last executing test programs:

6m33.059322052s ago: executing program 0 (id=1534):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000005304"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3, 0x0, 0x8000000000000}, 0x9)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r0, &(0x7f0000000580)="162ab044b28fff7074aef86676e10bc4995733375549b9d79bd5562c76d001f0466c1eaf9080f121846fbd403f3680e1e170862149deaf3ff80221e8a9fc9394a12b0a9840d783c9a34800c2c8c6899f0c05c370134165233cf790e33d020d5ca4e3726487bcef454cc3368aedfa5e27247edf5c62ea79979de1ab98037efd368dc86f08a4650152", &(0x7f0000000900)=""/184}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5, 0x0, 0x8000000000000}, 0x9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000008f08000000000000000000008500000061000000850000002a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = fsopen(&(0x7f0000000100)='coda\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)=':}:\\@\x00', &(0x7f0000000340)='GPL\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0xcc0, 0x0, &(0x7f00000000c0)="e30080670000ec67838717bd86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})

6m32.738929819s ago: executing program 0 (id=1537):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) (fail_nth: 1)

6m32.716683259s ago: executing program 0 (id=1538):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x8100, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x7, @empty, 0xbff}, @ib={0x1b, 0xf, 0xffb, {"50916300"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000000)=0xffffffff, 0x4)
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000d5"], 0x24}}, 0x800)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)

6m32.698600659s ago: executing program 0 (id=1540):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0x8, 0x617, &(0x7f0000001100)="$eJzs3c9vVNUeAPDvnf6kfe9NIS/viQtpYgwkSksLGGJMhD0h+GPnqtJCkEIJrdEiiSXBjYlx48LElQvxv1ASt/4DLty4MiTEGBZiiIy5M3PL7XSmP6admTLz+SRXz7mXOefcyXz7vXPm3JkAetZ4+p9CxMGIuJ5EFHPH+qN6cLzy7x7+cetCuiVRKr39exK3PklW8m0l1f+PVh/8dzGSdOeBvvX9Li7fvDIzPz93o1qfXLp6fXJx+ebRy1dnLs1dmrs2/er0qZMnTp6aOraj8yvkymfvvP9h8bNz73779eNk6rtfziVxOp5Ux5aeV+1jh3bUc/qcjUep4lF+f/q8ntph23vFn8XsdfJUUrsj0y0n3UUuVl+PAxHx/yhGX+5VX4xP3+zo4ICWKiWrObIE9JqkqcAf3v2BAG2WXQdk7+3rvQ9er9DKSxKgTR6cqUwAVGJ/ICKy+O+vzA3GcHluYORhsmaeJ4mInc3MVaR9/PTjuTvpFg3m4YDWWLmdzffV5v+kHJtjMVyujTwsrIn/Qm5L97/VZP+VvzFP5xzFP7TPyu2IeK6a/wdjW/E/nov/9+q2vvknaOM1dfEPAAAAAAAAzbt3JiJeqbf+r7C6/mewzvqf0Yg4vQv9b/75X+F+tZDsQndAzoMzEa/XXf+7usZ3rK9a+3d5PcBAcvHy/NyxiPhPRByJgaG0PlXTbn6F8NHPD3zVqP/8+r90S/vP1gJWW7rfX7OMYHZmaWan5w1EPLgd8Xx5/e+h6p6163/S/J/Uyf9pfF/fYh8HXrp7vtGxzeMfaJXSNxGH6+b/p5fbycbfzzFZvh6YzK4K1nvh4y++b9S/+IfOSfP/yMbxP5Tkv69ncXvtD0bE8eX+UqPjzV7/Dybv9GXtpz6aWVq6MRUxmJxdv396e2OGbpXFQxYvafwfeXHj+b/V6/9cHO6LiJUt9vm/J6O/Njom/0PnpPE/u3H+H1ub/7dfmL479kOj/s9vKf+fKOf0I9U95v8gb/33cWw1QDsyXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4xhUi4l+RFCZWy4XCxETEaET8N0YK8wuLSy9fXPjg2mx6rPz7/4Xsl36LlXqS/f7/WK4+XVM/HhH7I+LLvn3l+sSFhfnZTp88AAAAAAAAAAAAAAAAAAAA7BGj5Xv+S0O19/+nfuvr9OiAVkpjPvqrFfEOvae/6UeWhnZ1IEDbNR//wLOucfzXpveBlo8FaK/G8f/ocamsrcMB2sj1P/SuJuPfxwXQBeR/6FVbnNMbbvU4gE6Q/wEAAAAAoKvsP3Tv5yQiVl7bV95Sg9VjFvtDdyt0egBAx1jDC72rf6HTIwA6xXt8IFkt/VX3Zv/Gq/+T1gwIAAAAAAAAAAAAAFjn8EH3/0Ov2vj+f2v7oZttcP9/veD3dQHQRRr/9IfcD93Oe3zoaaXiFrK9+/8BAAAAAAAAAAAAYA8YvnllZn5+7sbi8rNXeGPXW85uh27h4Fdm9sJTt7uFJ61peSAi9sYJtrsw2PrX4WaFDv5NAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1vgnAAD//48wHak=")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/117, 0x75}], 0x1}, 0xfffffffe}], 0x1, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20)
recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

6m32.469245184s ago: executing program 0 (id=1542):
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0, 0x2af, &(0x7f0000000300)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQtnajIWtSsmskIrY3r76O4tGbYH0DvXjzLl6KInjpQbrS3W6zrWtrte22yfcDZac782Rm/yQ8uzCzdufV43rVMaqmK6msSkqyS7IuUpCUhAa2tim/nJGoJbk8+v3juVt3710vlctTM6rTpdkrRVUdP//u6fPXF967o7ffjL8dltXC/bVvxU+r/6+eWduYDT+96aqpc82ma87Zls7XnLqhetO2TMfSWsOxWjvqq3ZzYaGjZmN+LLfQshxHzUZH61ZH3aa6rY6aD81aQw3D0LGcxMnE7u0NgweOqCzPzJilIxkMkjASt7PVKpmDsZWV5eMYFAAAOFl+zf/lWPL/RzVHa4429sv/U3K4+T+i/Px/IzZpRG9Ibz4AlMzc1vd3J/J/AAAAAAAAAAAAAAAAAAAAAABOg3XPy3uelw+34d+wiGRFJPz/d3OLcbod4PqHBhIcLg5ZZOJeVsR+2a60K8E2qC9VpSa2WDKR9ucSeduC8vS18tSE+gqyYi9uxfuTBIfD+FAhPn4yiNdI/GK7kpZctP+i5OW/+Pjirvi0iLQrGbl0MRJvSF4+PJCm2DLv39fd+BeTqldvlHf1P+K3AwAAAACgFxi6rbDz+TdYTdIwNFw2ZFd9sLP7fkDy8mPP9wMqKxnpxg/J2aHkjhsAAAAAgH7idJ7VTdu2Wv1cGJGDR/XjqTOywU2zZ2PP8xY3G/17pykRSehIv4jICTjhh134/CS4gLa1tG/jJH+VAAAAAByFbtKf9EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOhff7p4mN+4/vWvFkWLdDeY2IECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8DPAAAA///FAxr+")
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x80047210, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18)
syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x95}, 0x200410c4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
getrlimit(0x8, &(0x7f0000000000))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@inlinecrypt}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$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")
getdents64(0xffffffffffffffff, 0x0, 0x0)

6m31.778921437s ago: executing program 0 (id=1553):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x4}, 0x18)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)

6m31.750213577s ago: executing program 32 (id=1553):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x4}, 0x18)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)

6m25.17212567s ago: executing program 2 (id=1619):
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x4, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0xd, 0xf18, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x1080)
write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[], 0x15)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1)
r2 = fcntl$dupfd(r1, 0x406, r1)
write$sndseq(r2, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x2}, @raw32={[0x3, 0x7]}}, {0x0, 0x0, 0xfd, 0x4, @tick=0xf1f, {0x6, 0x4}, {0xc}, @result={0x8, 0x2}}], 0x38)
write$binfmt_elf64(r2, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xd, 0x9, 0x8, 0x40, 0x2, 0x3, 0x3d, 0x213, 0x40, 0x29d, 0xffff, 0x2f0, 0x38, 0x4, 0x3, 0xd9, 0xa}, [{0x5, 0x3, 0x1, 0x100000001, 0x331, 0x4, 0x3}, {0x1, 0xef, 0x5, 0x0, 0xe3, 0x7, 0xff, 0x7fffffffffffffff}, {0x5, 0x6, 0x5feb, 0x1, 0x1900000000000000, 0xfffffffffffffff1, 0x64ed401b, 0x3}, {0x3, 0x9e08, 0x90, 0x6, 0x664e, 0x0, 0x9, 0xcc}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x720)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
umount2(&(0x7f0000000580)='./file0\x00', 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18)
ioprio_get$uid(0x3, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x418, 0x0, 0x230, 0xffffffff, 0x300, 0x300, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0x0, 'tunl0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x52}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x7, 0x4, 0xc, 0x0, 0x4], 0x3, 0x7}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @rand_addr=0x64010101, @multicast1, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0x2}}, @common=@ttl={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7f, 0xc, [0xe, 0x22, 0x3e, 0x11, 0x1b, 0x7, 0x15, 0x31, 0x12, 0xe, 0x27, 0x18, 0x26, 0x38, 0x2a, 0x33], 0x0, 0x7fffffff, 0x81}}}, {{@ip={@loopback, @local, 0xffffffff, 0x0, 'caif0\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @multicast2, @loopback, @icmp_id=0x64, @gre_key=0xfffe}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x78195242f88d37ad, @rand_addr=0x64010100, @broadcast, @icmp_id=0x67, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8)
ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000000280)=""/6)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800400, &(0x7f0000003240)=ANY=[], 0x2, 0x33c, &(0x7f0000000340)="$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")
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4)

6m25.097662401s ago: executing program 2 (id=1622):
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x0, 0x2af, &(0x7f0000000300)="$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")
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x80047210, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r4, 0x2, {0x3}}, 0x18)
syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x95}, 0x200410c4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
getrlimit(0x8, &(0x7f0000000000))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@inlinecrypt}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$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")
getdents64(0xffffffffffffffff, 0x0, 0x0)

6m24.958117873s ago: executing program 2 (id=1624):
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000004c0)={<r0=>0x0, 0x7}, &(0x7f0000000500)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000540)=r0, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='fd\x00')
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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")
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x5}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x80}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000200"/32], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

6m24.863948325s ago: executing program 2 (id=1626):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0x8, 0x617, &(0x7f0000001100)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/117, 0x75}], 0x1}, 0xfffffffe}], 0x1, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20)
recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

6m24.658489109s ago: executing program 2 (id=1629):
syz_read_part_table(0x618, &(0x7f0000002200)="$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") (fail_nth: 1)

6m24.572176731s ago: executing program 2 (id=1630):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0)

6m24.571896271s ago: executing program 33 (id=1630):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0)

9.17882695s ago: executing program 1 (id=6936):
ptrace(0x10, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2714, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002000)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)

9.103683001s ago: executing program 1 (id=6939):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES16=0x0], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
fcntl$getownex(r1, 0x10, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x3, [0x400, 0x3], 0x4}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket(0x10, 0x80000, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000bbd49f67090c7d3110ee82272320c3398115e4e80525dff9b85743a2bae2c084ef20d6ac7a2b8be6d029e48f911b14177df672bd610a372f7ff101ec7af3e132a4eda6b1bf27d20e6cf9044b5900", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0)

8.677849559s ago: executing program 1 (id=6946):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x7, 0x3}, 0x20)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c00160014000000002f1eafacf706e1055d7c10894f0005ba9b37242d37a518fc9c5be50eaf07c36505969e71952074f08a33", 0x35}], 0x1}, 0x4)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000009d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x101, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
wait4(0x0, 0x0, 0x40000000, 0x0)

7.652011618s ago: executing program 1 (id=6950):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x6, 0x8001, r3, 0x0, 0x0, 0x0, 0x0, 0x2}])
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket(0x11, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r6, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r6, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "d48499d55e6cdfe3a4f23a9722e124ac6764fb8b9286c10bfd09de6aa10c99ef"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "3d9a84777d8e99925337c4669f732fa625b4be7a96c0c2760a1c5f6ad6ad1529"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x41)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r7=>0x0})
bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r7}, 0x14)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1}, 0xa419848314f0343b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="2bd7abfaa7005a4936700000efff000000000002000000002e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4.354844759s ago: executing program 3 (id=6971):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, &(0x7f0000000940)="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", &(0x7f0000000280)=""/155, 0x4}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11)
close_range(r0, 0xffffffffffffffff, 0x0)

4.041033385s ago: executing program 6 (id=6972):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x100000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r8 = dup(r7)
write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8])
open(&(0x7f0000000300)='./file0\x00', 0x145942, 0x102)

3.972987596s ago: executing program 6 (id=6973):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000210000000000000300000008000000f30000007f00000004"], 0x58)
close(r1)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x2008}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x80)

3.902777618s ago: executing program 3 (id=6974):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x324f941881cafd4, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
syz_usbip_server_init(0x4)

3.77522093s ago: executing program 4 (id=6975):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18)
lsm_set_self_attr(0x69, 0x0, 0x20, 0x0)

3.483675016s ago: executing program 4 (id=6977):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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")
openat$dir(0xffffffffffffff9c, 0x0, 0x511a01, 0x80)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r0, r0, 0x0, 0x40000f63c)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x8000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
sendfile(r1, r2, 0x0, 0x80000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2c040000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x35, 0x0, @val=@netkit}, 0x1c)

3.410742567s ago: executing program 6 (id=6978):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c00160014000000002f1eafacf706e1055d7c10894f0005ba9b37242d37a518fc9c", 0x24}], 0x1}, 0x4)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000009d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x101, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
sendmmsg$inet(r1, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x2, 0x0)

3.210487211s ago: executing program 5 (id=6981):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x16)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r1}, 0x18)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800110000000000000000002000000063012200000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x80)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21)

3.058432354s ago: executing program 5 (id=6982):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket(0x10, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00042cbd7000fedbdf25030000001400010000000000000000000000ffff0000000014000100ff01000000000000000000000000000108000300"], 0x44}, 0x1, 0x0, 0x0, 0x10000840}, 0x8800)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe61}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x7b71, 0x800, 0x4, 0x1e9f, 0x7]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

3.018584614s ago: executing program 1 (id=6983):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x100000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r8 = dup(r7)
write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8])
open(&(0x7f0000000300)='./file0\x00', 0x145942, 0x102)

2.972078095s ago: executing program 5 (id=6984):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0})
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)='\b', 0x1}], 0x1}}], 0x2, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000240)={0x7, 0xa})
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0x44c04, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x0, 0xc8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)

2.878105247s ago: executing program 1 (id=6985):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = gettid()
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

2.664371601s ago: executing program 4 (id=6986):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
unshare(0x64000600)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, <r5=>0x0})
tkill(r5, 0x39)
pipe(&(0x7f00000001c0))

2.561379193s ago: executing program 6 (id=6987):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000))
socket$tipc(0x1e, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000080), 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

2.545444283s ago: executing program 3 (id=6988):
socket(0x10, 0x80003, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x121202, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000080)={0x1, 0xffffffff, 0x0, 0x3, 0xf330, 0x9})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
modify_ldt$write(0x1, &(0x7f0000000000)={0x6, 0x20000000, 0x1000, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x14069, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

2.508271504s ago: executing program 6 (id=6989):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, &(0x7f0000000940)="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", &(0x7f0000000280)=""/155, 0x4}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x11)
close_range(r0, 0xffffffffffffffff, 0x0)

2.478601414s ago: executing program 3 (id=6990):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x3, [0x400, 0x3], 0x4}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

1.913389444s ago: executing program 5 (id=6991):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xe)
sendmsg$nl_route(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.519616202s ago: executing program 5 (id=6992):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='~', 0x1}, {}, {&(0x7f00000000c0)="a52c31fd4bc8b0f56b24164dcdd3c8d461b31c8f0245507d93e1d68fee69b4f756480f2952a6ca4cb3077561fd13b6181844e69f7c9002c79243fe532880dfc9d15dea8d3845c6080976787f40bcaf3add487a7c2b8db6497f3bb967500c8db70d72923eded39058d2da72a6a2cab5e2b57c45ff5cdfe9d5d8585bdd754b", 0x7e}], 0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000), 0x4)

1.404168804s ago: executing program 5 (id=6993):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x6, 0x8001, r3, 0x0, 0x0, 0x0, 0x0, 0x2}])
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket(0x11, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r6, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r6, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "d48499d55e6cdfe3a4f23a9722e124ac6764fb8b9286c10bfd09de6aa10c99ef"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "3d9a84777d8e99925337c4669f732fa625b4be7a96c0c2760a1c5f6ad6ad1529"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x41)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r7=>0x0})
bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r7}, 0x14)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1}, 0xa419848314f0343b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="2bd7abfaa7005a4936700000efff000000000002000000002e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.384422615s ago: executing program 3 (id=6994):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)

1.271790267s ago: executing program 6 (id=6995):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0})
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)='\b', 0x1}], 0x1}}], 0x2, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000240)={0x7, 0xa})
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0x44c04, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x0, 0xc8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)

1.027504441s ago: executing program 4 (id=6996):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==")
openat$dir(0xffffffffffffff9c, 0x0, 0x511a01, 0x80)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r0, r0, 0x0, 0x40000f63c)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x8000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
sendfile(r1, r2, 0x0, 0x80000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2c040000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x35, 0x0, @val=@netkit}, 0x1c)

136.216818ms ago: executing program 4 (id=6997):
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2422, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x4a90, 0x0, 0x0, 0x0, 0xa47}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20800)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00')
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="fd3aeebcb95fa07072bfc2bcc011d105e81f9142182da7c2a6003368"])
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
syz_io_uring_setup(0x5c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x4, 0x30f}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000580))
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="808e6d1c81d8b9fc562abe27c41883"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, 0x0, &(0x7f0000000240)=r5}, 0x20)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x20000000000002e6, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3a, '\x00', 0x0, @fallback=0x29, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r9, 0x0, 0x115}, 0x18)
r10 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r10})
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
io_setup(0x6, &(0x7f0000000680))

49.6865ms ago: executing program 3 (id=6998):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c00160014000000002f1eafacf706e1055d7c10894f0005ba9b37242d37a518fc9c", 0x24}], 0x1}, 0x4)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000009d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x101, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
sendmmsg$inet(r1, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x2, 0x0)

0s ago: executing program 4 (id=6999):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x324f941881cafd4, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
syz_usbip_server_init(0x4)

kernel console output (not intermixed with test programs):

00000 r/w without journal. Quota mode: none.
[  475.359385][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.624458][T29314] 9pnet_fd: Insufficient options for proto=fd
[  475.645082][T26999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.247334][   T29] kauditd_printk_skb: 126 callbacks suppressed
[  476.247352][   T29] audit: type=1400 audit(1759725379.727:29295): avc:  denied  { create } for  pid=29325 comm="syz.3.6477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  476.298825][   T29] audit: type=1400 audit(1759725379.747:29296): avc:  denied  { sys_admin } for  pid=29325 comm="syz.3.6477" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  476.666296][T29373] bridge_slave_0: left allmulticast mode
[  476.672089][T29373] bridge_slave_0: left promiscuous mode
[  476.677880][T29373] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.687705][T29373] bridge_slave_1: left allmulticast mode
[  476.693450][T29373] bridge_slave_1: left promiscuous mode
[  476.699201][T29373] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.710499][T29375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6482'.
[  476.728539][T29373] bond0: (slave bond_slave_0): Releasing backup interface
[  476.737459][T29373] bond0: (slave bond_slave_1): Releasing backup interface
[  476.746811][T29373] team0: Port device team_slave_0 removed
[  476.755552][T29373] team0: Port device team_slave_1 removed
[  476.767574][T29373] batman_adv: batadv0: Removing interface: batadv_slave_0
[  476.775383][T29373] batman_adv: batadv0: Removing interface: batadv_slave_1
[  476.783593][T29373] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  477.217181][   T29] audit: type=1326 audit(1759725380.687:29297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.4.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  477.217572][T29390] loop4: detected capacity change from 0 to 512
[  477.240880][   T29] audit: type=1326 audit(1759725380.687:29298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.4.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  477.240923][   T29] audit: type=1326 audit(1759725380.687:29299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.4.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  477.240951][   T29] audit: type=1326 audit(1759725380.687:29300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.4.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  477.241054][   T29] audit: type=1326 audit(1759725380.687:29301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.4.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  477.342145][   T29] audit: type=1326 audit(1759725380.687:29302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.4.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  477.366094][   T29] audit: type=1326 audit(1759725380.687:29303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.4.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  477.377543][T29390] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002]
[  477.389686][   T29] audit: type=1326 audit(1759725380.687:29304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.4.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  477.497139][T29390] System zones: 0-2, 18-18, 34-35
[  477.512819][T29396] SELinux: failed to load policy
[  477.560524][T29390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.573271][T29390] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  477.583699][T29398] loop3: detected capacity change from 0 to 512
[  477.628806][T29398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.633244][T29390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.652666][T29390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.657441][T29398] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  477.680326][T29398] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.6490: corrupted inode contents
[  477.692437][T29398] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #2: comm syz.3.6490: mark_inode_dirty error
[  477.704356][T29398] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.6490: corrupted inode contents
[  478.067980][T29417] loop1: detected capacity change from 0 to 512
[  478.088902][T29417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.101619][T29417] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  478.423682][T29423] loop5: detected capacity change from 0 to 1024
[  478.437839][T29423] EXT4-fs: Ignoring removed nobh option
[  478.443446][T29423] EXT4-fs: Ignoring removed bh option
[  478.476071][T29425] loop6: detected capacity change from 0 to 128
[  478.482773][T29425] vfat: Unknown parameter '01777777777777777777777'
[  478.498857][T29425] loop6: detected capacity change from 0 to 512
[  478.506451][T29425] msdos: Unknown parameter 'dot…'
[  478.512629][T29423] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled
[  478.534187][T27546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.549236][T29425] loop6: detected capacity change from 0 to 512
[  478.556337][T29425] EXT4-fs: inline encryption not supported
[  478.562309][T29425] EXT4-fs: Ignoring removed nobh option
[  478.578642][T29423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.597866][T29425] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  478.609492][T29425] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  478.619638][T29425] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6495: Corrupt directory, running e2fsck is recommended
[  478.634198][T29425] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  478.642987][T29425] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.6495: corrupted in-inode xattr: invalid ea_ino
[  478.656645][T29425] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6495: couldn't read orphan inode 15 (err -117)
[  478.669156][T29425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.683374][T29425] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  478.694937][T29425] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  478.705040][T29425] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6495: Corrupt directory, running e2fsck is recommended
[  478.718796][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.731081][T29425] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  478.742599][T29425] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  478.752725][T29425] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6495: Corrupt directory, running e2fsck is recommended
[  478.767647][T29425] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  478.779196][T29425] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  478.789291][T29425] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6495: Corrupt directory, running e2fsck is recommended
[  478.806430][T29425] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  478.826546][T29425] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.6495: path /393/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  478.848557][T29425] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 8: comm syz.6.6495: path /393/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  478.872810][T29447] loop5: detected capacity change from 0 to 512
[  478.890374][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.912963][T29447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.926777][T29447] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  478.938458][T23931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.948049][T29447] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #2: comm syz.5.6498: corrupted inode contents
[  478.960292][T29447] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #2: comm syz.5.6498: mark_inode_dirty error
[  478.972546][T29447] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #2: comm syz.5.6498: corrupted inode contents
[  479.076812][T29464] SELinux: failed to load policy
[  479.156152][T29466] macsec1: entered promiscuous mode
[  479.161543][T29466] bridge0: entered promiscuous mode
[  479.287979][T29473] loop1: detected capacity change from 0 to 512
[  479.298876][T29473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  479.311594][T29473] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  479.393978][T29478] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.6503: iget: bad i_size value: 2533274857506816
[  479.545508][T23931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.830875][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.855423][T29487] loop1: detected capacity change from 0 to 512
[  479.865054][T29487] EXT4-fs (loop1): orphan cleanup on readonly fs
[  479.874044][T29487] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.6506: bad orphan inode 13
[  479.884385][T29489] loop5: detected capacity change from 0 to 512
[  479.885071][T29487] ext4_test_bit(bit=12, block=18) = 1
[  479.896162][T29487] is_bad_inode(inode)=0
[  479.897207][T29489] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  479.900350][T29487] NEXT_ORPHAN(inode)=2130706432
[  479.913402][T29487] max_ino=32
[  479.916593][T29487] i_nlink=1
[  479.920274][T29487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  479.921092][T29489] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.6507: bg 0: block 104: invalid block bitmap
[  479.945902][T29489] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  479.954833][T29489] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6507: invalid indirect mapped block 1 (level 1)
[  479.968564][T29489] EXT4-fs (loop5): 1 truncate cleaned up
[  479.968615][T23931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.974651][T29489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  480.001473][T29489] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6507'.
[  480.038334][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.076253][T29500] loop1: detected capacity change from 0 to 512
[  480.099913][T29500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.112508][T29500] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  480.123882][T29500] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #2: comm syz.1.6509: corrupted inode contents
[  480.135960][T29500] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #2: comm syz.1.6509: mark_inode_dirty error
[  480.151165][T29500] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #2: comm syz.1.6509: corrupted inode contents
[  480.166583][T29529] loop5: detected capacity change from 0 to 512
[  480.179193][T29529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.197356][T29529] ext4 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  480.268157][T26999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.989153][T29543] hub 2-0:1.0: USB hub found
[  480.996107][T23931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.001199][T29543] hub 2-0:1.0: 8 ports detected
[  481.024035][T29556] loop1: detected capacity change from 0 to 512
[  481.031770][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.033823][T29543] can0: slcan on ptm0.
[  481.052037][T29556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.080201][T29556] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  481.096143][T29556] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #2: comm syz.1.6519: corrupted inode contents
[  481.108294][T29556] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #2: comm syz.1.6519: mark_inode_dirty error
[  481.120459][T29556] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #2: comm syz.1.6519: corrupted inode contents
[  481.166108][T29543] can0 (unregistered): slcan off ptm0.
[  481.317117][   T29] kauditd_printk_skb: 133 callbacks suppressed
[  481.317136][   T29] audit: type=1326 audit(1759725384.767:29438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.5.6526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  481.347152][   T29] audit: type=1326 audit(1759725384.767:29439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.5.6526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  481.370823][   T29] audit: type=1326 audit(1759725384.767:29440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.5.6526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  481.371012][T29600] loop5: detected capacity change from 0 to 512
[  481.394427][   T29] audit: type=1326 audit(1759725384.767:29441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.5.6526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  481.394462][   T29] audit: type=1326 audit(1759725384.767:29442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.5.6526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  481.394514][   T29] audit: type=1326 audit(1759725384.777:29443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.5.6526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  481.394539][   T29] audit: type=1326 audit(1759725384.777:29444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.5.6526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  481.495183][   T29] audit: type=1326 audit(1759725384.777:29445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.5.6526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  481.518883][   T29] audit: type=1326 audit(1759725384.777:29446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.5.6526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  481.542546][   T29] audit: type=1326 audit(1759725384.777:29447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.5.6526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  481.578971][T29600] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002]
[  481.587536][T29600] System zones: 0-2, 18-18, 34-35
[  481.603556][T29600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.628557][T29631] loop3: detected capacity change from 0 to 512
[  481.651385][T29600] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  481.807690][T29631] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002]
[  481.865981][T29631] System zones: 0-2, 18-18, 34-35
[  481.931434][T29631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.027890][T29631] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  482.047082][T29600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.063003][T29600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.069003][T29631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.124446][T29631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.240570][T23931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.267696][T29651] 9pnet_fd: Insufficient options for proto=fd
[  482.429099][T29656] loop4: detected capacity change from 0 to 128
[  482.448196][T29670] loop6: detected capacity change from 0 to 512
[  482.459482][T29670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.472359][T29670] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  482.483959][T29670] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.6532: corrupted inode contents
[  482.497680][T29670] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #2: comm syz.6.6532: mark_inode_dirty error
[  482.541878][T29670] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.6532: corrupted inode contents
[  483.242518][T29683] FAULT_INJECTION: forcing a failure.
[  483.242518][T29683] name failslab, interval 1, probability 0, space 0, times 0
[  483.255244][T29683] CPU: 1 UID: 0 PID: 29683 Comm: syz.1.6535 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  483.255275][T29683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  483.255289][T29683] Call Trace:
[  483.255295][T29683]  <TASK>
[  483.255366][T29683]  __dump_stack+0x1d/0x30
[  483.255470][T29683]  dump_stack_lvl+0xe8/0x140
[  483.255506][T29683]  dump_stack+0x15/0x1b
[  483.255533][T29683]  should_fail_ex+0x265/0x280
[  483.255640][T29683]  should_failslab+0x8c/0xb0
[  483.255667][T29683]  kmem_cache_alloc_noprof+0x50/0x480
[  483.255696][T29683]  ? audit_log_start+0x342/0x720
[  483.255729][T29683]  audit_log_start+0x342/0x720
[  483.255810][T29683]  ? kstrtouint+0x76/0xc0
[  483.255837][T29683]  audit_seccomp+0x48/0x100
[  483.255865][T29683]  ? __seccomp_filter+0x82d/0x1250
[  483.255892][T29683]  __seccomp_filter+0x83e/0x1250
[  483.255990][T29683]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  483.256101][T29683]  ? vfs_write+0x7e8/0x960
[  483.256131][T29683]  __secure_computing+0x82/0x150
[  483.256161][T29683]  syscall_trace_enter+0xcf/0x1e0
[  483.256248][T29683]  do_syscall_64+0xac/0x200
[  483.256277][T29683]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  483.256306][T29683]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  483.256333][T29683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.256372][T29683] RIP: 0033:0x7fea94f2eec9
[  483.256389][T29683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.256406][T29683] RSP: 002b:00007fea93997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  483.256425][T29683] RAX: ffffffffffffffda RBX: 00007fea95185fa0 RCX: 00007fea94f2eec9
[  483.256440][T29683] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000200000001cc0
[  483.256454][T29683] RBP: 00007fea93997090 R08: 0000000000000000 R09: 0000000000000000
[  483.256468][T29683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.256482][T29683] R13: 00007fea95186038 R14: 00007fea95185fa0 R15: 00007fff10685938
[  483.256525][T29683]  </TASK>
[  483.490303][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.510210][T29692] bridge0: port 1(gretap0) entered blocking state
[  483.516774][T29692] bridge0: port 1(gretap0) entered disabled state
[  483.523777][T29692] gretap0: entered allmulticast mode
[  483.529907][T29692] gretap0: entered promiscuous mode
[  483.536878][T29692] gretap0: left allmulticast mode
[  483.541985][T29692] gretap0: left promiscuous mode
[  483.547127][T29692] bridge0: port 1(gretap0) entered disabled state
[  484.301155][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.382830][T29743] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  484.389376][T29743] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  484.396798][T29743] vhci_hcd vhci_hcd.0: Device attached
[  484.442864][T29747] 9pnet_fd: Insufficient options for proto=fd
[  484.577404][   T36] vhci_hcd: vhci_device speed not set
[  484.647114][   T36] usb 11-1: new full-speed USB device number 4 using vhci_hcd
[  484.661208][T27546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.689845][T29766] bridge0: port 3(gretap0) entered blocking state
[  484.696363][T29766] bridge0: port 3(gretap0) entered disabled state
[  484.730343][T29766] gretap0: entered allmulticast mode
[  484.737866][T29766] gretap0: entered promiscuous mode
[  484.744267][T29766] bridge0: port 3(gretap0) entered blocking state
[  484.750743][T29766] bridge0: port 3(gretap0) entered forwarding state
[  484.758674][T29775] gretap0: left allmulticast mode
[  484.763751][T29775] gretap0: left promiscuous mode
[  484.768852][T29775] bridge0: port 3(gretap0) entered disabled state
[  484.868917][T29773] wireguard0: entered promiscuous mode
[  484.874447][T29773] wireguard0: entered allmulticast mode
[  484.884531][T29780] loop3: detected capacity change from 0 to 128
[  484.891374][T29780] vfat: Unknown parameter '01777777777777777777777'
[  484.924224][T29789] loop4: detected capacity change from 0 to 128
[  484.954030][T29791] loop3: detected capacity change from 0 to 512
[  484.961709][T29791] msdos: Unknown parameter 'dot…'
[  484.980892][T29791] loop3: detected capacity change from 0 to 512
[  484.988768][T29791] EXT4-fs: inline encryption not supported
[  484.994843][T29788] loop6: detected capacity change from 0 to 128
[  484.995063][T29791] EXT4-fs: Ignoring removed nobh option
[  485.004421][T29788] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  485.014357][T29788] FAT-fs (loop6): Filesystem has been set read-only
[  485.023952][T29791] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  485.035527][T29791] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  485.045698][T29791] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6552: Corrupt directory, running e2fsck is recommended
[  485.045972][T29796] loop1: detected capacity change from 0 to 1024
[  485.065871][T29796] ext2: Unknown parameter 'silent'
[  485.079800][T29791] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  485.096676][T29791] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.6552: corrupted in-inode xattr: invalid ea_ino
[  485.115148][T29791] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6552: couldn't read orphan inode 15 (err -117)
[  485.130379][T29806] 9pnet_fd: Insufficient options for proto=fd
[  485.146669][T29791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.165550][T29744] vhci_hcd: connection reset by peer
[  485.174147][  T311] vhci_hcd: stop threads
[  485.178515][  T311] vhci_hcd: release socket
[  485.182988][  T311] vhci_hcd: disconnect device
[  485.191807][T29791] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  485.203419][T29791] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  485.213532][T29791] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6552: Corrupt directory, running e2fsck is recommended
[  485.228184][T29791] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  485.239840][T29791] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  485.249976][T29791] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6552: Corrupt directory, running e2fsck is recommended
[  485.264744][T29791] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  485.276353][T29791] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  485.286612][T29791] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6552: Corrupt directory, running e2fsck is recommended
[  485.301382][T29791] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  485.313325][T29791] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.6552: path /47/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  485.333586][T29791] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 8: comm syz.3.6552: path /47/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  485.497323][T29814] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  485.530572][T29816] tmpfs: Bad value for 'mpol'
[  485.542796][T29816] loop6: detected capacity change from 0 to 512
[  485.579742][T29824] loop6: detected capacity change from 0 to 512
[  485.599423][T29824] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002]
[  485.608150][T29824] System zones: 0-2, 18-18, 34-35
[  485.614423][T29824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.627469][T29824] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  485.640823][T29824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.649481][T29824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.709402][T27546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.751303][T29835] loop5: detected capacity change from 0 to 512
[  485.781349][T29835] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002]
[  485.793554][T29835] System zones: 0-2, 18-18, 34-35
[  485.806091][T29835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.821372][T29835] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  485.832805][T29852] syz!: rxe_newlink: already configured on team_slave_0
[  485.837552][T29835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.849153][T29835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.879381][T29857] 9pnet_fd: Insufficient options for proto=fd
[  485.931487][T29860] SELinux: failed to load policy
[  486.078376][T29868] 9pnet_fd: Insufficient options for proto=fd
[  486.705457][T29912] SELinux: failed to load policy
[  486.724205][T29914] 9pnet_fd: Insufficient options for proto=fd
[  486.821570][T29917] loop4: detected capacity change from 0 to 512
[  486.838969][T29917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  486.856117][T29917] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  487.019570][T29933] loop3: detected capacity change from 0 to 128
[  487.109223][T26999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.140194][T29948] bridge_slave_0: left allmulticast mode
[  487.145869][T29948] bridge_slave_0: left promiscuous mode
[  487.151635][T29948] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.160830][T29948] bridge_slave_1: left allmulticast mode
[  487.166556][T29948] bridge_slave_1: left promiscuous mode
[  487.172303][T29948] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.181658][T29948] bond0: (slave bond_slave_0): Releasing backup interface
[  487.191564][T29948] bond0: (slave bond_slave_1): Releasing backup interface
[  487.207897][T29948] team0: Port device team_slave_0 removed
[  487.219834][T29948] team0: Port device team_slave_1 removed
[  487.226631][T29948] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  487.234422][T29948] batman_adv: batadv0: Removing interface: batadv_slave_0
[  487.243264][T29948] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  487.250779][T29948] batman_adv: batadv0: Removing interface: batadv_slave_1
[  487.260980][T29948] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  487.286395][T14447] syz1: Port: 1 Link DOWN
[  487.290859][T14450] syz!: Port: 1 Link DOWN
[  487.345936][T29957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6578'.
[  487.386052][T29950] loop1: detected capacity change from 0 to 512
[  487.399853][T29950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.412858][T29950] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  487.473202][T23931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.529326][   T29] kauditd_printk_skb: 424 callbacks suppressed
[  487.529343][   T29] audit: type=1326 audit(1759725391.007:29870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29987 comm="syz.1.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94f2eec9 code=0x7ffc0000
[  487.559631][   T29] audit: type=1326 audit(1759725391.007:29871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29987 comm="syz.1.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea94f2eec9 code=0x7ffc0000
[  487.583305][   T29] audit: type=1326 audit(1759725391.007:29872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29987 comm="syz.1.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94f2eec9 code=0x7ffc0000
[  487.607110][   T29] audit: type=1326 audit(1759725391.007:29873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29987 comm="syz.1.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea94f2eec9 code=0x7ffc0000
[  487.630955][   T29] audit: type=1326 audit(1759725391.007:29874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29987 comm="syz.1.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94f2eec9 code=0x7ffc0000
[  487.654558][   T29] audit: type=1326 audit(1759725391.007:29875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29987 comm="syz.1.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea94f2eec9 code=0x7ffc0000
[  487.678131][   T29] audit: type=1326 audit(1759725391.007:29876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29987 comm="syz.1.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94f2eec9 code=0x7ffc0000
[  487.701743][   T29] audit: type=1326 audit(1759725391.007:29877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29987 comm="syz.1.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea94f2eec9 code=0x7ffc0000
[  487.725318][   T29] audit: type=1326 audit(1759725391.037:29878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29987 comm="syz.1.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94f2eec9 code=0x7ffc0000
[  487.749890][   T29] audit: type=1326 audit(1759725391.037:29879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29987 comm="syz.1.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94f2eec9 code=0x7ffc0000
[  487.859731][T29995] bridge_slave_0: left allmulticast mode
[  487.865399][T29995] bridge_slave_0: left promiscuous mode
[  487.871177][T29995] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.887994][T29995] bridge_slave_1: left allmulticast mode
[  487.893688][T29995] bridge_slave_1: left promiscuous mode
[  487.899498][T29995] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.901711][T29997] 9pnet_fd: Insufficient options for proto=fd
[  487.915157][T29995] bond0: (slave bond_slave_0): Releasing backup interface
[  487.926024][T29995] bond0: (slave bond_slave_1): Releasing backup interface
[  487.943169][T29995] team0: Port device team_slave_0 removed
[  487.952537][T29995] team0: Port device team_slave_1 removed
[  487.959867][T29995] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  487.967426][T29995] batman_adv: batadv0: Removing interface: batadv_slave_0
[  487.976708][T29995] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  487.984243][T29995] batman_adv: batadv0: Removing interface: batadv_slave_1
[  487.994488][T29995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  488.486535][T30010] loop4: detected capacity change from 0 to 512
[  488.519959][T30010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.532721][T30010] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  488.587358][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.761642][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.983950][T30035] loop1: detected capacity change from 0 to 128
[  489.107190][T30044] netlink: 252 bytes leftover after parsing attributes in process `syz.6.6594'.
[  489.144788][T30046] loop3: detected capacity change from 0 to 128
[  489.162944][T30046] vfat: Unknown parameter '01777777777777777777777'
[  489.236596][T30050] loop3: detected capacity change from 0 to 512
[  489.254119][T30050] msdos: Unknown parameter 'dot…'
[  489.278726][T30050] loop3: detected capacity change from 0 to 512
[  489.297203][T30050] EXT4-fs: inline encryption not supported
[  489.311240][T30050] EXT4-fs: Ignoring removed nobh option
[  489.325829][T30050] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  489.337385][T30050] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  489.347492][T30050] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6595: Corrupt directory, running e2fsck is recommended
[  489.400402][T30050] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  489.401252][T26999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.417867][T30050] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.6595: corrupted in-inode xattr: invalid ea_ino
[  489.431745][T30050] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6595: couldn't read orphan inode 15 (err -117)
[  489.444994][T30050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  489.474974][T30050] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  489.486611][T30050] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  489.496723][T30050] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6595: Corrupt directory, running e2fsck is recommended
[  489.500870][T30059] syz!: rxe_newlink: already configured on team_slave_0
[  489.516700][T30050] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  489.527482][T30059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30059 comm=syz.4.6596
[  489.528361][T30050] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  489.550747][T30050] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6595: Corrupt directory, running e2fsck is recommended
[  489.568817][T30050] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  489.580439][T30050] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  489.590609][T30050] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6595: Corrupt directory, running e2fsck is recommended
[  489.604621][T30050] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  489.616259][T30050] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.6595: path /59/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  489.636222][T30050] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 8: comm syz.3.6595: path /59/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  489.677124][   T36] usb 11-1: enqueue for inactive port 0
[  489.682840][   T36] usb 11-1: enqueue for inactive port 0
[  489.759520][T30070] 9pnet_fd: Insufficient options for proto=fd
[  489.783724][   T36] vhci_hcd: vhci_device speed not set
[  490.136788][T27546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.693782][T30130] SELinux: ebitmap: truncated map
[  490.712595][T30130] SELinux: failed to load policy
[  490.718011][T30131] netlink: 252 bytes leftover after parsing attributes in process `syz.1.6601'.
[  490.919249][T30142] 9pnet_fd: Insufficient options for proto=fd
[  491.088683][T30148] 9pnet_fd: Insufficient options for proto=fd
[  491.393440][T30161] loop5: detected capacity change from 0 to 128
[  491.409012][T30161] vfat: Unknown parameter '01777777777777777777777'
[  491.486012][T30167] loop5: detected capacity change from 0 to 512
[  491.518375][T30167] msdos: Unknown parameter 'dot…'
[  491.522696][T30169] loop3: detected capacity change from 0 to 512
[  491.530236][T30167] loop5: detected capacity change from 0 to 512
[  491.537374][T30169] EXT4-fs (loop3): orphan cleanup on readonly fs
[  491.545033][T30169] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.6614: bad orphan inode 13
[  491.547144][T30167] EXT4-fs: inline encryption not supported
[  491.567178][T30167] EXT4-fs: Ignoring removed nobh option
[  491.575616][T30169] ext4_test_bit(bit=12, block=18) = 1
[  491.581235][T30169] is_bad_inode(inode)=0
[  491.585392][T30169] NEXT_ORPHAN(inode)=2130706432
[  491.590297][T30169] max_ino=32
[  491.593495][T30169] i_nlink=1
[  491.607173][T30167] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  491.618696][T30167] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  491.628796][T30167] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.6613: Corrupt directory, running e2fsck is recommended
[  491.643120][T30169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  491.656354][T30167] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  491.673434][T30167] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.6613: corrupted in-inode xattr: invalid ea_ino
[  491.697792][T27546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.717562][T30167] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6613: couldn't read orphan inode 15 (err -117)
[  491.738516][T30167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  491.769308][T30167] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  491.780856][T30167] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  491.791042][T30167] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.6613: Corrupt directory, running e2fsck is recommended
[  491.805471][T30167] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  491.816993][T30167] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  491.827116][T30167] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.6613: Corrupt directory, running e2fsck is recommended
[  491.841472][T30167] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  491.853004][T30167] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  491.863175][T30167] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.6613: Corrupt directory, running e2fsck is recommended
[  491.883780][T30167] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  491.895477][T30167] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.6613: path /399/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  491.923564][T30167] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 8: comm syz.5.6613: path /399/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  491.985138][T30193] 9pnet_fd: Insufficient options for proto=fd
[  492.086657][T30219] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  492.096812][T30219] SELinux: failed to load policy
[  492.177237][T30223] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  492.228520][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.945662][T30314] loop4: detected capacity change from 0 to 128
[  493.017280][   T29] kauditd_printk_skb: 196 callbacks suppressed
[  493.017301][   T29] audit: type=1326 audit(1759725396.457:30076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.5.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  493.047144][   T29] audit: type=1326 audit(1759725396.467:30077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.5.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  493.070778][   T29] audit: type=1326 audit(1759725396.467:30078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.5.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  493.094445][   T29] audit: type=1326 audit(1759725396.477:30079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.5.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  493.118067][   T29] audit: type=1326 audit(1759725396.477:30080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.5.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  493.141917][   T29] audit: type=1326 audit(1759725396.487:30081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.5.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  493.165543][   T29] audit: type=1326 audit(1759725396.487:30082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.5.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  493.189127][   T29] audit: type=1326 audit(1759725396.487:30083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.5.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  493.232444][   T29] audit: type=1326 audit(1759725396.697:30084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.5.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  493.256140][   T29] audit: type=1326 audit(1759725396.697:30085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30312 comm="syz.5.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  493.994676][T30369] hub 2-0:1.0: USB hub found
[  494.008169][T30369] hub 2-0:1.0: 8 ports detected
[  494.062373][T30369] can0: slcan on ptm0.
[  494.158761][T30390] FAULT_INJECTION: forcing a failure.
[  494.158761][T30390] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  494.171892][T30390] CPU: 0 UID: 0 PID: 30390 Comm: syz.1.6647 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  494.171922][T30390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  494.171971][T30390] Call Trace:
[  494.171978][T30390]  <TASK>
[  494.171985][T30390]  __dump_stack+0x1d/0x30
[  494.172020][T30390]  dump_stack_lvl+0xe8/0x140
[  494.172134][T30390]  dump_stack+0x15/0x1b
[  494.172164][T30390]  should_fail_ex+0x265/0x280
[  494.172200][T30390]  should_fail+0xb/0x20
[  494.172219][T30390]  should_fail_usercopy+0x1a/0x20
[  494.172303][T30390]  _copy_from_user+0x1c/0xb0
[  494.172391][T30390]  memdup_user+0x5e/0xd0
[  494.172415][T30390]  strndup_user+0x68/0xb0
[  494.172440][T30390]  __se_sys_mount+0x4d/0x2e0
[  494.172464][T30390]  ? fput+0x8f/0xc0
[  494.172504][T30390]  ? ksys_write+0x192/0x1a0
[  494.172528][T30390]  __x64_sys_mount+0x67/0x80
[  494.172553][T30390]  x64_sys_call+0x2b51/0x3000
[  494.172575][T30390]  do_syscall_64+0xd2/0x200
[  494.172659][T30390]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  494.172833][T30390]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  494.172859][T30390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.172883][T30390] RIP: 0033:0x7fea94f2eec9
[  494.172903][T30390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  494.172922][T30390] RSP: 002b:00007fea93997038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  494.172945][T30390] RAX: ffffffffffffffda RBX: 00007fea95185fa0 RCX: 00007fea94f2eec9
[  494.172959][T30390] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000
[  494.172972][T30390] RBP: 00007fea93997090 R08: 0000200000000400 R09: 0000000000000000
[  494.172985][T30390] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  494.173079][T30390] R13: 00007fea95186038 R14: 00007fea95185fa0 R15: 00007fff10685938
[  494.173097][T30390]  </TASK>
[  494.181239][T30369] can0 (unregistered): slcan off ptm0.
[  494.441892][T30394] loop5: detected capacity change from 0 to 512
[  494.507265][T30394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.532255][T30394] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  494.564230][T30409] bridge0: port 1(gretap0) entered blocking state
[  494.570847][T30409] bridge0: port 1(gretap0) entered disabled state
[  494.597111][T30410] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  494.597172][T30409] gretap0: entered allmulticast mode
[  494.603684][T30410] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  494.616448][T30410] vhci_hcd vhci_hcd.0: Device attached
[  494.627521][T30409] gretap0: entered promiscuous mode
[  494.633574][T30414] gretap0: left allmulticast mode
[  494.638687][T30414] gretap0: left promiscuous mode
[  494.643733][T30414] bridge0: port 1(gretap0) entered disabled state
[  494.807102][   T23] vhci_hcd: vhci_device speed not set
[  494.854043][T30419] loop1: detected capacity change from 0 to 128
[  494.879802][   T23] usb 7-1: new full-speed USB device number 3 using vhci_hcd
[  494.992212][T30443] SELinux: ebitmap: truncated map
[  495.007651][T30443] SELinux: failed to load policy
[  495.299061][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.356496][T30411] vhci_hcd: connection reset by peer
[  495.362125][   T52] vhci_hcd: stop threads
[  495.366391][   T52] vhci_hcd: release socket
[  495.370868][   T52] vhci_hcd: disconnect device
[  496.009868][T30476] wireguard0: entered promiscuous mode
[  496.015382][T30476] wireguard0: entered allmulticast mode
[  496.149214][T30497] loop6: detected capacity change from 0 to 512
[  496.160075][T30497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  496.212537][T30497] ext4 filesystem being mounted at /431/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  496.266031][T30497] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.6663: corrupted inode contents
[  496.287392][T30497] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #2: comm syz.6.6663: mark_inode_dirty error
[  496.327142][T30497] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.6663: corrupted inode contents
[  496.482221][T30504] hub 2-0:1.0: USB hub found
[  496.497295][T30504] hub 2-0:1.0: 8 ports detected
[  496.507103][T30504] can0: slcan on ptm0.
[  496.587319][T30504] can0 (unregistered): slcan off ptm0.
[  496.711207][T30552] FAULT_INJECTION: forcing a failure.
[  496.711207][T30552] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  496.724344][T30552] CPU: 0 UID: 0 PID: 30552 Comm: syz.3.6671 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  496.724371][T30552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  496.724382][T30552] Call Trace:
[  496.724388][T30552]  <TASK>
[  496.724396][T30552]  __dump_stack+0x1d/0x30
[  496.724500][T30552]  dump_stack_lvl+0xe8/0x140
[  496.724537][T30552]  dump_stack+0x15/0x1b
[  496.724569][T30552]  should_fail_ex+0x265/0x280
[  496.724620][T30552]  should_fail+0xb/0x20
[  496.724635][T30552]  should_fail_usercopy+0x1a/0x20
[  496.724656][T30552]  _copy_from_user+0x1c/0xb0
[  496.724715][T30552]  ___sys_sendmsg+0xc1/0x1d0
[  496.724752][T30552]  __x64_sys_sendmsg+0xd4/0x160
[  496.724780][T30552]  x64_sys_call+0x191e/0x3000
[  496.724804][T30552]  do_syscall_64+0xd2/0x200
[  496.724836][T30552]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  496.724922][T30552]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  496.725020][T30552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.725041][T30552] RIP: 0033:0x7f11a43ceec9
[  496.725056][T30552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  496.725077][T30552] RSP: 002b:00007f11a2e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  496.725101][T30552] RAX: ffffffffffffffda RBX: 00007f11a4625fa0 RCX: 00007f11a43ceec9
[  496.725124][T30552] RDX: 0000000000048000 RSI: 00002000000002c0 RDI: 0000000000000006
[  496.725208][T30552] RBP: 00007f11a2e37090 R08: 0000000000000000 R09: 0000000000000000
[  496.725223][T30552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  496.725275][T30552] R13: 00007f11a4626038 R14: 00007f11a4625fa0 R15: 00007ffd5691c4e8
[  496.725297][T30552]  </TASK>
[  496.942086][T30555] 9pnet_fd: Insufficient options for proto=fd
[  497.036222][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.104601][T30556] netlink: 'syz.3.6672': attribute type 10 has an invalid length.
[  497.167903][T30556] team0: Port device dummy0 added
[  497.239070][T30556] netlink: 'syz.3.6672': attribute type 10 has an invalid length.
[  497.269023][T30556] team0: Port device dummy0 removed
[  497.278107][T30556] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  497.337997][T30583] wireguard0: entered promiscuous mode
[  497.343518][T30583] wireguard0: entered allmulticast mode
[  497.484358][T30599] netlink: 252 bytes leftover after parsing attributes in process `syz.4.6678'.
[  497.566917][T30602] 9pnet_fd: Insufficient options for proto=fd
[  497.749930][T30621] bridge0: port 3(gretap0) entered blocking state
[  497.756429][T30621] bridge0: port 3(gretap0) entered disabled state
[  497.764912][T30621] gretap0: entered allmulticast mode
[  497.771386][T30621] gretap0: entered promiscuous mode
[  497.776853][T30621] bridge0: port 3(gretap0) entered blocking state
[  497.779892][T30623] loop3: detected capacity change from 0 to 512
[  497.783415][T30621] bridge0: port 3(gretap0) entered forwarding state
[  497.801098][T30621] gretap0: left allmulticast mode
[  497.806196][T30621] gretap0: left promiscuous mode
[  497.811288][T30621] bridge0: port 3(gretap0) entered disabled state
[  497.839885][T30623] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  498.067562][   T29] kauditd_printk_skb: 97 callbacks suppressed
[  498.067650][   T29] audit: type=1326 audit(1759725401.547:30183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30659 comm="syz.3.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a43ceec9 code=0x7ffc0000
[  498.113404][T30664] wireguard0: entered promiscuous mode
[  498.118986][T30664] wireguard0: entered allmulticast mode
[  498.127718][   T29] audit: type=1326 audit(1759725401.577:30184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30659 comm="syz.3.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f11a43ceec9 code=0x7ffc0000
[  498.151324][   T29] audit: type=1326 audit(1759725401.577:30185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30659 comm="syz.3.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a43ceec9 code=0x7ffc0000
[  498.174963][   T29] audit: type=1326 audit(1759725401.577:30186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30659 comm="syz.3.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a43ceec9 code=0x7ffc0000
[  498.198577][   T29] audit: type=1326 audit(1759725401.577:30187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30659 comm="syz.3.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11a43ceec9 code=0x7ffc0000
[  498.222228][   T29] audit: type=1326 audit(1759725401.577:30188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30659 comm="syz.3.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a43ceec9 code=0x7ffc0000
[  498.245848][   T29] audit: type=1326 audit(1759725401.577:30189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30659 comm="syz.3.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a43ceec9 code=0x7ffc0000
[  498.269416][   T29] audit: type=1326 audit(1759725401.577:30190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30659 comm="syz.3.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11a43ceec9 code=0x7ffc0000
[  498.273906][T30674] 9pnet_fd: Insufficient options for proto=fd
[  498.293049][   T29] audit: type=1326 audit(1759725401.577:30191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30659 comm="syz.3.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a43ceec9 code=0x7ffc0000
[  498.293082][   T29] audit: type=1326 audit(1759725401.577:30192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30659 comm="syz.3.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11a43ceec9 code=0x7ffc0000
[  498.608792][T30713] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  498.615334][T30713] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  498.622849][T30713] vhci_hcd vhci_hcd.0: Device attached
[  498.711807][T30721] loop5: detected capacity change from 0 to 512
[  498.745771][T30721] EXT4-fs (loop5): orphan cleanup on readonly fs
[  498.752929][T30721] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.6706: bad orphan inode 13
[  498.763350][T30721] ext4_test_bit(bit=12, block=18) = 1
[  498.768763][T30721] is_bad_inode(inode)=0
[  498.772915][T30721] NEXT_ORPHAN(inode)=2130706432
[  498.777818][T30721] max_ino=32
[  498.781026][T30721] i_nlink=1
[  499.281448][T30715] vhci_hcd: connection closed
[  499.282973][   T52] vhci_hcd: stop threads
[  499.292054][   T52] vhci_hcd: release socket
[  499.296635][   T52] vhci_hcd: disconnect device
[  499.303601][T30769] 9pnet_fd: Insufficient options for proto=fd
[  499.465451][T30783] wireguard0: entered promiscuous mode
[  499.471024][T30783] wireguard0: entered allmulticast mode
[  499.529693][T30804] syz!: rxe_newlink: already configured on team_slave_0
[  499.547011][T30804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30804 comm=syz.4.6722
[  499.917365][   T23] usb 7-1: enqueue for inactive port 0
[  499.940221][   T23] usb 7-1: enqueue for inactive port 0
[  500.027223][   T23] vhci_hcd: vhci_device speed not set
[  500.283978][T30831] 9pnet_fd: Insufficient options for proto=fd
[  500.358635][T30833] bridge0: port 3(gretap0) entered blocking state
[  500.365127][T30833] bridge0: port 3(gretap0) entered disabled state
[  500.371976][T30833] gretap0: entered allmulticast mode
[  500.378125][T30833] gretap0: entered promiscuous mode
[  500.383731][T30833] bridge0: port 3(gretap0) entered blocking state
[  500.390249][T30833] bridge0: port 3(gretap0) entered forwarding state
[  500.400200][T30833] gretap0: left allmulticast mode
[  500.405269][T30833] gretap0: left promiscuous mode
[  500.410394][T30833] bridge0: port 3(gretap0) entered disabled state
[  500.557376][T30841] loop1: detected capacity change from 0 to 512
[  500.581161][T30841] EXT4-fs (loop1): orphan cleanup on readonly fs
[  500.608735][T30841] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.6732: bad orphan inode 13
[  500.637349][T30841] ext4_test_bit(bit=12, block=18) = 1
[  500.642795][T30841] is_bad_inode(inode)=0
[  500.646958][T30841] NEXT_ORPHAN(inode)=2130706432
[  500.651923][T30841] max_ino=32
[  500.655121][T30841] i_nlink=1
[  500.727660][T30857] bridge_slave_0: left allmulticast mode
[  500.733372][T30857] bridge_slave_0: left promiscuous mode
[  500.739359][T30857] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.750598][T30857] bridge_slave_1: left allmulticast mode
[  500.756281][T30857] bridge_slave_1: left promiscuous mode
[  500.762228][T30857] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.773417][T30857] bond0: (slave bond_slave_0): Releasing backup interface
[  500.783612][T30857] bond0: (slave bond_slave_1): Releasing backup interface
[  500.795394][T30857] team0: Port device team_slave_0 removed
[  500.805051][T30857] team0: Port device team_slave_1 removed
[  500.811979][T30857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  500.819550][T30857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  500.828711][T30857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  500.836184][T30857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  500.849484][T30857] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  501.087493][T30874] 9pnet_fd: Insufficient options for proto=fd
[  501.128367][T30875] netlink: 252 bytes leftover after parsing attributes in process `syz.4.6738'.
[  503.124057][T30931] loop5: detected capacity change from 0 to 512
[  503.131804][T30931] EXT4-fs (loop5): orphan cleanup on readonly fs
[  503.138520][T30930] loop6: detected capacity change from 0 to 512
[  503.147246][T30931] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.6754: bad orphan inode 13
[  503.167847][T30931] ext4_test_bit(bit=12, block=18) = 1
[  503.173289][T30931] is_bad_inode(inode)=0
[  503.177518][T30931] NEXT_ORPHAN(inode)=2130706432
[  503.182379][T30931] max_ino=32
[  503.185580][T30931] i_nlink=1
[  503.198578][T30930] EXT4-fs mount: 6 callbacks suppressed
[  503.198593][T30930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.219281][T30931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  503.241640][T30930] ext4 filesystem being mounted at /446/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  503.258657][   T29] kauditd_printk_skb: 105 callbacks suppressed
[  503.258671][   T29] audit: type=1326 audit(1759725406.737:30298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.5.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  503.299840][T30930] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.6756: corrupted inode contents
[  503.311859][T30930] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #2: comm syz.6.6756: mark_inode_dirty error
[  503.323278][   T29] audit: type=1326 audit(1759725406.767:30299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.5.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  503.346946][   T29] audit: type=1326 audit(1759725406.767:30300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.5.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  503.370525][   T29] audit: type=1326 audit(1759725406.767:30301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.5.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  503.394082][   T29] audit: type=1326 audit(1759725406.767:30302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.5.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  503.417712][   T29] audit: type=1326 audit(1759725406.767:30303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.5.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  503.441375][   T29] audit: type=1326 audit(1759725406.767:30304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30924 comm="syz.5.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  503.482439][T30930] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.6756: corrupted inode contents
[  503.601546][   T29] audit: type=1326 audit(1759725407.077:30305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30929 comm="syz.6.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216e05eec9 code=0x7ffc0000
[  503.647115][   T29] audit: type=1326 audit(1759725407.077:30306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30929 comm="syz.6.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f216e05eec9 code=0x7ffc0000
[  503.670842][   T29] audit: type=1326 audit(1759725407.077:30307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30929 comm="syz.6.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216e05eec9 code=0x7ffc0000
[  503.881195][T30942] hub 2-0:1.0: USB hub found
[  503.886422][T30942] hub 2-0:1.0: 8 ports detected
[  503.904959][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.916817][T30942] can0: slcan on ptm0.
[  503.977179][T30942] can0 (unregistered): slcan off ptm0.
[  503.986456][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.049825][T30967] loop6: detected capacity change from 0 to 512
[  504.097420][T30967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  504.127529][T30967] ext4 filesystem being mounted at /448/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  504.168881][T30967] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.6762: corrupted inode contents
[  504.213822][T30967] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #2: comm syz.6.6762: mark_inode_dirty error
[  504.246025][T30967] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.6762: corrupted inode contents
[  504.858604][T30994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  505.075629][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.331178][T31016] loop6: detected capacity change from 0 to 512
[  505.355448][T31016] EXT4-fs (loop6): orphan cleanup on readonly fs
[  505.370792][T31016] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.6770: bad orphan inode 13
[  505.407212][T31016] ext4_test_bit(bit=12, block=18) = 1
[  505.412612][T31016] is_bad_inode(inode)=0
[  505.416777][T31016] NEXT_ORPHAN(inode)=2130706432
[  505.421651][T31016] max_ino=32
[  505.424875][T31016] i_nlink=1
[  505.457430][T31016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  505.480228][T31020] 9pnet_fd: Insufficient options for proto=fd
[  505.506930][T31024] 9pnet_fd: Insufficient options for proto=fd
[  505.513430][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.543605][T31028] bridge0: port 1(gretap0) entered blocking state
[  505.550204][T31028] bridge0: port 1(gretap0) entered disabled state
[  505.577169][T31028] gretap0: entered allmulticast mode
[  505.582995][T31028] gretap0: entered promiscuous mode
[  505.628484][T31029] gretap0: left allmulticast mode
[  505.633564][T31029] gretap0: left promiscuous mode
[  505.638712][T31029] bridge0: port 1(gretap0) entered disabled state
[  505.649824][T31033] loop1: detected capacity change from 0 to 512
[  505.709243][T31033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  505.739108][T31033] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  505.832105][T31041] loop6: detected capacity change from 0 to 512
[  505.912322][T31041] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  506.087135][T31041] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  506.139588][T31041] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.6781: corrupted inode contents
[  506.169450][T31041] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #2: comm syz.6.6781: mark_inode_dirty error
[  506.189376][T31041] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.6781: corrupted inode contents
[  506.547503][T23931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.677443][T31085] netlink: 252 bytes leftover after parsing attributes in process `syz.4.6786'.
[  506.727731][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.748023][T31084] 9pnet_fd: Insufficient options for proto=fd
[  506.932434][T31097] loop6: detected capacity change from 0 to 512
[  506.957486][T31097] EXT4-fs (loop6): orphan cleanup on readonly fs
[  506.966215][T31097] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.6788: bad orphan inode 13
[  506.976549][T31097] ext4_test_bit(bit=12, block=18) = 1
[  506.982001][T31097] is_bad_inode(inode)=0
[  506.986158][T31097] NEXT_ORPHAN(inode)=2130706432
[  506.991112][T31097] max_ino=32
[  506.994315][T31097] i_nlink=1
[  506.998537][T31097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  507.047584][T31092] hub 2-0:1.0: USB hub found
[  507.052303][T31092] hub 2-0:1.0: 8 ports detected
[  507.078340][T31092] can0: slcan on ptm0.
[  507.082990][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.137883][T31111] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  507.187644][T31111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31111 comm=syz.6.6791
[  507.231512][T31126] 9pnet_fd: Insufficient options for proto=fd
[  507.240790][T31122] loop5: detected capacity change from 0 to 512
[  507.247197][T31091] can0 (unregistered): slcan off ptm0.
[  507.268335][T31122] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.6792: error while reading EA inode 32 err=-116
[  507.321289][T31122] EXT4-fs (loop5): Remounting filesystem read-only
[  507.329144][T31122] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  507.339441][T31122] EXT4-fs (loop5): 1 orphan inode deleted
[  507.346001][T31122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  507.381892][T31166] FAULT_INJECTION: forcing a failure.
[  507.381892][T31166] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  507.395043][T31166] CPU: 1 UID: 0 PID: 31166 Comm: syz.1.6796 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  507.395075][T31166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  507.395089][T31166] Call Trace:
[  507.395095][T31166]  <TASK>
[  507.395101][T31166]  __dump_stack+0x1d/0x30
[  507.395146][T31166]  dump_stack_lvl+0xe8/0x140
[  507.395248][T31166]  dump_stack+0x15/0x1b
[  507.395274][T31166]  should_fail_ex+0x265/0x280
[  507.395351][T31166]  should_fail+0xb/0x20
[  507.395366][T31166]  should_fail_usercopy+0x1a/0x20
[  507.395389][T31166]  strncpy_from_user+0x25/0x230
[  507.395420][T31166]  ? kmem_cache_alloc_noprof+0x242/0x480
[  507.395446][T31166]  ? getname_flags+0x80/0x3b0
[  507.395475][T31166]  getname_flags+0xae/0x3b0
[  507.395540][T31166]  __x64_sys_linkat+0x73/0xa0
[  507.395566][T31166]  x64_sys_call+0x28ff/0x3000
[  507.395585][T31166]  do_syscall_64+0xd2/0x200
[  507.395766][T31166]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  507.395807][T31166]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  507.395841][T31166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.395861][T31166] RIP: 0033:0x7fea94f2eec9
[  507.395877][T31166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  507.395894][T31166] RSP: 002b:00007fea93997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109
[  507.395942][T31166] RAX: ffffffffffffffda RBX: 00007fea95185fa0 RCX: 00007fea94f2eec9
[  507.395954][T31166] RDX: ffffffffffffff9c RSI: 00002000000006c0 RDI: ffffffffffffff9c
[  507.395966][T31166] RBP: 00007fea93997090 R08: 0000000000000000 R09: 0000000000000000
[  507.395978][T31166] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001
[  507.395990][T31166] R13: 00007fea95186038 R14: 00007fea95185fa0 R15: 00007fff10685938
[  507.396009][T31166]  </TASK>
[  507.399457][T31122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.490502][T31180] loop6: detected capacity change from 0 to 512
[  507.496436][T31161] loop4: detected capacity change from 0 to 512
[  507.518752][T31180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  507.565607][T31161] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.6795: error while reading EA inode 32 err=-116
[  507.570977][T31180] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  507.578149][T31161] EXT4-fs (loop4): Remounting filesystem read-only
[  507.641790][T31161] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  507.652109][T31161] EXT4-fs (loop4): 1 orphan inode deleted
[  507.658501][T31161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  507.677436][T31161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.690294][T31179] 9pnet_fd: Insufficient options for proto=fd
[  507.747186][T31132] netlink: 'syz.4.6795': attribute type 4 has an invalid length.
[  507.787464][T31211] loop5: detected capacity change from 0 to 512
[  507.795559][T31211] EXT4-fs (loop5): orphan cleanup on readonly fs
[  507.802486][T31211] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.6801: bad orphan inode 13
[  507.834337][T31217] bridge0: port 1(gretap0) entered blocking state
[  507.840861][T31217] bridge0: port 1(gretap0) entered disabled state
[  507.851386][T31211] ext4_test_bit(bit=12, block=18) = 1
[  507.856799][T31211] is_bad_inode(inode)=0
[  507.861075][T31211] NEXT_ORPHAN(inode)=2130706432
[  507.865936][T31211] max_ino=32
[  507.869167][T31211] i_nlink=1
[  507.899355][T31217] gretap0: entered allmulticast mode
[  507.948033][T31217] gretap0: entered promiscuous mode
[  507.953739][T31217] bridge0: port 1(gretap0) entered blocking state
[  507.960206][T31217] bridge0: port 1(gretap0) entered forwarding state
[  507.968232][T31211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  508.154797][T31219] gretap0: left allmulticast mode
[  508.159945][T31219] gretap0: left promiscuous mode
[  508.165055][T31219] bridge0: port 1(gretap0) entered disabled state
[  508.290565][   T29] kauditd_printk_skb: 112 callbacks suppressed
[  508.290585][   T29] audit: type=1326 audit(1759725411.767:30420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31206 comm="syz.5.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  508.419653][   T29] audit: type=1326 audit(1759725411.797:30421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31206 comm="syz.5.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  508.443287][   T29] audit: type=1326 audit(1759725411.797:30422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31206 comm="syz.5.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  508.466851][   T29] audit: type=1326 audit(1759725411.797:30423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31206 comm="syz.5.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  508.490512][   T29] audit: type=1326 audit(1759725411.797:30424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31206 comm="syz.5.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  508.514206][   T29] audit: type=1326 audit(1759725411.797:30425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31206 comm="syz.5.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  508.537779][   T29] audit: type=1326 audit(1759725411.797:30426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31206 comm="syz.5.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  508.561324][   T29] audit: type=1326 audit(1759725411.797:30427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31206 comm="syz.5.6801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  508.592759][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.605342][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.108020][T31241] netlink: 252 bytes leftover after parsing attributes in process `syz.6.6805'.
[  509.287084][   T29] audit: type=1326 audit(1759725412.757:30428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.1.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94f2eec9 code=0x7ffc0000
[  509.310722][   T29] audit: type=1326 audit(1759725412.757:30429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.1.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94f2eec9 code=0x7ffc0000
[  509.409634][T31236] hub 2-0:1.0: USB hub found
[  509.414500][T31236] hub 2-0:1.0: 8 ports detected
[  509.439201][T31236] can0: slcan on ptm0.
[  509.547289][T31236] can0 (unregistered): slcan off ptm0.
[  509.728792][T31260] 9pnet_fd: Insufficient options for proto=fd
[  509.769504][T31267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.801768][T31270] 9pnet_fd: Insufficient options for proto=fd
[  509.815836][T31267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.287302][T31296] 9pnet_fd: Insufficient options for proto=fd
[  510.395898][T31298] loop6: detected capacity change from 0 to 512
[  510.680828][T31300] loop5: detected capacity change from 0 to 512
[  510.728310][T31298] EXT4-fs (loop6): orphan cleanup on readonly fs
[  510.737298][T31298] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.6816: bad orphan inode 13
[  510.768674][T31300] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002]
[  510.776837][T31298] ext4_test_bit(bit=12, block=18) = 1
[  510.782402][T31298] is_bad_inode(inode)=0
[  510.786562][T31298] NEXT_ORPHAN(inode)=2130706432
[  510.791440][T31298] max_ino=32
[  510.794698][T31298] i_nlink=1
[  510.797061][T31300] System zones: 0-2, 18-18, 34-35
[  510.817590][T31300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  510.827690][T31298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  510.837185][T31300] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  510.861879][T31300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.870612][T31300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.906369][T31311] loop3: detected capacity change from 0 to 128
[  510.918687][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.930490][T31313] bridge0: port 1(gretap0) entered blocking state
[  510.936941][T31313] bridge0: port 1(gretap0) entered disabled state
[  510.944610][T31311] vfat: Unknown parameter '01777777777777777777777'
[  510.953493][T31313] gretap0: entered allmulticast mode
[  510.960451][T31313] gretap0: entered promiscuous mode
[  510.966036][T31313] bridge0: port 1(gretap0) entered blocking state
[  510.972508][T31313] bridge0: port 1(gretap0) entered forwarding state
[  510.981442][T31318] gretap0: left allmulticast mode
[  510.986498][T31318] gretap0: left promiscuous mode
[  510.991610][T31318] bridge0: port 1(gretap0) entered disabled state
[  511.012826][T31320] loop3: detected capacity change from 0 to 512
[  511.019645][T31320] msdos: Unknown parameter 'dot…'
[  511.035210][T31320] loop3: detected capacity change from 0 to 512
[  511.042112][T31320] EXT4-fs: inline encryption not supported
[  511.048225][T31320] EXT4-fs: Ignoring removed nobh option
[  511.055078][T31320] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  511.066624][T31320] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  511.076784][T31320] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6818: Corrupt directory, running e2fsck is recommended
[  511.090721][T31320] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  511.099223][T31320] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.6818: corrupted in-inode xattr: invalid ea_ino
[  511.113563][T31320] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6818: couldn't read orphan inode 15 (err -117)
[  511.126149][T31320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  511.143488][T31320] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  511.155054][T31320] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  511.165186][T31320] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6818: Corrupt directory, running e2fsck is recommended
[  511.180447][T31320] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  511.192047][T31320] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  511.202193][T31320] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6818: Corrupt directory, running e2fsck is recommended
[  511.218680][T31320] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  511.230193][T31320] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  511.240304][T31320] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6818: Corrupt directory, running e2fsck is recommended
[  511.255432][T31320] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  511.267261][T31320] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.6818: path /94/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  511.289406][T31320] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 8: comm syz.3.6818: path /94/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  511.502693][T31339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  511.536077][T31343] 9pnet_fd: Insufficient options for proto=fd
[  511.745275][T27546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.386998][T31370] 9pnet_fd: Insufficient options for proto=fd
[  513.001832][T31382] wireguard0: entered promiscuous mode
[  513.007411][T31382] wireguard0: entered allmulticast mode
[  513.442365][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.476994][T31427] loop5: detected capacity change from 0 to 128
[  513.527594][T31427] vfat: Unknown parameter '01777777777777777777777'
[  513.592679][T31431] loop5: detected capacity change from 0 to 512
[  513.609441][T31431] msdos: Unknown parameter 'dot…'
[  513.633288][T31431] loop5: detected capacity change from 0 to 512
[  513.647536][T31431] EXT4-fs: inline encryption not supported
[  513.663602][T31431] EXT4-fs: Ignoring removed nobh option
[  513.674312][T31431] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  513.685880][T31431] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  513.695973][T31431] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.6838: Corrupt directory, running e2fsck is recommended
[  513.727982][T31431] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  513.746510][T31431] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.6838: corrupted in-inode xattr: invalid ea_ino
[  513.777213][T31431] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6838: couldn't read orphan inode 15 (err -117)
[  513.798069][T31431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  513.828449][T31431] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  513.840301][T31431] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  513.850420][T31431] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.6838: Corrupt directory, running e2fsck is recommended
[  513.888125][T31431] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  513.899683][T31431] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  513.909796][T31431] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.6838: Corrupt directory, running e2fsck is recommended
[  513.947808][T31438] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  513.959426][T31438] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  513.969550][T31438] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.6838: Corrupt directory, running e2fsck is recommended
[  513.993711][T31431] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  514.026275][T31431] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.6838: path /434/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  514.068968][T31440] bridge0: port 1(gretap0) entered blocking state
[  514.075516][T31440] bridge0: port 1(gretap0) entered disabled state
[  514.084751][T31431] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 8: comm syz.5.6838: path /434/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  514.097598][T31440] gretap0: entered allmulticast mode
[  514.125775][T31440] gretap0: entered promiscuous mode
[  514.173234][T31440] bridge0: port 1(gretap0) entered blocking state
[  514.179836][T31440] bridge0: port 1(gretap0) entered forwarding state
[  514.199425][T31447] gretap0: left allmulticast mode
[  514.204496][T31447] gretap0: left promiscuous mode
[  514.209659][T31447] bridge0: port 1(gretap0) entered disabled state
[  514.311817][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.431169][T31473] wireguard0: entered promiscuous mode
[  514.436694][T31473] wireguard0: entered allmulticast mode
[  514.494587][T31485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  514.561616][T31486] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6844'.
[  514.740654][T31505] loop6: detected capacity change from 0 to 512
[  514.787333][T31510] loop3: detected capacity change from 0 to 128
[  514.839475][T31507] bridge_slave_0: left allmulticast mode
[  514.845212][T31507] bridge_slave_0: left promiscuous mode
[  514.850914][T31507] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.861017][T31505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  514.883960][T31505] ext4 filesystem being mounted at /469/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  514.911062][T31507] bridge_slave_1: left allmulticast mode
[  514.916769][T31507] bridge_slave_1: left promiscuous mode
[  514.922453][T31507] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.957428][T31507] bond0: (slave bond_slave_0): Releasing backup interface
[  514.966988][T31507] bond0: (slave bond_slave_1): Releasing backup interface
[  514.979388][T31507] team0: Port device team_slave_0 removed
[  514.987940][T31507] team0: Port device team_slave_1 removed
[  514.994583][T31507] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  515.002038][T31507] batman_adv: batadv0: Removing interface: batadv_slave_0
[  515.012004][T31507] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  515.019476][T31507] batman_adv: batadv0: Removing interface: batadv_slave_1
[  515.040483][T31507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  515.107930][T31522] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6854'.
[  515.137270][T31522] hsr_slave_0: left promiscuous mode
[  515.143114][T31522] hsr_slave_1: left promiscuous mode
[  515.159116][   T29] kauditd_printk_skb: 76 callbacks suppressed
[  515.159134][   T29] audit: type=1400 audit(1759725418.637:30506): avc:  denied  { bind } for  pid=31521 comm="syz.4.6854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  515.230084][T31531] bridge0: port 1(gretap0) entered blocking state
[  515.236663][T31531] bridge0: port 1(gretap0) entered disabled state
[  515.252639][T31531] gretap0: entered allmulticast mode
[  515.258196][T31522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6854'.
[  515.268647][T31531] gretap0: entered promiscuous mode
[  515.275056][T31531] bridge0: port 1(gretap0) entered blocking state
[  515.281602][T31531] bridge0: port 1(gretap0) entered forwarding state
[  515.297099][T31532] gretap0: left allmulticast mode
[  515.302199][T31532] gretap0: left promiscuous mode
[  515.307379][T31532] bridge0: port 1(gretap0) entered disabled state
[  515.389487][T31524] hub 2-0:1.0: USB hub found
[  515.394546][T31524] hub 2-0:1.0: 8 ports detected
[  515.439135][T31543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6857'.
[  515.480619][T31548] loop5: detected capacity change from 0 to 512
[  515.501110][T31548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  515.513784][T31553] wireguard0: entered promiscuous mode
[  515.516385][T31548] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  515.519323][T31553] wireguard0: entered allmulticast mode
[  515.530965][   T29] audit: type=1326 audit(1759725418.987:30507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31540 comm="syz.4.6858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x0
[  515.540668][T31548] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #2: comm syz.5.6860: corrupted inode contents
[  515.570296][T31548] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #2: comm syz.5.6860: mark_inode_dirty error
[  515.584846][T31548] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #2: comm syz.5.6860: corrupted inode contents
[  515.623017][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.722644][   T29] audit: type=1326 audit(1759725419.197:30508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31547 comm="syz.5.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  515.746360][   T29] audit: type=1326 audit(1759725419.197:30509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31547 comm="syz.5.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  515.774724][   T29] audit: type=1326 audit(1759725419.197:30510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31547 comm="syz.5.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  515.798499][   T29] audit: type=1326 audit(1759725419.197:30511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31547 comm="syz.5.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  515.822104][   T29] audit: type=1326 audit(1759725419.197:30512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31547 comm="syz.5.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  515.845748][   T29] audit: type=1326 audit(1759725419.197:30513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31547 comm="syz.5.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  515.869341][   T29] audit: type=1326 audit(1759725419.197:30514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31547 comm="syz.5.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  515.892944][   T29] audit: type=1326 audit(1759725419.197:30515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31547 comm="syz.5.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  516.068728][T31599] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6866'.
[  517.332079][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.621296][T31619] loop1: detected capacity change from 0 to 512
[  517.676250][T31619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  517.689597][T31619] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  517.701361][T31619] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #2: comm syz.1.6872: corrupted inode contents
[  517.703122][T31627] loop4: detected capacity change from 0 to 512
[  517.713571][T31619] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #2: comm syz.1.6872: mark_inode_dirty error
[  517.732035][T31619] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #2: comm syz.1.6872: corrupted inode contents
[  517.839029][T31627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  517.921859][T31650] loop3: detected capacity change from 0 to 512
[  517.936988][T31627] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  517.971232][T31650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.012000][T31650] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  518.106092][T31650] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.6877: corrupted inode contents
[  518.128289][T31650] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #2: comm syz.3.6877: mark_inode_dirty error
[  518.158083][T31650] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.6877: corrupted inode contents
[  518.451847][T23931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.928105][T31694] FAULT_INJECTION: forcing a failure.
[  518.928105][T31694] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  518.941261][T31694] CPU: 1 UID: 0 PID: 31694 Comm: syz.5.6883 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  518.941293][T31694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  518.941307][T31694] Call Trace:
[  518.941314][T31694]  <TASK>
[  518.941359][T31694]  __dump_stack+0x1d/0x30
[  518.941395][T31694]  dump_stack_lvl+0xe8/0x140
[  518.941444][T31694]  dump_stack+0x15/0x1b
[  518.941488][T31694]  should_fail_ex+0x265/0x280
[  518.941517][T31694]  should_fail+0xb/0x20
[  518.941536][T31694]  should_fail_usercopy+0x1a/0x20
[  518.941560][T31694]  copy_to_user_nofault+0x7f/0x120
[  518.941667][T31694]  bpf_probe_write_user+0x83/0xc0
[  518.941688][T31694]  bpf_prog_f26ae291ee3ebee3+0x41/0x49
[  518.941705][T31694]  bpf_trace_run3+0x10f/0x1d0
[  518.941730][T31694]  ? _parse_integer_limit+0x170/0x190
[  518.941773][T31694]  ? __sk_destruct+0x3a7/0x4c0
[  518.941799][T31694]  ? sock_close+0x6b/0x150
[  518.941826][T31694]  ? ____fput+0x1c/0x30
[  518.941844][T31694]  ? task_work_run+0x131/0x1a0
[  518.941869][T31694]  ? __sk_destruct+0x3a7/0x4c0
[  518.941885][T31694]  kmem_cache_free+0x329/0x3d0
[  518.941938][T31694]  __sk_destruct+0x3a7/0x4c0
[  518.941961][T31694]  __sk_free+0x227/0x270
[  518.941983][T31694]  sk_free+0x39/0x80
[  518.942002][T31694]  __vsock_release+0x332/0x380
[  518.942030][T31694]  vsock_release+0x5b/0x90
[  518.942117][T31694]  sock_close+0x6b/0x150
[  518.942143][T31694]  ? __pfx_sock_close+0x10/0x10
[  518.942166][T31694]  __fput+0x29b/0x650
[  518.942218][T31694]  ____fput+0x1c/0x30
[  518.942236][T31694]  task_work_run+0x131/0x1a0
[  518.942265][T31694]  exit_to_user_mode_loop+0xed/0x110
[  518.942293][T31694]  do_syscall_64+0x1d6/0x200
[  518.942333][T31694]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  518.942356][T31694]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  518.942382][T31694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.942439][T31694] RIP: 0033:0x7fc321f1eec9
[  518.942457][T31694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  518.942478][T31694] RSP: 002b:00007fc32097f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  518.942501][T31694] RAX: 0000000000000000 RBX: 00007fc322175fa0 RCX: 00007fc321f1eec9
[  518.942516][T31694] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000
[  518.942536][T31694] RBP: 00007fc32097f090 R08: 0000000000000000 R09: 0000000000000000
[  518.942547][T31694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  518.942559][T31694] R13: 00007fc322176038 R14: 00007fc322175fa0 R15: 00007fff2f1ad2f8
[  518.942575][T31694]  </TASK>
[  519.639729][T26999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.134906][T27546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.235837][T31703] bridge0: port 1(gretap0) entered blocking state
[  520.242416][T31703] bridge0: port 1(gretap0) entered disabled state
[  520.249364][   T29] kauditd_printk_skb: 54 callbacks suppressed
[  520.249380][   T29] audit: type=1326 audit(1759725423.727:30570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31712 comm="syz.4.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  520.264003][T31703] gretap0: entered allmulticast mode
[  520.285231][T31703] gretap0: entered promiscuous mode
[  520.295020][T31703] bridge0: port 1(gretap0) entered blocking state
[  520.299030][T31716] loop4: detected capacity change from 0 to 512
[  520.301524][T31703] bridge0: port 1(gretap0) entered forwarding state
[  520.315353][   T29] audit: type=1326 audit(1759725423.727:30571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31712 comm="syz.4.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  520.338999][   T29] audit: type=1326 audit(1759725423.727:30572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31712 comm="syz.4.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  520.362530][   T29] audit: type=1326 audit(1759725423.727:30573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31712 comm="syz.4.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  520.386120][   T29] audit: type=1326 audit(1759725423.727:30574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31712 comm="syz.4.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  520.389897][T31720] gretap0: left allmulticast mode
[  520.409819][   T29] audit: type=1326 audit(1759725423.727:30575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31712 comm="syz.4.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  520.409861][   T29] audit: type=1326 audit(1759725423.727:30576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31712 comm="syz.4.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  520.409953][   T29] audit: type=1326 audit(1759725423.727:30577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31712 comm="syz.4.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  520.415009][T31720] gretap0: left promiscuous mode
[  520.438578][   T29] audit: type=1326 audit(1759725423.727:30578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31712 comm="syz.4.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  520.462297][T31720] bridge0: port 1(gretap0) entered disabled state
[  520.485715][   T29] audit: type=1326 audit(1759725423.727:30579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31712 comm="syz.4.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x7ffc0000
[  520.544772][T31718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31718 comm=syz.6.6887
[  520.587284][T31716] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002]
[  520.601908][T31716] System zones: 0-2, 18-18, 34-35
[  520.617369][T31716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  520.629990][T31716] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  520.651497][T31716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.659961][T31716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.704969][T31736] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6893'.
[  520.714432][T31736] hsr_slave_0: left promiscuous mode
[  520.720224][T31736] hsr_slave_1: left promiscuous mode
[  520.761456][T31736] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6893'.
[  520.944602][T31748] loop6: detected capacity change from 0 to 512
[  521.099774][T31748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.120263][T31748] ext4 filesystem being mounted at /478/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  521.355399][T31758] loop3: detected capacity change from 0 to 512
[  521.607640][T31758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.648109][T31758] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  521.786885][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.955809][T31783] loop6: detected capacity change from 0 to 512
[  521.963383][T31783] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  521.977612][T31783] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  521.987292][T31783] EXT4-fs (loop6): orphan cleanup on readonly fs
[  521.993655][T31783] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.6900: bad orphan inode 267
[  522.017224][T31783] EXT4-fs (loop6): Remounting filesystem read-only
[  522.024238][T31783] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  522.037495][T27546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.038372][T31783] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.6900: dx entry: limit 0 != root limit 125
[  522.058281][T31783] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6900: Corrupt directory, running e2fsck is recommended
[  522.081694][T31783] bridge0: entered allmulticast mode
[  522.100984][T31783] bridge0 (unregistering): left promiscuous mode
[  522.157613][T31804] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  522.216201][T31794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31794 comm=syz.3.6903
[  522.247126][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  522.380941][T31813] 9pnet_fd: Insufficient options for proto=fd
[  522.587612][T31835] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  522.594169][T31835] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  522.601690][T31835] vhci_hcd vhci_hcd.0: Device attached
[  523.651830][T31837] vhci_hcd: connection closed
[  523.682361][   T37] vhci_hcd: stop threads
[  523.691808][   T37] vhci_hcd: release socket
[  523.696248][   T37] vhci_hcd: disconnect device
[  523.702499][T26999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.801349][T31898] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  523.888735][T31914] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6922'.
[  523.909386][T31914] hsr_slave_0: left promiscuous mode
[  523.918139][T31914] hsr_slave_1: left promiscuous mode
[  523.945543][T31922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6922'.
[  524.016412][T31914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=31914 comm=syz.5.6922
[  524.131746][T31930] loop6: detected capacity change from 0 to 2048
[  524.148983][T31930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  524.171556][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.268360][T14447] vhci_hcd: vhci_device speed not set
[  524.879454][T31997] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  524.958156][T31997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31997 comm=syz.1.6927
[  525.602089][T32026] loop5: detected capacity change from 0 to 128
[  525.639337][   T29] kauditd_printk_skb: 139 callbacks suppressed
[  525.639354][   T29] audit: type=1326 audit(1759725429.117:30719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32025 comm="syz.5.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  525.648764][T32026] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  525.669218][   T29] audit: type=1326 audit(1759725429.117:30720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32025 comm="syz.5.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  525.677161][T32026] FAT-fs (loop5): Filesystem has been set read-only
[  525.700636][   T29] audit: type=1326 audit(1759725429.117:30721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32025 comm="syz.5.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  525.700667][   T29] audit: type=1326 audit(1759725429.117:30722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32025 comm="syz.5.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  525.731117][T32029] loop6: detected capacity change from 0 to 1024
[  525.754336][   T29] audit: type=1326 audit(1759725429.117:30723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32025 comm="syz.5.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  525.763613][T32026] syz.5.6933: attempt to access beyond end of device
[  525.763613][T32026] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  525.784235][   T29] audit: type=1326 audit(1759725429.117:30724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32025 comm="syz.5.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  525.784270][   T29] audit: type=1326 audit(1759725429.117:30725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32025 comm="syz.5.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  525.784297][   T29] audit: type=1326 audit(1759725429.117:30726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32025 comm="syz.5.6933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  525.905651][T32026] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  525.913569][T32026] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  525.966527][T32030] syz.5.6933: attempt to access beyond end of device
[  525.966527][T32030] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128
[  525.979870][T32030] Buffer I/O error on dev loop5, logical block 2065, async page read
[  526.013093][T32037] FAULT_INJECTION: forcing a failure.
[  526.013093][T32037] name failslab, interval 1, probability 0, space 0, times 0
[  526.025754][T32037] CPU: 1 UID: 0 PID: 32037 Comm: syz.6.6934 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  526.025786][T32037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  526.025800][T32037] Call Trace:
[  526.025809][T32037]  <TASK>
[  526.025817][T32037]  __dump_stack+0x1d/0x30
[  526.025848][T32037]  dump_stack_lvl+0xe8/0x140
[  526.025932][T32037]  dump_stack+0x15/0x1b
[  526.025962][T32037]  should_fail_ex+0x265/0x280
[  526.025998][T32037]  ? alloc_mnt_ns+0x6f/0x220
[  526.026023][T32037]  should_failslab+0x8c/0xb0
[  526.026118][T32037]  __kmalloc_cache_noprof+0x4c/0x4a0
[  526.026149][T32037]  alloc_mnt_ns+0x6f/0x220
[  526.026175][T32037]  vfs_open_tree+0x1de/0x530
[  526.026275][T32037]  __x64_sys_open_tree+0x45/0xc0
[  526.026300][T32037]  x64_sys_call+0x2a8b/0x3000
[  526.026322][T32037]  do_syscall_64+0xd2/0x200
[  526.026346][T32037]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  526.026433][T32037]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  526.026456][T32037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.026481][T32037] RIP: 0033:0x7f216e05eec9
[  526.026498][T32037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  526.026519][T32037] RSP: 002b:00007f216cac7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  526.026613][T32037] RAX: ffffffffffffffda RBX: 00007f216e2b5fa0 RCX: 00007f216e05eec9
[  526.026628][T32037] RDX: 0000000000089901 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  526.026643][T32037] RBP: 00007f216cac7090 R08: 0000000000000000 R09: 0000000000000000
[  526.026701][T32037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  526.026717][T32037] R13: 00007f216e2b6038 R14: 00007f216e2b5fa0 R15: 00007ffd0cd0e108
[  526.026754][T32037]  </TASK>
[  526.165592][T32030] syz.5.6933: attempt to access beyond end of device
[  526.165592][T32030] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128
[  526.214687][T32030] Buffer I/O error on dev loop5, logical block 2066, async page read
[  526.223579][T32030] syz.5.6933: attempt to access beyond end of device
[  526.223579][T32030] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128
[  526.236870][T32030] Buffer I/O error on dev loop5, logical block 2067, async page read
[  526.255016][T32039] loop3: detected capacity change from 0 to 2048
[  526.261512][T32030] syz.5.6933: attempt to access beyond end of device
[  526.261512][T32030] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128
[  526.274817][T32030] Buffer I/O error on dev loop5, logical block 2068, async page read
[  526.287969][T32030] syz.5.6933: attempt to access beyond end of device
[  526.287969][T32030] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128
[  526.301313][T32030] Buffer I/O error on dev loop5, logical block 2069, async page read
[  526.311605][T32030] syz.5.6933: attempt to access beyond end of device
[  526.311605][T32030] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128
[  526.325097][T32030] Buffer I/O error on dev loop5, logical block 2070, async page read
[  526.333495][T32030] syz.5.6933: attempt to access beyond end of device
[  526.333495][T32030] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128
[  526.346781][T32030] Buffer I/O error on dev loop5, logical block 2071, async page read
[  526.377460][T32039] Alternate GPT is invalid, using primary GPT.
[  526.383783][T32039]  loop3: p1 p2 p3
[  526.388132][T32030] syz.5.6933: attempt to access beyond end of device
[  526.388132][T32030] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128
[  526.401413][T32030] Buffer I/O error on dev loop5, logical block 2072, async page read
[  526.409733][T32030] syz.5.6933: attempt to access beyond end of device
[  526.409733][T32030] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128
[  526.423029][T32030] Buffer I/O error on dev loop5, logical block 2065, async page read
[  526.431350][T32030] Buffer I/O error on dev loop5, logical block 2066, async page read
[  526.499454][   T29] audit: type=1326 audit(1759725429.977:30727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32064 comm="syz.6.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216e05eec9 code=0x7ffc0000
[  526.523077][   T29] audit: type=1326 audit(1759725429.977:30728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32064 comm="syz.6.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216e05eec9 code=0x7ffc0000
[  526.761176][T32078] loop4: detected capacity change from 0 to 512
[  526.778459][T32078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.791414][T32078] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  526.805847][T32074] loop6: detected capacity change from 0 to 128
[  526.817501][T32078] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #2: comm syz.4.6945: corrupted inode contents
[  526.830141][T32078] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #2: comm syz.4.6945: mark_inode_dirty error
[  526.841936][T32078] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #2: comm syz.4.6945: corrupted inode contents
[  526.993725][T32104] can0: slcan on ptm0.
[  527.047204][T32104] can0 (unregistered): slcan off ptm0.
[  528.437479][T32135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6951'.
[  528.485021][T32143] C: renamed from team_slave_0
[  528.491336][T32143] netlink: 'syz.6.6952': attribute type 3 has an invalid length.
[  528.498831][T32132] SELinux: ebitmap: truncated map
[  528.499133][T32143] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6952'.
[  528.504659][T32132] SELinux: failed to load policy
[  528.513175][T32143] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  528.546922][T26999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.627146][T32149] loop6: detected capacity change from 0 to 128
[  528.633818][T32149] vfat: Unknown parameter '01777777777777777777777'
[  528.655383][T32149] loop6: detected capacity change from 0 to 512
[  528.663969][T32149] msdos: Unknown parameter 'dot…'
[  528.664548][T32135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6951'.
[  528.675523][T32149] loop6: detected capacity change from 0 to 512
[  528.692031][T32149] EXT4-fs: inline encryption not supported
[  528.699378][T32149] EXT4-fs: Ignoring removed nobh option
[  528.706548][T32149] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  528.718140][T32149] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  528.728478][T32149] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6954: Corrupt directory, running e2fsck is recommended
[  528.748694][T32149] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  528.758890][T32149] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.6954: corrupted in-inode xattr: invalid ea_ino
[  528.785062][T32149] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6954: couldn't read orphan inode 15 (err -117)
[  528.800354][T32149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  528.832263][T32149] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  528.843821][T32149] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  528.853933][T32149] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6954: Corrupt directory, running e2fsck is recommended
[  528.898473][T32149] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  528.910036][T32149] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  528.920196][T32149] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6954: Corrupt directory, running e2fsck is recommended
[  529.288335][T32149] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  529.300000][T32149] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  529.310226][T32149] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6954: Corrupt directory, running e2fsck is recommended
[  529.823555][T32200] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  529.878230][T32199] loop5: detected capacity change from 0 to 512
[  529.887284][T32200] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.6954: path /498/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  529.947798][T32199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.972152][T32200] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 8: comm syz.6.6954: path /498/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  530.002551][T32199] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  530.047449][T32199] veth0: entered promiscuous mode
[  530.072934][T32199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6958'.
[  530.104912][T17005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.464477][T16358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.558810][T32236] wireguard0: entered promiscuous mode
[  530.564380][T32236] wireguard0: entered allmulticast mode
[  530.597796][T32243] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6965'.
[  530.627630][T32243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6965'.
[  530.647684][   T29] kauditd_printk_skb: 121 callbacks suppressed
[  530.647702][   T29] audit: type=1326 audit(1759725434.117:30850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32250 comm="syz.5.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  530.679103][   T29] audit: type=1326 audit(1759725434.137:30851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32250 comm="syz.5.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  530.702814][   T29] audit: type=1326 audit(1759725434.137:30852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32250 comm="syz.5.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  530.726484][   T29] audit: type=1326 audit(1759725434.137:30853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32250 comm="syz.5.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  530.882489][   T29] audit: type=1326 audit(1759725434.357:30854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32250 comm="syz.5.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  530.956407][   T29] audit: type=1326 audit(1759725434.397:30855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32250 comm="syz.5.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  530.980110][   T29] audit: type=1326 audit(1759725434.427:30856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32254 comm="syz.4.6967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4aaf4eec9 code=0x0
[  531.136765][   T29] audit: type=1326 audit(1759725434.607:30857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32250 comm="syz.5.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  531.160331][   T29] audit: type=1326 audit(1759725434.607:30858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32250 comm="syz.5.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  531.183941][   T29] audit: type=1326 audit(1759725434.607:30859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32250 comm="syz.5.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc321f1eec9 code=0x7ffc0000
[  531.424732][T32276] hub 2-0:1.0: USB hub found
[  531.446527][T32276] hub 2-0:1.0: 8 ports detected
[  531.726611][T32306] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  531.733170][T32306] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  531.740628][T32306] vhci_hcd vhci_hcd.0: Device attached
[  531.926667][T32337] loop4: detected capacity change from 0 to 512
[  531.937978][   T23] vhci_hcd: vhci_device speed not set
[  531.940663][T32337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.956816][T32337] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  531.997145][   T23] usb 7-1: new full-speed USB device number 4 using vhci_hcd
[  532.388148][T32307] vhci_hcd: connection reset by peer
[  532.396630][   T58] vhci_hcd: stop threads
[  532.400988][   T58] vhci_hcd: release socket
[  532.405543][   T58] vhci_hcd: disconnect device
[  532.436928][T32362] bridge0: port 1(gretap0) entered blocking state
[  532.443635][T32362] bridge0: port 1(gretap0) entered disabled state
[  532.478984][T32362] gretap0: entered allmulticast mode
[  532.485031][T32362] gretap0: entered promiscuous mode
[  532.510179][T32362] bridge0: port 1(gretap0) entered blocking state
[  532.516708][T32362] bridge0: port 1(gretap0) entered forwarding state
[  532.525422][T32362] gretap0: left allmulticast mode
[  532.530583][T32362] gretap0: left promiscuous mode
[  532.535615][T32362] bridge0: port 1(gretap0) entered disabled state
[  532.787558][T26999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.850121][T32404] can0: slcan on ptm0.
[  533.977272][T32404] can0 (unregistered): slcan off ptm0.
[  534.151811][T32448] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  534.281901][T32448] SELinux: failed to load policy
[  534.425228][T32453] loop4: detected capacity change from 0 to 512
[  534.514262][T32453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  534.537138][T32453] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  535.310337][T26999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.347436][T32470] 9pnet_fd: Insufficient options for proto=fd
[  535.508726][    T2] ==================================================================
[  535.516845][    T2] BUG: KCSAN: data-race in alloc_pid / copy_process
[  535.523442][    T2] 
[  535.525763][    T2] read-write to 0xffffffff8685feb8 of 4 bytes by task 12 on cpu 1:
[  535.533649][    T2]  alloc_pid+0x539/0x720
[  535.537910][    T2]  copy_process+0xe25/0x2000
[  535.542500][    T2]  kernel_clone+0x16c/0x5c0
[  535.547010][    T2]  user_mode_thread+0x7d/0xb0
[  535.551691][    T2]  call_usermodehelper_exec_work+0x41/0x160
[  535.557592][    T2]  process_scheduled_works+0x4ce/0x9d0
[  535.563061][    T2]  worker_thread+0x582/0x770
[  535.567656][    T2]  kthread+0x489/0x510
[  535.571727][    T2]  ret_from_fork+0x122/0x1b0
[  535.576315][    T2]  ret_from_fork_asm+0x1a/0x30
[  535.581077][    T2] 
[  535.583398][    T2] read to 0xffffffff8685feb8 of 4 bytes by task 2 on cpu 0:
[  535.590673][    T2]  copy_process+0x17fc/0x2000
[  535.595355][    T2]  kernel_clone+0x16c/0x5c0
[  535.599862][    T2]  kernel_thread+0xad/0xe0
[  535.604280][    T2]  kthreadd+0x28d/0x360
[  535.608436][    T2]  ret_from_fork+0x122/0x1b0
[  535.613025][    T2]  ret_from_fork_asm+0x1a/0x30
[  535.617788][    T2] 
[  535.620109][    T2] value changed: 0x800000e3 -> 0x800000e4
[  535.625820][    T2] 
[  535.628142][    T2] Reported by Kernel Concurrency Sanitizer on:
[  535.634284][    T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Not tainted syzkaller #0 PREEMPT(voluntary) 
[  535.643563][    T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  535.653712][    T2] ==================================================================
[  535.835752][T32483] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  535.842377][T32483] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  535.849895][T32483] vhci_hcd vhci_hcd.0: Device attached
[  536.037395][   T36] vhci_hcd: vhci_device speed not set
[  536.097099][   T36] usb 9-1: new full-speed USB device number 6 using vhci_hcd
[  536.283811][T32484] vhci_hcd: connection reset by peer
[  536.290524][   T12] vhci_hcd: stop threads
[  536.294820][   T12] vhci_hcd: release socket
[  536.299369][   T12] vhci_hcd: disconnect device
[  537.037093][   T23] usb 7-1: enqueue for inactive port 0
[  537.042601][   T23] usb 7-1: enqueue for inactive port 0
[  537.117490][   T23] vhci_hcd: vhci_device speed not set
[  541.117437][   T36] usb 9-1: enqueue for inactive port 0
[  541.123017][   T36] usb 9-1: enqueue for inactive port 0
[  541.197065][   T36] vhci_hcd: vhci_device speed not set