, 0x1, 0x47, 0x5, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0xc8b4, 0x0, "e4"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x0, 0x9, "03b778"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x3, 0x9a}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x0, 0x7f, {0x7, 0x25, 0x1, 0x1, 0x71, 0x3ff}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xc0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]}, {0xd, &(0x7f0000000400)=@string={0xd, 0x3, "af14e1e695e6dec5cfaf84"}}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18)
socket$packet(0x11, 0xa, 0x300)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000c62)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x5, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)

10.407510327s ago: executing program 3 (id=110):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r2=>0x0}, 0x0)
r3 = socket(0x2c, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
sysinfo(&(0x7f0000000180)=""/38)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x7c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfff7, 0x4, 0x5, 0x8}, {0x5, 0x5, 0x90, 0x4}, {0x1, 0x7, 0xff, 0x3}, {0x0, 0x3b, 0xc, 0xc7}, {0x8, 0x0, 0x8, 0x3}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2e}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x32, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x55954c279cd8c010, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
dup(r10)

10.205331071s ago: executing program 3 (id=112):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {}, [], {}, [{0x8, 0x4}, {0x8, 0x4}]}, 0x34, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x10000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00'}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)

3.880994561s ago: executing program 4 (id=179):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000440))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x84000, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000005, 0x4000010, r2, 0xcadb5000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
stat(0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001600)={0xc, 0x0, {0x8000, @struct={0x4, 0x5f7}, 0x0, 0x8, 0x1, 0x1, 0x4, 0x2, 0x4a9, @struct={0xd104, 0x5}, 0x9, 0x2, [0x9, 0x4, 0x2, 0x0, 0x40, 0x8000000000000001]}, {0x2, @struct={0x100, 0xb}, 0x0, 0xc, 0x7, 0xbc23, 0x3, 0x5, 0x4a2, @usage=0x10000, 0x3, 0x96, [0x300000000, 0x3, 0x8, 0x3, 0x2, 0x7]}, {0x6, @usage=0x2, 0x0, 0xc2d, 0x400, 0x1, 0x0, 0x2, 0x457, @struct={0x9, 0x1000}, 0x7, 0xfffffffb, [0x9c11, 0x5, 0x1, 0x4c76, 0x1, 0x3]}, {0xae57, 0x7ff, 0x5}})
write(r3, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r4, 0x3)
r6 = epoll_create1(0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r7 = syz_clone(0x90025c00, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r9, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bind$tipc(0xffffffffffffffff, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x3}}, 0x10)
add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r9)
sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip_vti0\x00'})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xa0000004})
sendfile(r3, r2, 0x0, 0x3ffff)
sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a0202a700000028bd7000fe1efbdbdf2505001a00fc000000000000000000000000000001ffffffff0000000000000000000000001d00"], 0x38}}, 0x48010)

2.93950337s ago: executing program 0 (id=187):
syz_usb_connect$uac1(0x3, 0xe4, &(0x7f0000000a40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x3, 0x60, 0xf0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xf6}, [@processing_unit={0xd, 0x24, 0x7, 0x3, 0x3, 0x7, "00000000000e"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x5, 0x10, 0x61be, 0x6, 0x2}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x4, 0x2, "64f91eed"}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x4, 0x1, [0x7], 0x8f}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0xa, 0x1002}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x3, 0x87, 0x7, "849bd3", 'r'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7fff, 0x7fff, 0x1, "e49699dec16f3365"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x80, 0x80, 0x5, {0x7, 0x25, 0x1, 0x47, 0x5, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0xc8b4, 0x0, "e4"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x0, 0x9, "03b778"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x3, 0x9a}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x0, 0x7f, {0x7, 0x25, 0x1, 0x1, 0x71, 0x3ff}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r1, 0x0, 0x0, 0x4)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x5, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000006c0)=""/174, 0xae}, {&(0x7f00000005c0)=""/172, 0xac}], 0x5}, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)

2.875707301s ago: executing program 4 (id=188):
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x4e}, 0x28)
openat$tun(0xffffffffffffff9c, 0x0, 0x42841, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x814)
socket$kcm(0x2, 0xa, 0x2)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000006000000080000000b"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, 0x0, 0x0}, 0x20)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x8010, r0, 0x502aa000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e2}, 0x94)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d0500050002000000050001"], 0x50}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

2.236296235s ago: executing program 1 (id=195):
unshare(0x62040200)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
r2 = semget$private(0x0, 0x1, 0x86a)
semtimedop(r2, &(0x7f0000000100)=[{0x4, 0x6, 0xb14cbad9339187d9}, {0x3, 0x21ca, 0xb1410b2cf8078e87}, {0x3, 0x2, 0x1800}, {0x77c2f97f3d3ecfd7, 0x74e1, 0x1000}, {0x1, 0x4, 0x1400}, {0x7, 0x3, 0x1800}], 0x6, &(0x7f0000000180)={0x0, 0x989680})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000080)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x6d5)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x4080)

2.181285515s ago: executing program 2 (id=197):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x7}]}, 0x10)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async)
r2 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x0, 0xff, 0xf7, 0x0, 0xb, 0x44400, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x80, 0x3, 0x3, 0x5, 0x7, 0xfffffff9, 0x1072, 0x0, 0x7ff, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000740)={0x27d, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x8}, 0x8) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0xfa, 0x0, 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRESOCT=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000009000000731131000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)

2.129110077s ago: executing program 2 (id=198):
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x6fc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x44f0) (fail_nth: 3)

1.892611071s ago: executing program 1 (id=199):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x41)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r4, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES16=r0, @ANYRES8=r4, @ANYRESOCT=r4, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0x8}, 0x18)
prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
r7 = getpgid(0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x2, 0x40, 0x5, 0x0, 0x6, 0x1200, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x2, 0x4}, 0x2084, 0x8000, 0x3, 0x1, 0x6, 0xf1, 0x3, 0x0, 0x800, 0x0, 0x8}, r7, 0x8, 0xffffffffffffffff, 0x8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9a84, 0x8, &(0x7f0000006680))
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f0000000400)=0x1e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ustat(0x8000000000000001, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

1.870246432s ago: executing program 0 (id=200):
prlimit64(0x0, 0xe, 0x0, 0x0)
unshare(0x48070800)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18)
unlink(0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t')
ioperm(0x101, 0x295616e7, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
syz_open_dev$usbfs(0x0, 0x77, 0x3501)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
utimes(&(0x7f00000001c0)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140))
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@prjquota}, {@debug}]}, 0x1, 0x25b, &(0x7f0000000e00)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000400000000000000000000009500000000002200adaa00000000000095000000000026b7fac376a34708582d168f00002dee735b28f97502afa4690fb500"/100], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)

1.843038543s ago: executing program 4 (id=201):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x52)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)

1.720107695s ago: executing program 2 (id=202):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socket$kcm(0x10, 0x2, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001580), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB="000002b2cb"])
r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x20}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r5, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
write$UHID_DESTROY(r5, &(0x7f0000000080), 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket(0x1e, 0x805, 0x0)
connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10)
connect$tipc(r7, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10)
close(r7)
mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0781000000040000000802000021", @ANYRESDEC, @ANYRES64=r4, @ANYRES16=r4, @ANYBLOB="db677c517dd90f98f26aafd62ec899b4500a9a8a5332cc2b9d60ca3531d6923c35dbd19311069d3225a9e76486aa7bdc1cb1fb0b29154e7bc860797a655221ad07b466edf58147c9ae21579d", @ANYRES8=r0], 0x50)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
close(r2)

1.684265056s ago: executing program 2 (id=203):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f00000000c0)={[{}]}, 0x1, 0x45d, &(0x7f0000000c00)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
inotify_add_watch(0xffffffffffffffff, 0x0, 0x400)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
write$binfmt_script(r1, &(0x7f0000000480)={'#! ', '', [{0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, ',]\\'}, {0x20, '![^&'}, {0x20, 'bsddf'}, {0x20, '#! '}, {0x20, 'nfs=stale_rw'}, {0x20, 'dots'}]}, 0x2f)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
getsockopt(r2, 0x1, 0x14, &(0x7f00000000c0)=""/114, &(0x7f0000000040)=0x72)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x3, @local, 'nicvf0\x00'}}, 0x1e)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10, 0x0}, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x2000844, &(0x7f0000000300)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x80}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x14}}, {@fat=@quiet}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@fat=@nfs_nostale_ro}, {@fat=@umask={'umask', 0x3d, 0x87}}, {@dots}, {@fat=@nfs_stale_rw}, {@nodots}, {@nodots}, {@dots}, {@fat=@errors_continue}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe28}}]}, 0x1, 0x262, &(0x7f0000000040)="$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")

1.676314796s ago: executing program 0 (id=204):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
shutdown(0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50)
r1 = socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000240), 0x4)
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3})
recvmmsg(0xffffffffffffffff, &(0x7f000000a200)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000400, &(0x7f00000005c0)={[{@abort}, {@errors_remount}]}, 0x3, 0x44f, &(0x7f0000000600)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x893, 0x0, 0x0, &(0x7f0000000340))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff09)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94)
ftruncate(r6, 0x2007ffc)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)

1.584309658s ago: executing program 4 (id=205):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
ptrace(0x10, r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x4c, r3, 0x1, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_uring_setup(0x6cfd, &(0x7f0000001280)={0x0, 0x200023d4, 0x800, 0xfffffffc, 0x87})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18)
ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000080)={0x0})

1.436861481s ago: executing program 4 (id=206):
r0 = epoll_create1(0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)={0xb0, 0x1403, 0x4, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="5e4a49f9d0becaa71c75bde3af52c199a61de2086f0cdf4f0588c45246b425dc73fe133060caf41cd3e9b63b11e44ee0f321677485d7ab776db19fbb5db62f9be7f4bf6cd1a89d63deda37a65e39aa6ee7cf5f63c1274fa35ec01b1417edd56651141c096b789125058c854d891e2e0879c032ec6902bb820fde818d097dbacb1c3b938018c698c4c2358cd0c78479565208bac81b2dcff3646ad36ef543585c2fe0b536", 0xa4}, {&(0x7f0000000500)="da078d8d578a112d62b77142bb124bc3ce200f60e0d333fcad5a23521572a0ac8d2facaa46a3390c892b434bcbbd6edb186366485090efde3242014defe5c96b22785bd66c096935e6600e183a089c83028abe7bdc86f9032f08bb6c1a5a98c1ea0b1041462c7b4d7dc47fba5e4dec92976db3624a4ecb0b610663bf7675cdf621e2c75238bd125c54b6c08d15a37e41fa4d2d6df1dd932552dfdd9dfa9bd64a7132df3307", 0xa5}, {&(0x7f0000000640)="a9707590d1e0ea920d84fa9bf1783608317f8989a451fd2a0ab2076bc7b5f6d5ed2c8cb3a7d132095b1f55bdef9cb3f57883595add22d940d8048969f4d78246cef98d0b87c250f9ff793152d9713e1a6d4813669d26975fac875d0436a84d42330713bca57d07f477de80f04da92cee3d22385cce89391bee681e9af29583c9de4d54d640d14485ef9a592c42d4452438", 0x91}], 0x3, &(0x7f00000018c0)=[{0x1010, 0x104, 0x7f, "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"}, {0x108, 0x10b, 0x9, "31e6036ede531066691bc18c8d6609a6c81d5613106e27e9adc282b446fa65cae1d7e859b943dcc9425668e20118438701dfe02d44bfa8df1d9e3d945b3ef3bf9cead434979ee5ed9428a004ff7861c7d58404575251dcb47441a94227beeb273e82ad8340cdbc8329b2758e61f2e1302dc4f6bad2cf915babfd1bd5f94eb60b0e46e8c16f9f5a66cbc652ceb8b8afccd7cb159908c84ac4f9eee13cfba0a287b340f0589b03da5f40dc94c8ea00c872102cc742e9f27c990eab5244d19a75f51e9e39f2aa391090954b42cead73572272ac2088d76f4918cd79dd6e66666826eda7a316b9c2d5f1c567e73dfdde0a199b"}, {0x28, 0x101, 0x8, "17b765e9cf7ec08398c09f4359b9886fb8e390de5d"}, {0x28, 0x102, 0xff, "8993ea1c07d6134c3fdd4c11491fdcbc5942e1b9"}], 0x1168}, 0xc004)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4048801}, 0x0)
syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x400, 0x2, 0x362}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x91a2, 0x0, 0x0, 0x1})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000600)={0xa0000013})
ppoll(&(0x7f0000000040)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x0)
close_range(r0, r5, 0x0)

1.436278791s ago: executing program 0 (id=207):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {}, [], {}, [{0x8, 0x4}, {0x8, 0x4}]}, 0x34, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x10000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x2f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00'}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)

955.876411ms ago: executing program 1 (id=208):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1, 0xfffffffd}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 8)

872.568813ms ago: executing program 1 (id=209):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000040)="1ba2b4f68af75ffe49385fa5a34cf145e3aa93b92314066a5b9c7c61f0bcc4ec7320c3cebc7921ee6a1060542a9f0f1a7a90f6971262bfad71d2fce7f9ac", &(0x7f0000000340)=""/230}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r4, 0x0, 0x4ab}, 0x18)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r8=>r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRES64=r10, @ANYRESOCT=r3, @ANYRES32=r4, @ANYRES32=r2, @ANYRESHEX=r8, @ANYRES32=r10, @ANYBLOB="c81ec563031168986277fb16c40517fa0fa35b5276eaba7e5a0113ae671f62b0b1bad830194c3d2a8011c40257a87f8d3e472f48b4031873934e3f419f08a02f70cb24a79e138a43b5a684d281ddae230b737efb50dca00afe68c4dc45fc2178f7a220a2bab737babdcfdc58b5b4b9418d1b21fc4b7cdb0b310a67315b43bd5a1b5ff5134159ca4cee368452b50a973120d81f678f", @ANYRESHEX=r5], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[], 0x24}}, 0x20008000)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r13}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

506.11974ms ago: executing program 0 (id=210):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
symlink(0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000", @ANYRES64=r1, @ANYRES64=r0], 0x84}, 0x1, 0x0, 0x0, 0x8054}, 0x40)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f00000001c0)=r4}, 0x20)
r7 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

503.71408ms ago: executing program 2 (id=211):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x2000, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
ptrace(0x10, r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_uring_setup(0x6cfd, &(0x7f0000001280)={0x0, 0x200023d4, 0x800, 0xfffffffc, 0x87})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18)
ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000080)={0x0})

503.26625ms ago: executing program 4 (id=212):
syz_usb_connect$uac1(0x3, 0xe2, &(0x7f0000000a40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0x3, 0x60, 0xf0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xf6}, [@processing_unit={0xd, 0x24, 0x7, 0x3, 0x3, 0x7, "00000000000e"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x5, 0x10, 0x61be, 0x6, 0x2}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x4, 0x2, "64f91eed"}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x4, 0x3, [0x7, 0xa, 0x3], 0x8f}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x6}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0xe, "d72b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x3, 0x87, 0x7}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7fff, 0x7fff, 0x1, "e49699dec16f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x80, 0x80, 0x5, {0x7, 0x25, 0x1, 0x47, 0x5, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0xc8b4, 0x0, "e4"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x0, 0x9, "03b778"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x3, 0x9a}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x0, 0x7f, {0x7, 0x25, 0x1, 0x1, 0x71, 0x3ff}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xc0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]}, {0xd, &(0x7f0000000400)=@string={0xd, 0x3, "af14e1e695e6dec5cfaf84"}}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18)
socket$packet(0x11, 0xa, 0x300)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000c62)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x5, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)

410.681402ms ago: executing program 0 (id=213):
syz_usb_connect$uac1(0x3, 0xe4, &(0x7f0000000a40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x3, 0x60, 0xf0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xf6}, [@processing_unit={0xd, 0x24, 0x7, 0x3, 0x3, 0x7, "00000000000e"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x5, 0x10, 0x61be, 0x6, 0x2}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x4, 0x2, "64f91eed"}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x4, 0x1, [0x7], 0x8f}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0xa, 0x1002}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x3, 0x87, 0x7, "849bd3", 'r'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7fff, 0x7fff, 0x1, "e49699dec16f3365"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x80, 0x80, 0x5, {0x7, 0x25, 0x1, 0x47, 0x5, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0xc8b4, 0x0, "e4"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x0, 0x9, "03b778"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x3, 0x9a}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x0, 0x7f, {0x7, 0x25, 0x1, 0x1, 0x71, 0x3ff}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x5, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000006c0)=""/174, 0xae}, {&(0x7f00000005c0)=""/172, 0xac}], 0x5}, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)

285.080055ms ago: executing program 2 (id=214):
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x4e}, 0x28)
openat$tun(0xffffffffffffff9c, 0x0, 0x42841, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x814)
socket$kcm(0x2, 0xa, 0x2)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000006000000080000000b"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, 0x0, 0x0}, 0x20)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x8010, r0, 0x502aa000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e2}, 0x94)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d050005000200000005000100"], 0x50}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

141.063178ms ago: executing program 1 (id=215):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socket$kcm(0x10, 0x2, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001580), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB="000002b2cb"])
r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x20}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r5, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
write$UHID_DESTROY(r5, &(0x7f0000000080), 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket(0x1e, 0x805, 0x0)
connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10)
connect$tipc(r7, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10)
close(r7)
mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0781000000040000000802000021", @ANYRESDEC, @ANYRES64=r4, @ANYRES16=r4, @ANYBLOB="db677c517dd90f98f26aafd62ec899b4500a9a8a5332cc2b9d60ca3531d6923c35dbd19311069d3225a9e76486aa7bdc1cb1fb0b29154e7bc860797a655221ad07b466edf58147c9ae21579d", @ANYRES8=r0], 0x50)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
close(r2)

0s ago: executing program 1 (id=216):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x52)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   18.698711][   T29] kauditd_printk_skb: 45 callbacks suppressed
[   18.698728][   T29] audit: type=1400 audit(1757377560.316:57): avc:  denied  { transition } for  pid=3180 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.703423][   T29] audit: type=1400 audit(1757377560.316:58): avc:  denied  { noatsecure } for  pid=3180 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.706488][   T29] audit: type=1400 audit(1757377560.316:59): avc:  denied  { write } for  pid=3180 comm="sh" path="pipe:[537]" dev="pipefs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   18.710102][   T29] audit: type=1400 audit(1757377560.316:60): avc:  denied  { rlimitinh } for  pid=3180 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.712871][   T29] audit: type=1400 audit(1757377560.316:61): avc:  denied  { siginh } for  pid=3180 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts.
[   26.137879][   T29] audit: type=1400 audit(1757377567.756:62): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.138669][ T3292] cgroup: Unknown subsys name 'net'
[   26.160622][   T29] audit: type=1400 audit(1757377567.756:63): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.188001][   T29] audit: type=1400 audit(1757377567.786:64): avc:  denied  { unmount } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.320584][ T3292] cgroup: Unknown subsys name 'cpuset'
[   26.326920][ T3292] cgroup: Unknown subsys name 'rlimit'
[   26.516079][   T29] audit: type=1400 audit(1757377568.136:65): avc:  denied  { setattr } for  pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.539630][   T29] audit: type=1400 audit(1757377568.136:66): avc:  denied  { create } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.560105][   T29] audit: type=1400 audit(1757377568.136:67): avc:  denied  { write } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.580733][   T29] audit: type=1400 audit(1757377568.136:68): avc:  denied  { read } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.588149][ T3296] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   26.601037][   T29] audit: type=1400 audit(1757377568.146:69): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   26.634588][   T29] audit: type=1400 audit(1757377568.146:70): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   26.658739][   T29] audit: type=1400 audit(1757377568.236:71): avc:  denied  { relabelto } for  pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.686307][ T3292] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.893109][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   28.942211][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   28.957119][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   29.021474][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.028541][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.035881][ T3302] bridge_slave_0: entered allmulticast mode
[   29.042411][ T3302] bridge_slave_0: entered promiscuous mode
[   29.061958][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.069049][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.076872][ T3302] bridge_slave_1: entered allmulticast mode
[   29.083297][ T3302] bridge_slave_1: entered promiscuous mode
[   29.100305][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   29.123399][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   29.147788][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.154976][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.162387][ T3304] bridge_slave_0: entered allmulticast mode
[   29.168679][ T3304] bridge_slave_0: entered promiscuous mode
[   29.178814][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.193192][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.200408][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.207507][ T3312] bridge_slave_0: entered allmulticast mode
[   29.214668][ T3312] bridge_slave_0: entered promiscuous mode
[   29.221247][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.228364][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.235501][ T3304] bridge_slave_1: entered allmulticast mode
[   29.242003][ T3304] bridge_slave_1: entered promiscuous mode
[   29.251590][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.267496][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.274580][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.281843][ T3312] bridge_slave_1: entered allmulticast mode
[   29.288122][ T3312] bridge_slave_1: entered promiscuous mode
[   29.330775][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.341198][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.351554][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.361223][ T3302] team0: Port device team_slave_0 added
[   29.374043][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.392675][ T3302] team0: Port device team_slave_1 added
[   29.406703][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.413826][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.421208][ T3303] bridge_slave_0: entered allmulticast mode
[   29.427680][ T3303] bridge_slave_0: entered promiscuous mode
[   29.434299][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.441571][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.448772][ T3303] bridge_slave_1: entered allmulticast mode
[   29.455196][ T3303] bridge_slave_1: entered promiscuous mode
[   29.479293][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.486376][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.493503][ T3307] bridge_slave_0: entered allmulticast mode
[   29.500030][ T3307] bridge_slave_0: entered promiscuous mode
[   29.517127][ T3304] team0: Port device team_slave_0 added
[   29.523690][ T3304] team0: Port device team_slave_1 added
[   29.529566][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.536635][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.562810][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.573515][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.580618][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.587746][ T3307] bridge_slave_1: entered allmulticast mode
[   29.594078][ T3307] bridge_slave_1: entered promiscuous mode
[   29.605901][ T3312] team0: Port device team_slave_0 added
[   29.621859][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.628802][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.654765][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.673511][ T3312] team0: Port device team_slave_1 added
[   29.680717][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.690990][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.705430][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.712412][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.738788][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.756113][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.771938][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.781566][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.788530][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.814458][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.834688][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.841804][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.867737][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.898079][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.905152][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.931442][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.946891][ T3303] team0: Port device team_slave_0 added
[   29.954637][ T3302] hsr_slave_0: entered promiscuous mode
[   29.960883][ T3302] hsr_slave_1: entered promiscuous mode
[   29.967729][ T3307] team0: Port device team_slave_0 added
[   29.985604][ T3303] team0: Port device team_slave_1 added
[   29.996873][ T3307] team0: Port device team_slave_1 added
[   30.022595][ T3304] hsr_slave_0: entered promiscuous mode
[   30.028600][ T3304] hsr_slave_1: entered promiscuous mode
[   30.034450][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   30.040337][ T3304] Cannot create hsr debugfs directory
[   30.056964][ T3312] hsr_slave_0: entered promiscuous mode
[   30.063043][ T3312] hsr_slave_1: entered promiscuous mode
[   30.069020][ T3312] debugfs: 'hsr0' already exists in 'hsr'
[   30.074819][ T3312] Cannot create hsr debugfs directory
[   30.085941][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.092972][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.119158][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.130298][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.137251][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.163788][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.174871][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.182097][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.208270][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.240740][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.248433][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.274537][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.320042][ T3303] hsr_slave_0: entered promiscuous mode
[   30.326201][ T3303] hsr_slave_1: entered promiscuous mode
[   30.332121][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   30.337837][ T3303] Cannot create hsr debugfs directory
[   30.395521][ T3307] hsr_slave_0: entered promiscuous mode
[   30.401552][ T3307] hsr_slave_1: entered promiscuous mode
[   30.407455][ T3307] debugfs: 'hsr0' already exists in 'hsr'
[   30.413252][ T3307] Cannot create hsr debugfs directory
[   30.526709][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.538091][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.551447][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.562506][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.586767][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.596286][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.609169][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.623259][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.648288][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.657228][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.666330][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.676216][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.699435][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.714273][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.727537][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.736926][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.745712][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.767826][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   30.787745][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.794836][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.811999][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.819195][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.845921][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.855436][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.865315][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.874839][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.921329][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.932489][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.957871][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   30.969765][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   30.989296][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.998233][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.005315][ T3317] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.014084][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.021212][ T3317] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.036935][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.044017][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.054803][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.061935][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.077271][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.098966][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   31.111305][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.118524][ T3317] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.128730][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.138788][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.146116][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.193207][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   31.211620][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.218721][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.233703][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.241008][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.262148][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.292069][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.325099][ T3302] veth0_vlan: entered promiscuous mode
[   31.350576][ T3302] veth1_vlan: entered promiscuous mode
[   31.383124][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.391121][ T3302] veth0_macvtap: entered promiscuous mode
[   31.414880][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.429064][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.437052][ T3302] veth1_macvtap: entered promiscuous mode
[   31.454830][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.479992][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.512952][ T3439] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.522122][ T3304] veth0_vlan: entered promiscuous mode
[   31.550032][ T3439] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.558135][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   31.558152][   T29] audit: type=1400 audit(1757377573.176:81): avc:  denied  { mounton } for  pid=3302 comm="syz-executor" path="/root/syzkaller.w2qGdJ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   31.569055][ T3439] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.588996][   T29] audit: type=1400 audit(1757377573.176:82): avc:  denied  { mount } for  pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   31.598301][ T3304] veth1_vlan: entered promiscuous mode
[   31.619661][   T29] audit: type=1400 audit(1757377573.176:83): avc:  denied  { mounton } for  pid=3302 comm="syz-executor" path="/root/syzkaller.w2qGdJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   31.634909][ T3304] veth0_macvtap: entered promiscuous mode
[   31.650384][   T29] audit: type=1400 audit(1757377573.176:84): avc:  denied  { mount } for  pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   31.660267][ T3304] veth1_macvtap: entered promiscuous mode
[   31.677772][   T29] audit: type=1400 audit(1757377573.176:85): avc:  denied  { mounton } for  pid=3302 comm="syz-executor" path="/root/syzkaller.w2qGdJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   31.692751][ T3439] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.710341][   T29] audit: type=1400 audit(1757377573.176:86): avc:  denied  { mounton } for  pid=3302 comm="syz-executor" path="/root/syzkaller.w2qGdJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   31.746720][   T29] audit: type=1400 audit(1757377573.176:87): avc:  denied  { unmount } for  pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   31.749200][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.801430][   T29] audit: type=1400 audit(1757377573.306:88): avc:  denied  { mounton } for  pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   31.808641][ T3312] veth0_vlan: entered promiscuous mode
[   31.824709][   T29] audit: type=1400 audit(1757377573.306:89): avc:  denied  { mount } for  pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=3695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   31.834827][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.869723][ T3307] veth0_vlan: entered promiscuous mode
[   31.876794][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.882854][ T3307] veth1_vlan: entered promiscuous mode
[   31.918526][   T29] audit: type=1400 audit(1757377573.526:90): avc:  denied  { read write } for  pid=3302 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   31.925755][ T3303] veth0_vlan: entered promiscuous mode
[   31.953370][ T3312] veth1_vlan: entered promiscuous mode
[   31.963100][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.976112][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.992453][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.001661][ T3303] veth1_vlan: entered promiscuous mode
[   32.007990][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.024994][ T3307] veth0_macvtap: entered promiscuous mode
[   32.027114][ T3307] veth1_macvtap: entered promiscuous mode
[   32.033163][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.074476][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.083631][ T3312] veth0_macvtap: entered promiscuous mode
[   32.090317][ T3303] veth0_macvtap: entered promiscuous mode
[   32.112500][ T3303] veth1_macvtap: entered promiscuous mode
[   32.119317][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.129726][ T3312] veth1_macvtap: entered promiscuous mode
[   32.140201][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.157307][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.167720][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.183107][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.196417][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.215137][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.222560][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.233115][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.242259][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.261851][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.274288][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.302307][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.314683][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.328396][ T3490] loop3: detected capacity change from 0 to 512
[   32.336433][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.362711][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.381888][ T3490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.398425][ T3490] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   32.423245][ T3492] openvswitch: netlink: Message has 6 unknown bytes.
[   32.448833][ T3498] loop4: detected capacity change from 0 to 512
[   32.467152][ T3498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.481624][ T3498] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   33.670176][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.693965][ T3506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'.
[   33.766878][ T3506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'.
[   33.821525][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.826578][ T3506] team1: entered promiscuous mode
[   33.834099][ T3511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'.
[   33.835878][ T3506] team1: entered allmulticast mode
[   33.891010][ T3518] netlink: 43 bytes leftover after parsing attributes in process `syz.0.13'.
[   33.906712][ T3520] loop4: detected capacity change from 0 to 512
[   33.990791][ T3520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.005175][ T3520] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.011555][ T3529] netlink: 180 bytes leftover after parsing attributes in process `syz.3.15'.
[   34.115904][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'.
[   34.127758][ T3536] 9pnet_fd: Insufficient options for proto=fd
[   34.141911][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.149378][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.171318][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.178760][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.186284][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.193739][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.201182][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.204566][ T3539] Zero length message leads to an empty skb
[   34.208582][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.221989][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.229418][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.247837][ T3405] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   34.276041][    C1] hrtimer: interrupt took 35989 ns
[   34.307749][ T3542] fido_id[3542]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   34.355288][ T3544] netlink: 'syz.1.19': attribute type 13 has an invalid length.
[   34.412683][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.419967][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.522476][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.522454][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   34.555611][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   34.669343][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.680863][ T3549] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET)
[   34.689989][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.711043][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.721180][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.804219][ T3552] netlink: 180 bytes leftover after parsing attributes in process `syz.4.21'.
[   34.846453][ T3554] loop4: detected capacity change from 0 to 512
[   34.863498][ T3554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.878127][ T3554] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.989209][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.049538][ T3559] process 'syz.0.23' launched './file1' with NULL argv: empty string added
[   35.094532][ T3562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24'.
[   35.184558][ T3564] loop2: detected capacity change from 0 to 512
[   35.192290][ T3544] syz.1.19 (3544) used greatest stack depth: 10752 bytes left
[   35.211999][ T3564] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   35.228583][ T3564] EXT4-fs (loop2): mount failed
[   35.321271][ T3570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   35.335686][ T3564] smc: net device bond0 applied user defined pnetid SYZ0
[   35.345445][ T3564] smc: net device bond0 erased user defined pnetid SYZ0
[   35.375266][ T3573] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   35.414402][ T3575] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26'.
[   35.430909][ T3570] loop0: detected capacity change from 0 to 1024
[   35.438442][ T3570] =======================================================
[   35.438442][ T3570] WARNING: The mand mount option has been deprecated and
[   35.438442][ T3570]          and is ignored by this kernel. Remove the mand
[   35.438442][ T3570]          option from the mount to silence this warning.
[   35.438442][ T3570] =======================================================
[   35.504458][ T3570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.526003][ T3584] loop3: detected capacity change from 0 to 512
[   35.617849][ T3570] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.752926][ T3584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.783902][ T3584] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   35.928002][ T3590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.985721][ T3590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.111345][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.161547][ T3596] loop4: detected capacity change from 0 to 1024
[   36.184901][ T3596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.239556][ T3603] loop0: detected capacity change from 0 to 512
[   36.410182][ T3603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.428536][ T3603] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   36.601087][ T3613] audit_log_lost: 296 callbacks suppressed
[   36.601104][ T3613] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   36.614693][ T3613] audit: out of memory in audit_log_start
[   37.184389][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.213495][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.236808][   T29] audit: type=1326 audit(1757377578.856:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   37.270127][   T29] audit: type=1326 audit(1757377578.886:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   37.293291][   T29] audit: type=1326 audit(1757377578.886:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   37.316607][   T29] audit: type=1326 audit(1757377578.886:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   37.339988][   T29] audit: type=1326 audit(1757377578.886:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   37.363156][   T29] audit: type=1326 audit(1757377578.886:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   37.386433][   T29] audit: type=1326 audit(1757377578.886:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   37.409676][   T29] audit: type=1326 audit(1757377578.886:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3616 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   37.434107][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.494189][ T3623] netlink: 'syz.3.40': attribute type 13 has an invalid length.
[   37.523507][ T3623] gretap0: refused to change device tx_queue_len
[   37.535331][ T3627] IPv6: NLM_F_CREATE should be specified when creating new route
[   37.573567][ T3623] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   37.601805][    T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0)
[   37.728552][ T3640] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   37.736164][ T3640] batman_adv: batadv0: Removing interface: batadv_slave_0
[   37.744267][ T3640] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   37.752171][ T3640] batman_adv: batadv0: Removing interface: batadv_slave_1
[   38.169641][ T3663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.179585][ T3663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.243059][ T3663] loop2: detected capacity change from 0 to 1024
[   38.261665][ T3663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.434671][ T3670] loop4: detected capacity change from 0 to 8192
[   38.493947][ T3483]  loop4: p1 p2 p3 p4
[   38.498244][ T3483] loop4: p1 start 51379968 is beyond EOD, truncated
[   38.505167][ T3483] loop4: p2 start 4293394690 is beyond EOD, truncated
[   38.512264][ T3483] loop4: p3 size 100663552 extends beyond EOD, truncated
[   38.520538][ T3483] loop4: p4 size 50331648 extends beyond EOD, truncated
[   38.532216][ T3670]  loop4: p1 p2 p3 p4
[   38.536675][ T3670] loop4: p1 start 51379968 is beyond EOD, truncated
[   38.543488][ T3670] loop4: p2 start 4293394690 is beyond EOD, truncated
[   38.550390][ T3670] loop4: p3 size 100663552 extends beyond EOD, truncated
[   38.563220][ T3670] loop4: p4 size 50331648 extends beyond EOD, truncated
[   38.640392][ T3483] udevd[3483]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   38.644259][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   38.675770][ T3689] loop0: detected capacity change from 0 to 128
[   38.682598][ T3686] loop4: detected capacity change from 0 to 2048
[   38.691384][ T3483] udevd[3483]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   38.695544][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   38.712796][ T3689] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   38.725860][ T3689] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.737107][ T3686] EXT4-fs error (device loop4): __ext4_fill_super:5504: inode #2: comm syz.4.60: iget: bad extended attribute block 281474976710655
[   38.751454][ T3686] EXT4-fs (loop4): get root inode failed
[   38.757208][ T3686] EXT4-fs (loop4): mount failed
[   38.788801][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.820948][ T3695] netlink: 'syz.4.60': attribute type 13 has an invalid length.
[   38.831051][ T3689] netlink: 'syz.0.61': attribute type 4 has an invalid length.
[   38.838775][ T3689] __nla_validate_parse: 17 callbacks suppressed
[   38.838791][ T3689] netlink: 17 bytes leftover after parsing attributes in process `syz.0.61'.
[   38.857259][ T3697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.63'.
[   38.885599][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.893173][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.930778][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   38.940928][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   38.994861][   T41] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.008895][   T41] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.020128][   T41] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.029137][   T41] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.046451][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   39.079973][ T3705] netlink: 180 bytes leftover after parsing attributes in process `syz.0.64'.
[   39.141798][ T3715] FAULT_INJECTION: forcing a failure.
[   39.141798][ T3715] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   39.155442][ T3715] CPU: 1 UID: 0 PID: 3715 Comm: syz.2.70 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   39.155471][ T3715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   39.155489][ T3715] Call Trace:
[   39.155497][ T3715]  <TASK>
[   39.155505][ T3715]  __dump_stack+0x1d/0x30
[   39.155529][ T3715]  dump_stack_lvl+0xe8/0x140
[   39.155550][ T3715]  dump_stack+0x15/0x1b
[   39.155567][ T3715]  should_fail_ex+0x265/0x280
[   39.155649][ T3715]  should_fail+0xb/0x20
[   39.155670][ T3715]  should_fail_usercopy+0x1a/0x20
[   39.155727][ T3715]  _copy_to_user+0x20/0xa0
[   39.155753][ T3715]  simple_read_from_buffer+0xb5/0x130
[   39.155774][ T3715]  proc_fail_nth_read+0x10e/0x150
[   39.155824][ T3715]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   39.155847][ T3715]  vfs_read+0x1a5/0x770
[   39.155864][ T3715]  ? __rcu_read_unlock+0x4f/0x70
[   39.155929][ T3715]  ? __fget_files+0x184/0x1c0
[   39.155953][ T3715]  ksys_read+0xda/0x1a0
[   39.155973][ T3715]  __x64_sys_read+0x40/0x50
[   39.155991][ T3715]  x64_sys_call+0x27bc/0x2ff0
[   39.156012][ T3715]  do_syscall_64+0xd2/0x200
[   39.156049][ T3715]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   39.156074][ T3715]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   39.156158][ T3715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.156181][ T3715] RIP: 0033:0x7f0a9472d5fc
[   39.156261][ T3715] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   39.156276][ T3715] RSP: 002b:00007f0a9318f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   39.156300][ T3715] RAX: ffffffffffffffda RBX: 00007f0a94965fa0 RCX: 00007f0a9472d5fc
[   39.156312][ T3715] RDX: 000000000000000f RSI: 00007f0a9318f0a0 RDI: 0000000000000005
[   39.156324][ T3715] RBP: 00007f0a9318f090 R08: 0000000000000000 R09: 0000000000000000
[   39.156398][ T3715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.156409][ T3715] R13: 00007f0a94966038 R14: 00007f0a94965fa0 R15: 00007ffdac32e488
[   39.156426][ T3715]  </TASK>
[   39.161967][ T3713] netlink: 'syz.0.69': attribute type 83 has an invalid length.
[   39.382399][ T3722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.71'.
[   39.398115][ T3722] rose0: tun_chr_ioctl cmd 1074025677
[   39.403990][ T3722] rose0: linktype set to 778
[   39.483477][ T3726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.503240][ T3726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.514041][ T3728] loop3: detected capacity change from 0 to 512
[   39.521551][ T3728] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   39.534896][ T3728] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   39.558229][ T3728] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   39.578824][ T3730] loop2: detected capacity change from 0 to 1024
[   39.587586][ T3728] EXT4-fs (loop3): 1 truncate cleaned up
[   39.593917][ T3728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.597680][ T3695] syz.4.60 (3695) used greatest stack depth: 10696 bytes left
[   39.632459][ T3730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.665377][ T3738] FAULT_INJECTION: forcing a failure.
[   39.665377][ T3738] name failslab, interval 1, probability 0, space 0, times 0
[   39.671030][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.678122][ T3738] CPU: 0 UID: 0 PID: 3738 Comm: syz.4.78 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   39.678165][ T3738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   39.678255][ T3738] Call Trace:
[   39.678260][ T3738]  <TASK>
[   39.678268][ T3738]  __dump_stack+0x1d/0x30
[   39.678289][ T3738]  dump_stack_lvl+0xe8/0x140
[   39.678368][ T3738]  dump_stack+0x15/0x1b
[   39.678385][ T3738]  should_fail_ex+0x265/0x280
[   39.678407][ T3738]  ? __se_sys_mount+0xef/0x2e0
[   39.678503][ T3738]  should_failslab+0x8c/0xb0
[   39.678526][ T3738]  __kmalloc_cache_noprof+0x4c/0x320
[   39.678553][ T3738]  ? memdup_user+0x99/0xd0
[   39.678578][ T3738]  __se_sys_mount+0xef/0x2e0
[   39.678624][ T3738]  ? fput+0x8f/0xc0
[   39.678650][ T3738]  ? ksys_write+0x192/0x1a0
[   39.678672][ T3738]  __x64_sys_mount+0x67/0x80
[   39.678693][ T3738]  x64_sys_call+0x2b4d/0x2ff0
[   39.678753][ T3738]  do_syscall_64+0xd2/0x200
[   39.678781][ T3738]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   39.678824][ T3738]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   39.678851][ T3738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.678871][ T3738] RIP: 0033:0x7fa1b83bebe9
[   39.678887][ T3738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.678946][ T3738] RSP: 002b:00007fa1b6e27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   39.678965][ T3738] RAX: ffffffffffffffda RBX: 00007fa1b85f5fa0 RCX: 00007fa1b83bebe9
[   39.678978][ T3738] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000
[   39.678990][ T3738] RBP: 00007fa1b6e27090 R08: 0000200000000600 R09: 0000000000000000
[   39.679002][ T3738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.679013][ T3738] R13: 00007fa1b85f6038 R14: 00007fa1b85f5fa0 R15: 00007ffd82c86958
[   39.679031][ T3738]  </TASK>
[   39.710305][ T3740] netlink: 180 bytes leftover after parsing attributes in process `syz.4.79'.
[   39.899228][ T3742] loop3: detected capacity change from 0 to 512
[   39.912215][ T3742] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[   39.951987][ T3749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.961653][ T3749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.012400][ T3754] loop0: detected capacity change from 0 to 1024
[   40.041998][ T3754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.054129][ T3754] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.077485][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.160238][ T3767] SELinux:  unknown common m_cach
[   40.165540][ T3767] SELinux: failed to load policy
[   40.289716][ T3773] netlink: 96 bytes leftover after parsing attributes in process `syz.0.89'.
[   40.302740][ T3773] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   40.351030][ T3775] netlink: 180 bytes leftover after parsing attributes in process `syz.0.90'.
[   40.374296][ T3777] loop0: detected capacity change from 0 to 512
[   40.392564][ T3777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.405771][ T3777] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.406282][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.475987][ T3784] FAULT_INJECTION: forcing a failure.
[   40.475987][ T3784] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   40.489244][ T3784] CPU: 1 UID: 0 PID: 3784 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   40.489269][ T3784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   40.489279][ T3784] Call Trace:
[   40.489284][ T3784]  <TASK>
[   40.489292][ T3784]  __dump_stack+0x1d/0x30
[   40.489313][ T3784]  dump_stack_lvl+0xe8/0x140
[   40.489330][ T3784]  dump_stack+0x15/0x1b
[   40.489402][ T3784]  should_fail_ex+0x265/0x280
[   40.489478][ T3784]  should_fail+0xb/0x20
[   40.489500][ T3784]  should_fail_usercopy+0x1a/0x20
[   40.489529][ T3784]  strncpy_from_user+0x25/0x230
[   40.489559][ T3784]  ? kmem_cache_alloc_noprof+0x186/0x310
[   40.489601][ T3784]  ? getname_flags+0x80/0x3b0
[   40.489627][ T3784]  getname_flags+0xae/0x3b0
[   40.489752][ T3784]  getname_uflags+0x21/0x30
[   40.489792][ T3784]  io_linkat_prep+0x105/0x1b0
[   40.489815][ T3784]  io_submit_sqes+0x5ef/0x1060
[   40.489847][ T3784]  __se_sys_io_uring_enter+0x1c1/0x1b70
[   40.489874][ T3784]  ? 0xffffffff81000000
[   40.489930][ T3784]  ? __rcu_read_unlock+0x4f/0x70
[   40.489950][ T3784]  ? get_pid_task+0x96/0xd0
[   40.489968][ T3784]  ? proc_fail_nth_write+0x13b/0x160
[   40.490004][ T3784]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   40.490106][ T3784]  ? vfs_write+0x7e8/0x960
[   40.490128][ T3784]  ? __rcu_read_unlock+0x4f/0x70
[   40.490148][ T3784]  ? __fget_files+0x184/0x1c0
[   40.490173][ T3784]  ? fput+0x8f/0xc0
[   40.490275][ T3784]  __x64_sys_io_uring_enter+0x78/0x90
[   40.490301][ T3784]  x64_sys_call+0x2de1/0x2ff0
[   40.490319][ T3784]  do_syscall_64+0xd2/0x200
[   40.490414][ T3784]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   40.490435][ T3784]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   40.490463][ T3784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.490549][ T3784] RIP: 0033:0x7f0a9472ebe9
[   40.490563][ T3784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.490579][ T3784] RSP: 002b:00007f0a9318f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   40.490598][ T3784] RAX: ffffffffffffffda RBX: 00007f0a94965fa0 RCX: 00007f0a9472ebe9
[   40.490643][ T3784] RDX: 0000000000000217 RSI: 00000000000040f9 RDI: 0000000000000003
[   40.490703][ T3784] RBP: 00007f0a9318f090 R08: 0000000000000000 R09: 0000000000000000
[   40.490716][ T3784] R10: 00000000000000a5 R11: 0000000000000246 R12: 0000000000000001
[   40.490727][ T3784] R13: 00007f0a94966038 R14: 00007f0a94965fa0 R15: 00007ffdac32e488
[   40.490743][ T3784]  </TASK>
[   41.137365][ T3808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'.
[   41.163129][ T3806] loop3: detected capacity change from 0 to 512
[   41.172862][ T3810] loop1: detected capacity change from 0 to 512
[   41.374040][ T3806] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   41.397041][ T3810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.413056][ T3810] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.424609][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.448361][ T3806] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   41.450501][ T3824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.456435][ T3806] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002]
[   41.466290][ T3824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.490046][ T3806] System zones: 0-1, 15-15, 18-18, 34-34
[   41.507334][ T3806] EXT4-fs (loop3): orphan cleanup on readonly fs
[   41.518253][ T3828] loop0: detected capacity change from 0 to 512
[   41.526404][ T3806] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   41.541053][ T3806] EXT4-fs (loop3): Cannot turn on quotas: error -22
[   41.555515][ T3831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3831 comm=syz.1.99
[   41.583934][ T3828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.602583][ T3806] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.98: bg 0: block 40: padding at end of block bitmap is not set
[   41.616962][   T29] kauditd_printk_skb: 315 callbacks suppressed
[   41.616969][ T3828] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.616981][   T29] audit: type=1326 audit(1757377583.226:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3805 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   41.633253][ T3832] loop4: detected capacity change from 0 to 1024
[   41.641097][   T29] audit: type=1400 audit(1757377583.256:709): avc:  denied  { add_name } for  pid=3817 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   41.657171][ T3806] EXT4-fs (loop3): Remounting filesystem read-only
[   41.663511][   T29] audit: type=1400 audit(1757377583.256:710): avc:  denied  { create } for  pid=3817 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   41.691711][ T3806] EXT4-fs (loop3): 1 truncate cleaned up
[   41.693164][   T29] audit: type=1400 audit(1757377583.256:711): avc:  denied  { write } for  pid=3817 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=1272 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   41.747898][   T29] audit: type=1400 audit(1757377583.256:712): avc:  denied  { append } for  pid=3817 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=1272 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   41.780356][ T3806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   41.802383][   T29] audit: type=1400 audit(1757377583.376:713): avc:  denied  { execmem } for  pid=3827 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   41.803197][ T3832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.842430][   T29] audit: type=1400 audit(1757377583.456:714): avc:  denied  { remove_name } for  pid=3842 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=1272 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   41.866130][   T29] audit: type=1400 audit(1757377583.456:715): avc:  denied  { unlink } for  pid=3842 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=1272 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   41.907069][ T3846] loop2: detected capacity change from 0 to 512
[   41.913762][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.943905][ T3849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.967361][ T3846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.983263][ T3849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.001306][ T3846] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.012647][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.054889][   T29] audit: type=1326 audit(1757377583.676:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3858 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   42.100931][   T29] audit: type=1326 audit(1757377583.706:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3858 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   42.435240][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.633684][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'.
[   42.644142][ T3879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'.
[   42.649695][ T3877] loop4: detected capacity change from 0 to 512
[   42.671060][ T3877] EXT4-fs: Ignoring removed nobh option
[   42.700706][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.781487][ T3877] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.109: corrupted inode contents
[   42.800850][ T3877] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.109: mark_inode_dirty error
[   42.818097][ T3877] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.109: corrupted inode contents
[   42.839107][ T3877] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.109: mark_inode_dirty error
[   42.900264][ T3877] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.109: Failed to acquire dquot type 0
[   42.918757][ T3885] FAULT_INJECTION: forcing a failure.
[   42.918757][ T3885] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   42.933767][ T3885] CPU: 1 UID: 0 PID: 3885 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   42.933884][ T3885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   42.933897][ T3885] Call Trace:
[   42.933904][ T3885]  <TASK>
[   42.933911][ T3885]  __dump_stack+0x1d/0x30
[   42.933995][ T3885]  dump_stack_lvl+0xe8/0x140
[   42.934016][ T3885]  dump_stack+0x15/0x1b
[   42.934035][ T3885]  should_fail_ex+0x265/0x280
[   42.934058][ T3885]  should_fail+0xb/0x20
[   42.934080][ T3885]  should_fail_usercopy+0x1a/0x20
[   42.934108][ T3885]  _copy_to_user+0x20/0xa0
[   42.934140][ T3885]  simple_read_from_buffer+0xb5/0x130
[   42.934166][ T3885]  proc_fail_nth_read+0x10e/0x150
[   42.934196][ T3885]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   42.934279][ T3885]  vfs_read+0x1a5/0x770
[   42.934297][ T3885]  ? __rcu_read_unlock+0x4f/0x70
[   42.934316][ T3885]  ? __fget_files+0x184/0x1c0
[   42.934400][ T3885]  ksys_read+0xda/0x1a0
[   42.934426][ T3885]  __x64_sys_read+0x40/0x50
[   42.934450][ T3885]  x64_sys_call+0x27bc/0x2ff0
[   42.934482][ T3885]  do_syscall_64+0xd2/0x200
[   42.934514][ T3885]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   42.934547][ T3885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.934570][ T3885] RIP: 0033:0x7f36a463d5fc
[   42.934645][ T3885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   42.934713][ T3885] RSP: 002b:00007f36a309f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   42.934790][ T3885] RAX: ffffffffffffffda RBX: 00007f36a4875fa0 RCX: 00007f36a463d5fc
[   42.934804][ T3885] RDX: 000000000000000f RSI: 00007f36a309f0a0 RDI: 0000000000000004
[   42.934818][ T3885] RBP: 00007f36a309f090 R08: 0000000000000000 R09: 0000000000000000
[   42.934838][ T3885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   42.934851][ T3885] R13: 00007f36a4876038 R14: 00007f36a4875fa0 R15: 00007fff59a29988
[   42.934870][ T3885]  </TASK>
[   43.150142][ T3877] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.109: corrupted inode contents
[   43.162182][ T3877] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.109: mark_inode_dirty error
[   43.179936][ T3877] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.109: corrupted inode contents
[   43.201132][ T3877] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.109: mark_inode_dirty error
[   43.228981][ T3889] loop0: detected capacity change from 0 to 512
[   43.235401][ T3877] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.109: corrupted inode contents
[   43.249166][ T3877] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   43.264010][ T3889] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   43.268382][ T3877] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.109: corrupted inode contents
[   43.307654][ T3877] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.109: mark_inode_dirty error
[   43.310021][ T3890] loop1: detected capacity change from 0 to 512
[   43.319410][ T3877] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   43.352254][ T3889] EXT4-fs (loop0): 1 truncate cleaned up
[   43.358416][ T3889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.370153][ T3890] EXT4-fs: Ignoring removed nobh option
[   43.372093][ T3877] EXT4-fs (loop4): 1 truncate cleaned up
[   43.377231][ T3889] FAULT_INJECTION: forcing a failure.
[   43.377231][ T3889] name failslab, interval 1, probability 0, space 0, times 0
[   43.382706][ T3877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.394956][ T3889] CPU: 1 UID: 0 PID: 3889 Comm: syz.0.115 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   43.394983][ T3889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   43.394994][ T3889] Call Trace:
[   43.395001][ T3889]  <TASK>
[   43.395009][ T3889]  __dump_stack+0x1d/0x30
[   43.395031][ T3889]  dump_stack_lvl+0xe8/0x140
[   43.395050][ T3889]  dump_stack+0x15/0x1b
[   43.395069][ T3889]  should_fail_ex+0x265/0x280
[   43.395092][ T3889]  should_failslab+0x8c/0xb0
[   43.395116][ T3889]  kmem_cache_alloc_noprof+0x50/0x310
[   43.395142][ T3889]  ? ext4_mb_new_blocks+0x79f/0x2080
[   43.395203][ T3889]  ext4_mb_new_blocks+0x79f/0x2080
[   43.395232][ T3889]  ? ext4_ind_map_blocks+0x838/0x14f0
[   43.395253][ T3889]  ? ext4_get_branch+0x321/0x3a0
[   43.395289][ T3889]  ext4_ind_map_blocks+0xb86/0x14f0
[   43.395321][ T3889]  ext4_map_blocks+0x598/0xd00
[   43.395347][ T3889]  ? ext4_destroy_inline_data_nolock+0x2f4/0x340
[   43.395389][ T3889]  ext4_convert_inline_data_nolock+0x16b/0x570
[   43.395417][ T3889]  ext4_convert_inline_data+0x2bd/0x360
[   43.395503][ T3889]  ext4_fallocate+0x163/0x2f0
[   43.395527][ T3889]  vfs_fallocate+0x3b3/0x400
[   43.395624][ T3889]  __x64_sys_fallocate+0x7a/0xd0
[   43.395648][ T3889]  x64_sys_call+0x2514/0x2ff0
[   43.395739][ T3889]  do_syscall_64+0xd2/0x200
[   43.395820][ T3889]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   43.395843][ T3889]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   43.395869][ T3889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.395957][ T3889] RIP: 0033:0x7f36a463ebe9
[   43.395973][ T3889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.395990][ T3889] RSP: 002b:00007f36a309f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[   43.396009][ T3889] RAX: ffffffffffffffda RBX: 00007f36a4875fa0 RCX: 00007f36a463ebe9
[   43.396021][ T3889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[   43.396033][ T3889] RBP: 00007f36a309f090 R08: 0000000000000000 R09: 0000000000000000
[   43.396045][ T3889] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000001
[   43.396089][ T3889] R13: 00007f36a4876038 R14: 00007f36a4875fa0 R15: 00007fff59a29988
[   43.396107][ T3889]  </TASK>
[   43.468480][ T3890] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.114: corrupted inode contents
[   43.472626][ T3877] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.499569][ T3890] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.114: mark_inode_dirty error
[   43.663054][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.672652][ T3890] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.114: corrupted inode contents
[   43.684951][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.697649][ T3877] syz.4.109 (3877) used greatest stack depth: 9760 bytes left
[   43.731318][ T3890] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.114: mark_inode_dirty error
[   43.761826][ T3899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.764692][ T3890] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.114: Failed to acquire dquot type 0
[   43.772075][ T3899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.799939][ T3890] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.114: corrupted inode contents
[   43.819925][ T3890] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.114: mark_inode_dirty error
[   43.839555][ T3890] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.114: corrupted inode contents
[   43.884154][ T3890] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.114: mark_inode_dirty error
[   43.926005][ T3890] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.114: corrupted inode contents
[   43.940806][ T3890] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   43.949537][ T3890] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.114: corrupted inode contents
[   43.963480][ T3890] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.114: mark_inode_dirty error
[   43.974777][ T3890] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   43.987116][ T3890] EXT4-fs (loop1): 1 truncate cleaned up
[   43.993267][ T3890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.007436][ T3890] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.031019][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.031630][ T3890] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.060640][ T3887] FAULT_INJECTION: forcing a failure.
[   44.060640][ T3887] name failslab, interval 1, probability 0, space 0, times 0
[   44.073498][ T3887] CPU: 0 UID: 0 PID: 3887 Comm: syz.1.114 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   44.073581][ T3887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   44.073593][ T3887] Call Trace:
[   44.073599][ T3887]  <TASK>
[   44.073608][ T3887]  __dump_stack+0x1d/0x30
[   44.073630][ T3887]  dump_stack_lvl+0xe8/0x140
[   44.073648][ T3887]  dump_stack+0x15/0x1b
[   44.073681][ T3887]  should_fail_ex+0x265/0x280
[   44.073785][ T3887]  should_failslab+0x8c/0xb0
[   44.073813][ T3887]  kmem_cache_alloc_noprof+0x50/0x310
[   44.073912][ T3887]  ? alloc_empty_file+0x76/0x200
[   44.073954][ T3887]  ? mntput+0x4b/0x80
[   44.073984][ T3887]  alloc_empty_file+0x76/0x200
[   44.074013][ T3887]  path_openat+0x68/0x2170
[   44.074032][ T3887]  ? _parse_integer_limit+0x170/0x190
[   44.074081][ T3887]  ? kstrtoull+0x111/0x140
[   44.074106][ T3887]  ? kstrtouint+0x76/0xc0
[   44.074130][ T3887]  do_filp_open+0x109/0x230
[   44.074228][ T3887]  do_sys_openat2+0xa6/0x110
[   44.074262][ T3887]  __x64_sys_openat+0xf2/0x120
[   44.074351][ T3887]  x64_sys_call+0x2e9c/0x2ff0
[   44.074374][ T3887]  do_syscall_64+0xd2/0x200
[   44.074478][ T3887]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   44.074503][ T3887]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   44.074534][ T3887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.074621][ T3887] RIP: 0033:0x7f79c200ebe9
[   44.074637][ T3887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.074653][ T3887] RSP: 002b:00007f79c0a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   44.074755][ T3887] RAX: ffffffffffffffda RBX: 00007f79c2245fa0 RCX: 00007f79c200ebe9
[   44.074813][ T3887] RDX: 0000000000000040 RSI: 0000200000000000 RDI: ffffffffffffff9c
[   44.074825][ T3887] RBP: 00007f79c0a77090 R08: 0000000000000000 R09: 0000000000000000
[   44.074836][ T3887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.074847][ T3887] R13: 00007f79c2246038 R14: 00007f79c2245fa0 R15: 00007ffde3f24c48
[   44.074864][ T3887]  </TASK>
[   44.091964][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'.
[   44.103119][ T3906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.300571][ T3906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.337760][ T3908] loop1: detected capacity change from 0 to 512
[   44.352219][ T3908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.365262][ T3908] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   44.585052][ T3917] loop2: detected capacity change from 0 to 512
[   44.610806][ T3917] EXT4-fs: Ignoring removed nobh option
[   44.644474][ T3917] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.124: corrupted inode contents
[   44.660593][ T3917] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.124: mark_inode_dirty error
[   44.675194][ T3917] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.124: corrupted inode contents
[   44.729605][ T3917] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.124: mark_inode_dirty error
[   44.755291][ T3917] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.124: Failed to acquire dquot type 0
[   44.781295][ T3917] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.124: corrupted inode contents
[   44.806975][ T3917] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.124: mark_inode_dirty error
[   45.016295][ T3930] FAULT_INJECTION: forcing a failure.
[   45.016295][ T3930] name failslab, interval 1, probability 0, space 0, times 0
[   45.029141][ T3930] CPU: 0 UID: 0 PID: 3930 Comm: syz.4.128 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.029168][ T3930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   45.029179][ T3930] Call Trace:
[   45.029186][ T3930]  <TASK>
[   45.029193][ T3930]  __dump_stack+0x1d/0x30
[   45.029268][ T3930]  dump_stack_lvl+0xe8/0x140
[   45.029290][ T3930]  dump_stack+0x15/0x1b
[   45.029309][ T3930]  should_fail_ex+0x265/0x280
[   45.029332][ T3930]  should_failslab+0x8c/0xb0
[   45.029413][ T3930]  kmem_cache_alloc_node_noprof+0x57/0x320
[   45.029444][ T3930]  ? __alloc_skb+0x101/0x320
[   45.029465][ T3930]  __alloc_skb+0x101/0x320
[   45.029565][ T3930]  netlink_alloc_large_skb+0xba/0xf0
[   45.029590][ T3930]  netlink_sendmsg+0x3cf/0x6b0
[   45.029616][ T3930]  ? __pfx_netlink_sendmsg+0x10/0x10
[   45.029754][ T3930]  __sock_sendmsg+0x142/0x180
[   45.029802][ T3930]  ____sys_sendmsg+0x31e/0x4e0
[   45.029906][ T3930]  ___sys_sendmsg+0x17b/0x1d0
[   45.030018][ T3930]  __x64_sys_sendmsg+0xd4/0x160
[   45.030046][ T3930]  x64_sys_call+0x191e/0x2ff0
[   45.030069][ T3930]  do_syscall_64+0xd2/0x200
[   45.030171][ T3930]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   45.030269][ T3930]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   45.030331][ T3930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.030411][ T3930] RIP: 0033:0x7fa1b83bebe9
[   45.030426][ T3930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.030446][ T3930] RSP: 002b:00007fa1b6e27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   45.030469][ T3930] RAX: ffffffffffffffda RBX: 00007fa1b85f5fa0 RCX: 00007fa1b83bebe9
[   45.030483][ T3930] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004
[   45.030496][ T3930] RBP: 00007fa1b6e27090 R08: 0000000000000000 R09: 0000000000000000
[   45.030509][ T3930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.030572][ T3930] R13: 00007fa1b85f6038 R14: 00007fa1b85f5fa0 R15: 00007ffd82c86958
[   45.030588][ T3930]  </TASK>
[   45.232286][ T3917] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.124: corrupted inode contents
[   45.264619][ T3917] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.124: mark_inode_dirty error
[   45.280753][ T3917] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.124: corrupted inode contents
[   45.290548][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.303616][ T3917] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   45.353238][ T3937] Falling back ldisc for ttyS3.
[   45.355079][ T3917] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.124: corrupted inode contents
[   45.383249][ T3917] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.124: mark_inode_dirty error
[   45.441661][ T3917] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   45.453224][ T3939] netlink: 'syz.4.132': attribute type 1 has an invalid length.
[   45.460961][ T3939] netlink: 224 bytes leftover after parsing attributes in process `syz.4.132'.
[   45.463688][ T3917] EXT4-fs (loop2): 1 truncate cleaned up
[   45.477105][ T3917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.491988][ T3917] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.503898][ T3917] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.585753][ T3917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'.
[   45.599700][ T3953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.630731][ T3955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.634440][ T3953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.648913][ T3957] Falling back ldisc for ttyS3.
[   45.654180][ T3955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.662012][ T3957] FAULT_INJECTION: forcing a failure.
[   45.662012][ T3957] name failslab, interval 1, probability 0, space 0, times 0
[   45.674799][ T3957] CPU: 1 UID: 0 PID: 3957 Comm: syz.0.136 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.674827][ T3957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   45.674837][ T3957] Call Trace:
[   45.674844][ T3957]  <TASK>
[   45.674852][ T3957]  __dump_stack+0x1d/0x30
[   45.674874][ T3957]  dump_stack_lvl+0xe8/0x140
[   45.674954][ T3957]  dump_stack+0x15/0x1b
[   45.674990][ T3957]  should_fail_ex+0x265/0x280
[   45.675085][ T3957]  should_failslab+0x8c/0xb0
[   45.675155][ T3957]  __kmalloc_node_noprof+0xa9/0x410
[   45.675250][ T3957]  ? __vmalloc_node_range_noprof+0x3f9/0xe00
[   45.675278][ T3957]  __vmalloc_node_range_noprof+0x3f9/0xe00
[   45.675310][ T3957]  ? tty_ldisc_get+0x1d4/0x210
[   45.675384][ T3957]  ? should_failslab+0x19/0xb0
[   45.675403][ T3957]  ? n_tty_open+0x1b/0xf0
[   45.675422][ T3957]  vzalloc_noprof+0x82/0xc0
[   45.675488][ T3957]  ? n_tty_open+0x1b/0xf0
[   45.675507][ T3957]  n_tty_open+0x1b/0xf0
[   45.675526][ T3957]  tty_ldisc_failto+0xe8/0x1a0
[   45.675543][ T3957]  tty_ldisc_restore+0x71/0xc0
[   45.675616][ T3957]  tty_set_ldisc+0x209/0x380
[   45.675641][ T3957]  tiocsetd+0x51/0x60
[   45.675657][ T3957]  tty_ioctl+0xa7f/0xb80
[   45.675671][ T3957]  ? __pfx_tty_ioctl+0x10/0x10
[   45.675708][ T3957]  __se_sys_ioctl+0xcb/0x140
[   45.675724][ T3957]  __x64_sys_ioctl+0x43/0x50
[   45.675738][ T3957]  x64_sys_call+0x1816/0x2ff0
[   45.675756][ T3957]  do_syscall_64+0xd2/0x200
[   45.675816][ T3957]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   45.675837][ T3957]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   45.675860][ T3957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.675879][ T3957] RIP: 0033:0x7f36a463ebe9
[   45.675966][ T3957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.675981][ T3957] RSP: 002b:00007f36a309f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   45.675999][ T3957] RAX: ffffffffffffffda RBX: 00007f36a4875fa0 RCX: 00007f36a463ebe9
[   45.676033][ T3957] RDX: 0000200000000400 RSI: 0000000000005423 RDI: 0000000000000005
[   45.676044][ T3957] RBP: 00007f36a309f090 R08: 0000000000000000 R09: 0000000000000000
[   45.676054][ T3957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.676065][ T3957] R13: 00007f36a4876038 R14: 00007f36a4875fa0 R15: 00007fff59a29988
[   45.676079][ T3957]  </TASK>
[   45.676088][ T3957] syz.0.136: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   45.913875][ T3960] No source specified
[   45.926089][ T3957] CPU: 1 UID: 0 PID: 3957 Comm: syz.0.136 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.926122][ T3957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   45.926134][ T3957] Call Trace:
[   45.926152][ T3957]  <TASK>
[   45.926205][ T3957]  __dump_stack+0x1d/0x30
[   45.926227][ T3957]  dump_stack_lvl+0xe8/0x140
[   45.926246][ T3957]  dump_stack+0x15/0x1b
[   45.926296][ T3957]  warn_alloc+0x12b/0x1a0
[   45.926340][ T3957]  ? should_failslab+0x8c/0xb0
[   45.926365][ T3957]  __vmalloc_node_range_noprof+0x497/0xe00
[   45.926402][ T3957]  ? tty_ldisc_get+0x1d4/0x210
[   45.926460][ T3957]  ? should_failslab+0x19/0xb0
[   45.926549][ T3957]  ? n_tty_open+0x1b/0xf0
[   45.926571][ T3957]  vzalloc_noprof+0x82/0xc0
[   45.926598][ T3957]  ? n_tty_open+0x1b/0xf0
[   45.926661][ T3957]  n_tty_open+0x1b/0xf0
[   45.926683][ T3957]  tty_ldisc_failto+0xe8/0x1a0
[   45.926708][ T3957]  tty_ldisc_restore+0x71/0xc0
[   45.926744][ T3957]  tty_set_ldisc+0x209/0x380
[   45.926810][ T3957]  tiocsetd+0x51/0x60
[   45.926894][ T3957]  tty_ioctl+0xa7f/0xb80
[   45.926911][ T3957]  ? __pfx_tty_ioctl+0x10/0x10
[   45.926929][ T3957]  __se_sys_ioctl+0xcb/0x140
[   45.926947][ T3957]  __x64_sys_ioctl+0x43/0x50
[   45.926965][ T3957]  x64_sys_call+0x1816/0x2ff0
[   45.926986][ T3957]  do_syscall_64+0xd2/0x200
[   45.927131][ T3957]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   45.927154][ T3957]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   45.927200][ T3957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.927349][ T3957] RIP: 0033:0x7f36a463ebe9
[   45.927365][ T3957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.927382][ T3957] RSP: 002b:00007f36a309f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   45.927402][ T3957] RAX: ffffffffffffffda RBX: 00007f36a4875fa0 RCX: 00007f36a463ebe9
[   45.927415][ T3957] RDX: 0000200000000400 RSI: 0000000000005423 RDI: 0000000000000005
[   45.927427][ T3957] RBP: 00007f36a309f090 R08: 0000000000000000 R09: 0000000000000000
[   45.927439][ T3957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.927488][ T3957] R13: 00007f36a4876038 R14: 00007f36a4875fa0 R15: 00007fff59a29988
[   45.927505][ T3957]  </TASK>
[   45.927512][ T3957] Mem-Info:
[   46.029757][ T3958] loop1: detected capacity change from 0 to 1024
[   46.033846][ T3957] active_anon:6744 inactive_anon:0 isolated_anon:0
[   46.033846][ T3957]  active_file:19243 inactive_file:2419 isolated_file:0
[   46.033846][ T3957]  unevictable:0 dirty:128 writeback:0
[   46.033846][ T3957]  slab_reclaimable:3142 slab_unreclaimable:70891
[   46.033846][ T3957]  mapped:29654 shmem:292 pagetables:1368
[   46.033846][ T3957]  sec_pagetables:0 bounce:0
[   46.033846][ T3957]  kernel_misc_reclaimable:0
[   46.033846][ T3957]  free:1814007 free_pcp:26301 free_cma:0
[   46.111543][ T3958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.115722][ T3957] Node 0 active_anon:27092kB inactive_anon:0kB active_file:76972kB inactive_file:9676kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118616kB dirty:512kB writeback:0kB shmem:1168kB kernel_stack:3360kB pagetables:5472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   46.244426][ T3957] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   46.273131][ T3957] lowmem_reserve[]: 0 2883 7862 7862
[   46.278452][ T3957] Node 0 DMA32 free:2949188kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB
[   46.309031][ T3957] lowmem_reserve[]: 0 0 4978 4978
[   46.314183][ T3957] Node 0 Normal free:4291480kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27092kB inactive_anon:0kB active_file:76972kB inactive_file:9676kB unevictable:0kB writepending:512kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:101440kB local_pcp:14436kB free_cma:0kB
[   46.346363][ T3957] lowmem_reserve[]: 0 0 0 0
[   46.350966][ T3957] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   46.363786][ T3957] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949188kB
[   46.379981][ T3957] Node 0 Normal: 442*4kB (UE) 216*8kB (UME) 154*16kB (UME) 149*32kB (UME) 254*64kB (UME) 210*128kB (UME) 217*256kB (UME) 130*512kB (UME) 115*1024kB (UM) 52*2048kB (UME) 950*4096kB (UM) = 4291432kB
[   46.399605][ T3957] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   46.408972][ T3957] 21956 total pagecache pages
[   46.413948][ T3957] 0 pages in swap cache
[   46.418113][ T3957] Free swap  = 124996kB
[   46.422426][ T3957] Total swap = 124996kB
[   46.426588][ T3957] 2097051 pages RAM
[   46.430465][ T3957] 0 pages HighMem/MovableOnly
[   46.435140][ T3957] 80446 pages reserved
[   46.628956][   T29] kauditd_printk_skb: 110 callbacks suppressed
[   46.628972][   T29] audit: type=1326 audit(1757377588.246:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0a9472ebe9 code=0x7ffc0000
[   46.660387][   T29] audit: type=1326 audit(1757377588.286:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0a9472ebe9 code=0x7ffc0000
[   46.685098][   T29] audit: type=1326 audit(1757377588.306:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0a9472ebe9 code=0x7ffc0000
[   46.709639][   T29] audit: type=1326 audit(1757377588.326:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0a9472ebe9 code=0x7ffc0000
[   46.735437][   T29] audit: type=1326 audit(1757377588.356:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0a9472ebe9 code=0x7ffc0000
[   46.760386][   T29] audit: type=1326 audit(1757377588.386:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0a9472ebe9 code=0x7ffc0000
[   46.784944][   T29] audit: type=1326 audit(1757377588.406:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0a9472ebe9 code=0x7ffc0000
[   46.809162][   T29] audit: type=1326 audit(1757377588.426:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0a9472ebe9 code=0x7ffc0000
[   46.833403][   T29] audit: type=1326 audit(1757377588.456:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0a9472ebe9 code=0x7ffc0000
[   46.859115][   T29] audit: type=1326 audit(1757377588.476:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0a9472ebe9 code=0x7ffc0000
[   47.002283][ T3989] Falling back ldisc for ttyS3.
[   47.124076][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.244425][ T4003] FAULT_INJECTION: forcing a failure.
[   47.244425][ T4003] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.257636][ T4003] CPU: 1 UID: 0 PID: 4003 Comm: syz.1.152 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   47.257723][ T4003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   47.257735][ T4003] Call Trace:
[   47.257742][ T4003]  <TASK>
[   47.257751][ T4003]  __dump_stack+0x1d/0x30
[   47.257777][ T4003]  dump_stack_lvl+0xe8/0x140
[   47.257882][ T4003]  dump_stack+0x15/0x1b
[   47.257920][ T4003]  should_fail_ex+0x265/0x280
[   47.257966][ T4003]  should_fail+0xb/0x20
[   47.258056][ T4003]  should_fail_usercopy+0x1a/0x20
[   47.258149][ T4003]  _copy_to_user+0x20/0xa0
[   47.258288][ T4003]  simple_read_from_buffer+0xb5/0x130
[   47.258309][ T4003]  proc_fail_nth_read+0x10e/0x150
[   47.258339][ T4003]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   47.258394][ T4003]  vfs_read+0x1a5/0x770
[   47.258417][ T4003]  ? __rcu_read_unlock+0x4f/0x70
[   47.258439][ T4003]  ? __fget_files+0x184/0x1c0
[   47.258464][ T4003]  ksys_read+0xda/0x1a0
[   47.258487][ T4003]  __x64_sys_read+0x40/0x50
[   47.258520][ T4003]  x64_sys_call+0x27bc/0x2ff0
[   47.258606][ T4003]  do_syscall_64+0xd2/0x200
[   47.258646][ T4003]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   47.258667][ T4003]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   47.258690][ T4003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.258710][ T4003] RIP: 0033:0x7f79c200d5fc
[   47.258795][ T4003] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   47.258813][ T4003] RSP: 002b:00007f79c0a77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   47.258835][ T4003] RAX: ffffffffffffffda RBX: 00007f79c2245fa0 RCX: 00007f79c200d5fc
[   47.258849][ T4003] RDX: 000000000000000f RSI: 00007f79c0a770a0 RDI: 0000000000000004
[   47.258863][ T4003] RBP: 00007f79c0a77090 R08: 0000000000000000 R09: 0000000000000000
[   47.258875][ T4003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.258887][ T4003] R13: 00007f79c2246038 R14: 00007f79c2245fa0 R15: 00007ffde3f24c48
[   47.258905][ T4003]  </TASK>
[   47.473973][ T4005] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   47.556384][ T4015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.568688][ T4015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.620406][ T4020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.648887][ T4022] FAULT_INJECTION: forcing a failure.
[   47.648887][ T4022] name failslab, interval 1, probability 0, space 0, times 0
[   47.653239][ T4020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.661587][ T4022] CPU: 1 UID: 0 PID: 4022 Comm: syz.2.160 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   47.661614][ T4022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   47.661625][ T4022] Call Trace:
[   47.661633][ T4022]  <TASK>
[   47.661641][ T4022]  __dump_stack+0x1d/0x30
[   47.661663][ T4022]  dump_stack_lvl+0xe8/0x140
[   47.661755][ T4022]  dump_stack+0x15/0x1b
[   47.661771][ T4022]  should_fail_ex+0x265/0x280
[   47.661816][ T4022]  should_failslab+0x8c/0xb0
[   47.661846][ T4022]  kmem_cache_alloc_noprof+0x50/0x310
[   47.661904][ T4022]  ? sctp_get_port_local+0x438/0xae0
[   47.661928][ T4022]  sctp_get_port_local+0x438/0xae0
[   47.661951][ T4022]  sctp_do_bind+0x398/0x4b0
[   47.661971][ T4022]  sctp_connect_new_asoc+0x153/0x3a0
[   47.662040][ T4022]  sctp_sendmsg+0xf10/0x18d0
[   47.662060][ T4022]  ? selinux_socket_sendmsg+0x141/0x1b0
[   47.662090][ T4022]  ? __pfx_sctp_sendmsg+0x10/0x10
[   47.662108][ T4022]  inet_sendmsg+0xc5/0xd0
[   47.662131][ T4022]  __sock_sendmsg+0x102/0x180
[   47.662216][ T4022]  __sys_sendto+0x268/0x330
[   47.662244][ T4022]  __x64_sys_sendto+0x76/0x90
[   47.662265][ T4022]  x64_sys_call+0x2d05/0x2ff0
[   47.662286][ T4022]  do_syscall_64+0xd2/0x200
[   47.662322][ T4022]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   47.662345][ T4022]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   47.662371][ T4022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.662450][ T4022] RIP: 0033:0x7f0a9472ebe9
[   47.662466][ T4022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.662484][ T4022] RSP: 002b:00007f0a9318f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   47.662504][ T4022] RAX: ffffffffffffffda RBX: 00007f0a94965fa0 RCX: 00007f0a9472ebe9
[   47.662567][ T4022] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[   47.662579][ T4022] RBP: 00007f0a9318f090 R08: 0000200000000100 R09: 000000000000001c
[   47.662608][ T4022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.662620][ T4022] R13: 00007f0a94966038 R14: 00007f0a94965fa0 R15: 00007ffdac32e488
[   47.662637][ T4022]  </TASK>
[   47.946418][ T4027] loop1: detected capacity change from 0 to 1024
[   48.006417][ T4027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.551248][ T4062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.575394][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.584970][ T4062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.625661][ T4064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.176'.
[   48.756323][ T4065] netlink: zone id is out of range
[   48.761526][ T4065] netlink: zone id is out of range
[   48.775088][ T4065] netlink: zone id is out of range
[   48.789861][ T4065] netlink: zone id is out of range
[   48.800234][ T4065] netlink: zone id is out of range
[   48.810006][ T4065] netlink: zone id is out of range
[   48.815138][ T4065] netlink: zone id is out of range
[   48.827148][ T4047] loop0: detected capacity change from 0 to 1024
[   48.834603][ T4065] netlink: zone id is out of range
[   48.860706][ T4047] EXT4-fs: Ignoring removed orlov option
[   48.936699][ T4047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.048691][ T4073] SELinux: failed to load policy
[   49.130755][ T4075] loop4: detected capacity change from 0 to 512
[   49.150346][ T4075] EXT4-fs: Ignoring removed mblk_io_submit option
[   49.171958][ T4075] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   49.210730][ T4075] EXT4-fs (loop4): 1 truncate cleaned up
[   49.246220][ T4075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.394044][ T4078] SELinux:  unknown common r
[   49.398766][ T4078] SELinux: failed to load policy
[   49.614985][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.787860][ T4098] FAULT_INJECTION: forcing a failure.
[   49.787860][ T4098] name failslab, interval 1, probability 0, space 0, times 0
[   49.800787][ T4098] CPU: 1 UID: 0 PID: 4098 Comm: syz.0.186 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   49.800864][ T4098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   49.800875][ T4098] Call Trace:
[   49.800882][ T4098]  <TASK>
[   49.800890][ T4098]  __dump_stack+0x1d/0x30
[   49.800911][ T4098]  dump_stack_lvl+0xe8/0x140
[   49.800928][ T4098]  dump_stack+0x15/0x1b
[   49.800942][ T4098]  should_fail_ex+0x265/0x280
[   49.801029][ T4098]  should_failslab+0x8c/0xb0
[   49.801050][ T4098]  kmem_cache_alloc_node_noprof+0x57/0x320
[   49.801075][ T4098]  ? __alloc_skb+0x101/0x320
[   49.801094][ T4098]  __alloc_skb+0x101/0x320
[   49.801128][ T4098]  netlink_alloc_large_skb+0xba/0xf0
[   49.801226][ T4098]  netlink_sendmsg+0x3cf/0x6b0
[   49.801248][ T4098]  ? __pfx_netlink_sendmsg+0x10/0x10
[   49.801337][ T4098]  __sock_sendmsg+0x142/0x180
[   49.801363][ T4098]  ____sys_sendmsg+0x31e/0x4e0
[   49.801386][ T4098]  ___sys_sendmsg+0x17b/0x1d0
[   49.801418][ T4098]  __x64_sys_sendmsg+0xd4/0x160
[   49.801581][ T4098]  x64_sys_call+0x191e/0x2ff0
[   49.801683][ T4098]  do_syscall_64+0xd2/0x200
[   49.801764][ T4098]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   49.801858][ T4098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.801882][ T4098] RIP: 0033:0x7f36a463ebe9
[   49.801900][ T4098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.801992][ T4098] RSP: 002b:00007f36a307e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   49.802015][ T4098] RAX: ffffffffffffffda RBX: 00007f36a4876090 RCX: 00007f36a463ebe9
[   49.802055][ T4098] RDX: 0000000000004080 RSI: 00002000000000c0 RDI: 0000000000000006
[   49.802068][ T4098] RBP: 00007f36a307e090 R08: 0000000000000000 R09: 0000000000000000
[   49.802079][ T4098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   49.802089][ T4098] R13: 00007f36a4876128 R14: 00007f36a4876090 R15: 00007fff59a29988
[   49.802105][ T4098]  </TASK>
[   50.055085][ T4101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.080724][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.116840][ T4101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.174815][ T4108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.183389][ T4109] loop1: detected capacity change from 0 to 512
[   50.191178][ T4109] EXT4-fs: Ignoring removed nobh option
[   50.209874][ T4108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.220374][ T4110] loop0: detected capacity change from 0 to 1024
[   50.226923][ T4109] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.189: corrupted inode contents
[   50.250808][ T4109] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.189: mark_inode_dirty error
[   50.279015][ T4109] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.189: corrupted inode contents
[   50.293166][ T4110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.305371][ T4109] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.189: mark_inode_dirty error
[   50.317378][ T4109] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.189: Failed to acquire dquot type 0
[   50.331460][ T4109] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.189: corrupted inode contents
[   50.343930][ T4109] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.189: mark_inode_dirty error
[   50.356544][ T4109] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.189: corrupted inode contents
[   50.370284][ T4109] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.189: mark_inode_dirty error
[   50.382485][ T4109] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.189: corrupted inode contents
[   50.394769][ T4109] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   50.404239][ T4109] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.189: corrupted inode contents
[   50.416515][ T4109] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.189: mark_inode_dirty error
[   50.428730][ T4109] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   50.438171][ T4109] EXT4-fs (loop1): 1 truncate cleaned up
[   50.445404][ T4109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.458201][ T4109] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.470061][ T4109] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.530401][ T4105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'.
[   50.848832][ T4140] FAULT_INJECTION: forcing a failure.
[   50.848832][ T4140] name failslab, interval 1, probability 0, space 0, times 0
[   50.861693][ T4140] CPU: 1 UID: 0 PID: 4140 Comm: syz.2.198 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   50.861776][ T4140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   50.861789][ T4140] Call Trace:
[   50.861796][ T4140]  <TASK>
[   50.861804][ T4140]  __dump_stack+0x1d/0x30
[   50.861873][ T4140]  dump_stack_lvl+0xe8/0x140
[   50.861893][ T4140]  dump_stack+0x15/0x1b
[   50.861911][ T4140]  should_fail_ex+0x265/0x280
[   50.861936][ T4140]  should_failslab+0x8c/0xb0
[   50.861966][ T4140]  __kmalloc_node_noprof+0xa9/0x410
[   50.861997][ T4140]  ? __vmalloc_node_range_noprof+0x3f9/0xe00
[   50.862033][ T4140]  __vmalloc_node_range_noprof+0x3f9/0xe00
[   50.862118][ T4140]  ? sel_write_load+0x158/0x380
[   50.862145][ T4140]  vmalloc_noprof+0x82/0xc0
[   50.862177][ T4140]  ? sel_write_load+0x158/0x380
[   50.862266][ T4140]  sel_write_load+0x158/0x380
[   50.862292][ T4140]  ? __pfx_sel_write_load+0x10/0x10
[   50.862318][ T4140]  vfs_write+0x266/0x960
[   50.862341][ T4140]  ? __rcu_read_unlock+0x4f/0x70
[   50.862369][ T4140]  ? __fget_files+0x184/0x1c0
[   50.862409][ T4140]  ksys_write+0xda/0x1a0
[   50.862433][ T4140]  __x64_sys_write+0x40/0x50
[   50.862457][ T4140]  x64_sys_call+0x27fe/0x2ff0
[   50.862480][ T4140]  do_syscall_64+0xd2/0x200
[   50.862571][ T4140]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   50.862597][ T4140]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   50.862628][ T4140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.862723][ T4140] RIP: 0033:0x7f0a9472ebe9
[   50.862740][ T4140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.862757][ T4140] RSP: 002b:00007f0a9318f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   50.862808][ T4140] RAX: ffffffffffffffda RBX: 00007f0a94965fa0 RCX: 00007f0a9472ebe9
[   50.862821][ T4140] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000007
[   50.862835][ T4140] RBP: 00007f0a9318f090 R08: 0000000000000000 R09: 0000000000000000
[   50.862847][ T4140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.862860][ T4140] R13: 00007f0a94966038 R14: 00007f0a94965fa0 R15: 00007ffdac32e488
[   50.862879][ T4140]  </TASK>
[   51.122181][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.153883][ T4145] loop4: detected capacity change from 0 to 512
[   51.180577][ T4145] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.201: bad orphan inode 11862016
[   51.208479][ T4150] loop0: detected capacity change from 0 to 128
[   51.224986][ T4150] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[   51.235335][ T4152] 9pnet_fd: Insufficient options for proto=fd
[   51.248126][ T4145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   51.261255][ T3293] udevd[3293]: incorrect ext4 checksum on /dev/loop0
[   51.294997][ T4145] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.321076][ T4157] loop2: detected capacity change from 0 to 512
[   51.333963][ T4157] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   51.361316][ T4158] loop0: detected capacity change from 0 to 512
[   51.373235][ T4158] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   51.391060][ T4157] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.203: invalid indirect mapped block 4294967295 (level 0)
[   51.406651][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   51.437098][ T4158] EXT4-fs (loop0): 1 truncate cleaned up
[   51.451727][ T4158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.486444][ T4157] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.203: invalid indirect mapped block 4294967295 (level 1)
[   51.537375][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.547669][ T4157] EXT4-fs (loop2): 1 orphan inode deleted
[   51.553454][ T4157] EXT4-fs (loop2): 1 truncate cleaned up
[   51.567773][ T4157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.568287][ T4168] loop0: detected capacity change from 0 to 512
[   51.609511][ T4168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.623129][ T4168] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   51.643309][   T29] kauditd_printk_skb: 349 callbacks suppressed
[   51.643325][   T29] audit: type=1400 audit(1757377593.266:1175): avc:  denied  { append } for  pid=4167 comm="syz.0.207" path="/53/bus/blkio.bfq.time" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   52.170779][   T29] audit: type=1326 audit(1757377593.776:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   52.194202][   T29] audit: type=1326 audit(1757377593.776:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   52.217715][   T29] audit: type=1326 audit(1757377593.786:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   52.241049][   T29] audit: type=1326 audit(1757377593.786:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   52.264376][   T29] audit: type=1326 audit(1757377593.786:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   52.287694][   T29] audit: type=1326 audit(1757377593.786:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   52.311099][   T29] audit: type=1326 audit(1757377593.786:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   52.334514][   T29] audit: type=1326 audit(1757377593.786:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   52.345645][ T4179] random: crng reseeded on system resumption
[   52.357908][   T29] audit: type=1326 audit(1757377593.786:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79c200ebe9 code=0x7ffc0000
[   52.465542][ T4179] netlink: 'syz.1.209': attribute type 1 has an invalid length.
[   52.473283][ T4179] netlink: 224 bytes leftover after parsing attributes in process `syz.1.209'.
[   52.486024][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.496550][ T4181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.506638][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.521143][ T4181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.546084][ T4183] netlink: 72 bytes leftover after parsing attributes in process `syz.0.210'.
[   52.593973][ T4187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.622607][ T4187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.640197][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'.
[   52.744132][ T4193] loop0: detected capacity change from 0 to 1024
[   52.783976][ T4193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.858933][ T4199] 9pnet_fd: Insufficient options for proto=fd
[   52.867787][    T9] hid_parser_main: 17 callbacks suppressed
[   52.867805][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.881093][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.892599][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.900143][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.907639][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.915092][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.922523][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.929954][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.937363][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.944821][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.956999][    T9] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   52.996248][ T4203] loop1: detected capacity change from 0 to 512
[   53.004454][ T4203] ==================================================================
[   53.012609][ T4203] BUG: KCSAN: data-race in __filemap_add_folio / invalidate_bdev
[   53.020362][ T4203] 
[   53.022702][ T4203] read-write to 0xffff8881005f0bb8 of 8 bytes by task 3293 on cpu 0:
[   53.030784][ T4203]  __filemap_add_folio+0x5b9/0x7d0
[   53.035934][ T4203]  filemap_add_folio+0x98/0x1b0
[   53.040898][ T4203]  page_cache_ra_unbounded+0x1f3/0x380
[   53.046373][ T4203]  page_cache_sync_ra+0x256/0x6c0
[   53.051426][ T4203]  filemap_get_pages+0x2d0/0x1150
[   53.056465][ T4203]  filemap_read+0x231/0xa00
[   53.060291][ T4201] fido_id[4201]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   53.060981][ T4203]  blkdev_read_iter+0x22d/0x2e0
[   53.079300][ T4203]  vfs_read+0x64c/0x770
[   53.083467][ T4203]  ksys_read+0xda/0x1a0
[   53.087645][ T4203]  __x64_sys_read+0x40/0x50
[   53.092150][ T4203]  x64_sys_call+0x27bc/0x2ff0
[   53.096850][ T4203]  do_syscall_64+0xd2/0x200
[   53.101366][ T4203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.107278][ T4203] 
[   53.109633][ T4203] read to 0xffff8881005f0bb8 of 8 bytes by task 4203 on cpu 1:
[   53.117265][ T4203]  invalidate_bdev+0x25/0x70
[   53.121886][ T4203]  bdev_disk_changed+0xeb/0xcb0
[   53.126834][ T4203]  blkdev_get_whole+0x1f5/0x2d0
[   53.131790][ T4203]  bdev_open+0x280/0x7e0
[   53.136040][ T4203]  bdev_file_open_by_dev+0x1e6/0x250
[   53.141333][ T4203]  setup_bdev_super+0x46/0x370
[   53.146110][ T4203]  get_tree_bdev_flags+0x21c/0x300
[   53.151229][ T4203]  get_tree_bdev+0x1f/0x30
[   53.155648][ T4203]  ext4_get_tree+0x1c/0x30
[   53.160162][ T4203]  vfs_get_tree+0x57/0x1d0
[   53.164593][ T4203]  do_new_mount+0x207/0x5e0
[   53.169113][ T4203]  path_mount+0x4a4/0xb20
[   53.173446][ T4203]  __se_sys_mount+0x28f/0x2e0
[   53.178127][ T4203]  __x64_sys_mount+0x67/0x80
[   53.182721][ T4203]  x64_sys_call+0x2b4d/0x2ff0
[   53.187506][ T4203]  do_syscall_64+0xd2/0x200
[   53.192126][ T4203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.198110][ T4203] 
[   53.200431][ T4203] value changed: 0x0000000000000000 -> 0x0000000000000001
[   53.207535][ T4203] 
[   53.209865][ T4203] Reported by Kernel Concurrency Sanitizer on:
[   53.216098][ T4203] CPU: 1 UID: 0 PID: 4203 Comm: syz.1.216 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   53.225828][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   53.236001][ T4203] ==================================================================
[   53.273173][ T4203] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.216: bad orphan inode 11862016
[   53.285188][ T4203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   53.298119][ T4203] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.331921][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   53.455943][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.