last executing test programs:

8m57.881323231s ago: executing program 32 (id=55):
socket$tipc(0x1e, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'})

6m19.310607496s ago: executing program 33 (id=2047):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0xf6, 0x21cf9, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r2, r2, 0x0, 0x40000f63c)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000480)={0x800100, 0xffffefff, 0x5, 0xe1d9, 0xeb2, 0x4000fb})
close(r0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r5, &(0x7f0000000880)={&(0x7f0000000180)={0xa, 0x4e21, 0x2, @remote, 0x40000008}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[], 0xb}, 0x24000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fedbdf2518"], 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x40080)
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20040, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0x7f}}, {@rq={'rq', 0x3d, 0xbc8}}, {@sq={'sq', 0x3d, 0xfffffffffffffffa}}, {@common=@aname={'aname', 0x3d, 'taprio\x00'}}], [{@appraise_type}, {@measure}, {@measure}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@appraise}]}})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4c845}, 0x0)

4m48.869641754s ago: executing program 1 (id=3189):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r2, 0x0, 0x0, 0x7)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000600))
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x91)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000001000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
socket(0xa, 0x5, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8", 0x31}, {&(0x7f0000000900)="8a3e52dbcc33833aa0b6cf44fa7275e4d0097ba7023a1ff4674fb7eb98833e45423ea1b372e7881ce18f42b7e93559d474518955f97331eddc1aec63e07184afdff8a90728d2f4772d1593f1fdbe7b31035412eaa85c9109b60000000000000000000000000000001320bff2f7ea3cb7bd1406013af8a597897761885386d57462a721b1666c5edcec4580227be6d9", 0x8f}, {&(0x7f0000000180)="ca8be024b7d3396913009eee085cbfd194f2635a89cac67dd9da7152c77aec7c36908c3b87098d0be7d6278b4f4d630082e4c4a36d9121245e", 0x39}], 0x3}, 0x20000880)

4m48.712452301s ago: executing program 1 (id=3190):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)

4m48.543604708s ago: executing program 1 (id=3192):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040", 0x30}, {&(0x7f0000000900)="8a3e52dbcc33833aa0b6cf44fa7275e4d0097ba7023a1ff4674fb7eb98833e45423ea1b372e7881ce18f42b7e93559d474518955f97331eddc1aec63e07184afdff8a90728d2f4772d1593f1fdbe7b31035412eaa85c9109b60000000000000000000000000000001320bff2f7ea3cb7bd1406013af8a597897761885386", 0x7e}, {&(0x7f0000000180)="ca8be024b7d3396913009eee085cbfd194f2635a89cac67dd9da7152c77aec7c36908c3b87098d0be7d6", 0x2a}], 0x3}, 0x20000880)

4m48.48888959s ago: executing program 1 (id=3193):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000002c0), 0xfd, 0x4a0, &(0x7f0000000e00)="$eJzs3MtrXNUfAPDvnZkkfSe//uqjtdpoFYuPpEmrFhR8gOBCQdBFXUlM0lKbNtJEsCXYKKVuBC24F8GN4F/gypWoK8Gt7qVQpJtWVyM3c+90kszk0Ztkms7nAzdzzsy5c873Ps89d24C6Fj96Z8kYkdE/BERvRFRaiywtTal5W5enxn95/rMaBLV6lt/J+lsceP6zGheNMlet9cylfSLSpeSeKlJvVPnL5wemZgYP5flB6fPfDA4df7C06fOjJwcPzl+dvjYsaNHhp57dviZNYkzbdONfR9P7t/72jtX3hg9fuW9X75PGhrdGEdBz/fWkzP1ZbLQY2tU2Z1iZ0M6qbSxIaxKT0Skq6trbv/vjfKlXfXPeuPVT9vaOGBdVavV6nDrj2erwF0siXa3AGiP/ESfXv/m0wZ1Pe4I116uXQClcd/Mptonldo4SE/t2mjnOtXfHxHHZ//9Op1i1eMQXevUKgDgbvZj2v95qkn/rxJxb0O5Xdm9ob6I+F9E7I6I/0fEnoi4J2pl74uI+5tX0/9ui/r7F+QX939KVwuEt6y0//dCdm9rfv+vfhesr5zlds7F35WcODUxfjhbJoeiqyfNDzX99iRiNn39/YtW9Tf2/9IprT/vC2btuFrpmT/P2Mj0SOHAM9c+idhXaRZ/EpVbUcTeiNh3m3WceuK7/fPfKddTy8e/hDW4z1T9JuLx2vqfjQXx55Kl708ObomJ8cOD+Vax2K+/XX6zVf21+EuxdPxbiwfaQrr+tzXb/l+sx9+XNN6vnVr0Fd3L1XH5z89aXtPcWv8RW+beWdn23528Pa/yj0amp88NRXQnry9+v2GAO8/n5dP4Dx1svv/vzuZJ438gItKN+MGIeCgiDmRtfzgiHomIg0vE//Mrj77fMv4DBbb/NZDGP9b0+Ndq/a8+UT790w+t6l/Z8e9onplr1EqOfyttYJFlBwAAAJtFKSJ2RFIaqKdLpYGB2u/l98S20sTk1PSTJyY/PDtWe0agL7pK+UhXb8N46FA2Npznh7P8xSx/JBs3/qq8dS4/MDo5Mdbu4KHDbW+x/6f+KjeZYf2GooF28LwWdK7V7//L3vMFNonbP//rOcBmt8xeXNqodgAbz1kcOlez/f9iYyaJ2q/kgbuO8z90rvr+/+UKCjcM/S98eBPYfJY6/1d7N7AhwIbT/4eOVOS5/jwRUWj2Yon4NmLpMkl7GlYw8XmR2Ssb0MIotXH5dLdlpQyX27qpV1b6Xy3ifPVi4UrbfWQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYG/8FAAD//64O3bE=")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x22020400)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
unshare(0x2060280)
fsmount(r0, 0x0, 0x70)
syz_clone(0x4801000, &(0x7f0000000080)="61f542effdf3a964d6ca2828b661920702262064e14ce7802bc99b39aa74ed79e2c0578aa748d042d816ab0851be2b955c7cdaf97c9465131028", 0x3a, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="e3cd38578eda")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000009}, 0xc880)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})

4m48.112499816s ago: executing program 1 (id=3199):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2401)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x8, 0x0, 0x9, 0x0})

4m47.77902422s ago: executing program 1 (id=3207):
r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e)
close(r0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c00579550fcfc35db4bf8d6fd1f501c42d0e8397a5caf34f043c4931707f652ab4195"])
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$rds(0x15, 0x5, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000080000000e000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x48)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000000)='./bus/file0\x00', 0x0)
renameat2(r5, &(0x7f0000000240)='./bus/file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket(0x1e, 0x4, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c000000040601e4ff0000000000009c0f0000030500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200", 0x3c, 0x0, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)

4m47.77647812s ago: executing program 34 (id=3207):
r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e)
close(r0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c00579550fcfc35db4bf8d6fd1f501c42d0e8397a5caf34f043c4931707f652ab4195"])
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$rds(0x15, 0x5, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000080000000e000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x48)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000000)='./bus/file0\x00', 0x0)
renameat2(r5, &(0x7f0000000240)='./bus/file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket(0x1e, 0x4, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c000000040601e4ff0000000000009c0f0000030500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200", 0x3c, 0x0, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)

3m33.281179926s ago: executing program 3 (id=3965):
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYRES32], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r1}, 0x18)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000001ec0)=[{{&(0x7f0000000800)={0x2, 0x6e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x3f, 0x0, 0x1, 0x7fff, 0x10000, @value=r0}, 0x28)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT')
unshare(0x28000600)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)="f5", 0x1}], 0x1}}], 0x1, 0x40010)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000040)={[{@errors_remount}, {@dioread_lock}, {@nombcache}]}, 0xfe, 0x458, &(0x7f0000000180)="$eJzs3MtvG0UYAPBvnTh9URJKefQFgYKoeCRNaEsPXIpA4gASEhyKOJk0rULdBjVBolUEgUM4okrcEUck/gIulAsCTkhc4Y6QIpQLhZPR2rupSWwnTpy4rX8/adUZz7gz3+5OMp7xJoCeNRwRhyLinoj4LSIGIyJZWWG49s/NpbmJf5bmJpKoVN78K6nW+3tpbiKvmr9vTy1T6WvR7sI7EaVyefJKlh+dvfT+6MzVa89NXSpdmLwweXn89OkTzx8ZODV+siNx7k37evCj6cMHXn37+usTZ6+/+9M3SRZ3rIijU4arZ62xJzvdWJftrUsn/V3sCG1Jx2h6uYrV8T8YfbFruWwwXvm0q50DtlSlUqjsaF48X2ls5/LbgTtYYhBDj8p/0aeff/NjG6Ydt43FM7G8jnEzO2ol/VHI6hS3sP3hiDg7/++X6RFbtA4BAFDvxpmIeLbR/K8QD9bVuzfbGxqKiPsiYl9E3B8R+yPigYhq3Yci4uE221+5Q7J6/lMZ3FBg65TO/17M9rb+P//LZ38x1Jfl9lbjLybnp8qTx7NzciyKO9L8WIs2vn/518+bldXP/9IjbT+fC2b9+LN/xQLduVKxtJmY6y1+UtsAWB1/Evk2Tjo/PhARB9v8v/PPGFNPf324WZ2142+hA/tMla8inqpd//lYEX8uabo/OfbCqfGTozujPHl8NL8rVvv5l4U3mrW/qfg7YPFGJXY3vP+X4x9KdkbMXL12sbpfO9N+Gwu/f9b0M83G7v/Z0kDyVjU9kL32YWl29spYxEDy2urXx2+9N8/n9dP7/9jRxuN/X9w6E4ciIr2Jj0TEIxHxaNb3xyLi8Yg42iL+H1964r3242+xKt9Bafzn1rr+UX/920/0Xfzh2/bjz6XX/0Q1dSx7Jb3+a8W13g5u5twBAADAnaJQ/Q58UhhZThcKIyO17/Dvj92F8vTM7DPnpz+4fK72XfmhKBbyla7BuvXQsWxtOM+P1+eTiPls3fiLvl3V8pGJ6XK764lAZ+1pMv5Tf7R6gAe4O3heC3qX8Q+9y/iH3mX8Q+8y/qF3NRr/H3ehH8D2W+P3/67t6gew/cz/oXcZ/9C7jH/oSU2fjS9s6pF/iS4lvhvY3N9qWH8iCrdJyHdNohgNi/rX/ccsNpBIImJHw6Ju/2QCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojP8CAAD//yoh3rU=")
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0), 0x100000000000022d)
io_uring_enter(0xffffffffffffffff, 0x170e, 0x83a0, 0x31, &(0x7f00000000c0)={[0x2]}, 0x8)
sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461"], 0xc4}}, 0x0)

3m33.054073745s ago: executing program 5 (id=3970):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='kfree\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile(r2, r2, 0x0, 0x40000f63c)

3m32.603679724s ago: executing program 3 (id=3972):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x3, 0x2, 0x2, 0x4000020})
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/140, 0x8c}], 0x1}, 0x4}], 0x1, 0x10123, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r1}, 0x18)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20)

3m32.144349813s ago: executing program 5 (id=3974):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x3af4701e)
ioctl$FS_IOC_RESVSP(r3, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f00000077c0), 0x8000000000001ac, 0x2140, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
socket$key(0xf, 0x3, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000010001307fefffdff15fcdbdf25fe8000000000000000000000000018bb20010000000000000000000000000001000000004e1effff0a0000006c000000c7dc9f71affabd11b1b8ae95a7f4dd22a5c39e95086c3aff2bb70106b997d903e21793951d4185194cb5393382090675fe16d60972cd26259ae565bfec5c9b6c2d8dcb2a06698664841355f9cb0a3326c0ade2c28e72042dcc02de969d68dccbf5f2319d21b0842379b59c68d5257fe87e1cb68ed185f4040c6669b73eeecdef1b1aec8420a1b749f38863f67472ff36e720c8d6737a4fc3f8bc23f8faf5d3f8073970ad97514c625181689042581f203b4efe697e58", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/292], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000))

3m32.065467127s ago: executing program 3 (id=3975):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000800), 0x0, 0x480e0)
setsockopt$sock_int(r0, 0x1, 0x2c, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442)
sendto$inet(r0, &(0x7f0000000900)="173aba0894f2dcb8ad3fb06e63ef64ca90366cd0e1de7a1515cc42633dec7ff66275b9ff9a97d41ca60d0eee764665a052a3ec94a22c9572b4b5c0c5830731f9dbdb837d2bfcc1a004dff5bf325143aa80bf716d4b44bdcd0b2e1deb0d67821a60bf9c4a10e90da960fc298f2b55cf4838d3f8f11c7960d670cc6141b1edc57d998135", 0x83, 0x14008090, 0x0, 0x0)

3m31.178281134s ago: executing program 5 (id=3982):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0, 0x0, 0x6}, 0x18)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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")
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r3, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xa2, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x17, 0x16, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ldst={0x1, 0x1, 0x3, 0x7, 0x5, 0xfffffffffffffff0, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x817}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x34, &(0x7f0000000800)=""/52, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1c, r4, 0x8, &(0x7f0000000840)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xe, 0x3, 0x8000}, 0x10, r5, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000c00)=[{0x1, 0x3, 0xb, 0x7}, {0x0, 0x5, 0xb, 0xb}, {0x5, 0x4, 0x5, 0xc}, {0x3, 0x5, 0xe, 0xa}, {0x1, 0x3, 0xa, 0x9}, {0x2, 0x5, 0xd, 0x6}, {0x1, 0x1, 0x3, 0x7}, {0x4, 0x2, 0xa, 0x5}], 0x10, 0x1000}, 0x94)
copy_file_range(r4, 0x0, r4, &(0x7f00000004c0)=0x100, 0x9, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r2, 0x0, 0xbf5, 0x2000402)

3m30.859557817s ago: executing program 5 (id=3990):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)

3m30.791773971s ago: executing program 3 (id=3991):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x10000800)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000000))
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r5, 0x0, 0x9)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r6 = getpid()
rt_tgsigqueueinfo(r6, 0x0, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x3})
close(0xffffffffffffffff)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r7, 0x10000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r8}, 0x38)
recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
syz_usbip_server_init(0x6)
syz_usbip_server_init(0x5)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x40, 0x0, 0x8, 0xfd, @time={0x5, 0xe5e0}, {0x0, 0x7}, {}, @quote={{0x0, 0x6}, 0x0, &(0x7f0000000040)={0x3d, 0xd8, 0x9, 0x39, @tick=0xff, {0x4, 0x9}, {0x7, 0x8}, @time=@time={0x8, 0x8}}}}], 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)

3m29.764475784s ago: executing program 5 (id=4001):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0xea)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (fail_nth: 3)

3m29.343359372s ago: executing program 5 (id=4003):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000800), 0x0, 0x480e0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000600)=0x4dfb, 0x4)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b511c"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442)
sendto$inet(r0, &(0x7f0000000900)="173aba0894f2dcb8ad3fb06e63ef64ca90366cd0e1de7a1515cc42633dec7ff66275b9ff9a97d41ca60d0eee764665a052a3ec94a22c9572b4b5c0c5830731f9dbdb837d2bfcc1a004dff5bf325143aa80bf716d4b44bdcd0b2e1deb0d67821a60bf9c4a10e90da960fc298f2b55cf4838d3f8f11c7960d670cc6141b1edc57d998135", 0x83, 0x14008090, 0x0, 0x0)

3m28.766769516s ago: executing program 3 (id=4013):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x37, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
mkdir(&(0x7f0000001a80)='./file0\x00', 0xea)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000002600)={&(0x7f0000002400)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="10000000400000a0b678ddb1ec480f60"], 0x10}, 0x4080)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
accept4$unix(r1, &(0x7f0000000240), &(0x7f00000004c0)=0x6e, 0x800)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

3m28.499562517s ago: executing program 3 (id=4014):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000380)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xd4, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/power/pm_test', 0x2300, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0xffffffff, 0x2, 0x10000, r2, 0x98d9, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0xd, @void, @value, @value=r4}, 0x50)
r5 = syz_io_uring_setup(0x2cea, &(0x7f0000000180)={0x0, 0x7a71, 0x40, 0x0, 0x385}, &(0x7f0000000080), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000280)={0x80, 0x44, '\x00', 0x1000000}, 0x1)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r10 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000f00)={{r10}, "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"})
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r11, 0x0, 0xfffffffffffffff4}, 0x18)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m14.030916898s ago: executing program 35 (id=4003):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000800), 0x0, 0x480e0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000600)=0x4dfb, 0x4)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b511c"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442)
sendto$inet(r0, &(0x7f0000000900)="173aba0894f2dcb8ad3fb06e63ef64ca90366cd0e1de7a1515cc42633dec7ff66275b9ff9a97d41ca60d0eee764665a052a3ec94a22c9572b4b5c0c5830731f9dbdb837d2bfcc1a004dff5bf325143aa80bf716d4b44bdcd0b2e1deb0d67821a60bf9c4a10e90da960fc298f2b55cf4838d3f8f11c7960d670cc6141b1edc57d998135", 0x83, 0x14008090, 0x0, 0x0)

3m13.413849974s ago: executing program 36 (id=4014):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000380)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xd4, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/power/pm_test', 0x2300, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0xffffffff, 0x2, 0x10000, r2, 0x98d9, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0xd, @void, @value, @value=r4}, 0x50)
r5 = syz_io_uring_setup(0x2cea, &(0x7f0000000180)={0x0, 0x7a71, 0x40, 0x0, 0x385}, &(0x7f0000000080), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000280)={0x80, 0x44, '\x00', 0x1000000}, 0x1)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r10 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000f00)={{r10}, "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"})
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r11, 0x0, 0xfffffffffffffff4}, 0x18)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m4.499357428s ago: executing program 7 (id=5910):
syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000001c0)={0x0, 0x0, 0xfffffff9})
ioctl$MON_IOCX_GETX(r0, 0x80089203, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4)

1m3.64346787s ago: executing program 7 (id=5932):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={<r7=>0xffffffffffffffff})
close_range(r7, 0xffffffffffffffff, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0xfffffffc, 0x2, 0x1, 0x200de}, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x0, 0x9, 0x2000078a, 0x9, 0x2, 0x10cb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x9)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffff8, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2020000, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt(r10, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8)

1m3.133432319s ago: executing program 7 (id=5935):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000d00)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty=0x1000000, @rand_addr=0x64010102}, {{0x0, 0x8035, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc1}}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x4008040)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07006d644ec0065b0c433fdf082844aa0000048c", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00')
statx(r4, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000080))
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xcd}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18)
socket$rxrpc(0x21, 0x2, 0xa)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1m3.10273752s ago: executing program 7 (id=5936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0)
cachestat(r2, &(0x7f0000000240)={0x3, 0x2}, &(0x7f000009de80), 0x0) (fail_nth: 8)

1m2.743864373s ago: executing program 7 (id=5940):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/../file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0xea)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
vmsplice(r4, &(0x7f00000004c0)=[{&(0x7f00000008c0)="ff", 0x1}], 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x30000, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7040010000000f00000008000300", @ANYRES32=r8, @ANYBLOB="05002f"], 0x24}}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000340)='kmem_cache_free\x00', r10}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
ioprio_get$uid(0x3, 0xffffffffffffffff)
io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x65d7, r9, &(0x7f0000000240)="786cb4ca2d061b0e71a92e4939f14eb27afb139fbbc67e751d41e596d23700263626b25e598e3ba84fbab481d6f7922f714ab495cc61f9d7ebccf8d74f3e22095951a44c263a795454fd396dd811", 0x4e, 0xd, 0x0, 0x1, r1}, &(0x7f0000000480))
sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0x155}], 0x1, &(0x7f0000000680)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}, 0x0)
write$tun(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="000008000100000000003d0000004800004000000000008490783fffffffac1414aa860c000000030506f0d416b30000fffe740a750def01fe656a316f38ee637d8f2cb3bc0a22492498e36cd5fccdb1f892680005d17d19c039310eb48e48488180067bfbd1cf90ac41f60b5874df9c3bf798df6e24781847645497326a847ec027e3028c752e7736c806f03a7f3af2a44dd582000000000000009b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="840000049078001c050a00"/20], 0x4e)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)

1m2.523026662s ago: executing program 7 (id=5944):
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x33}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x50}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r2=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f00000005c0), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0xc3, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r7=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x1b0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000800)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)

47.525960235s ago: executing program 37 (id=5944):
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x33}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x50}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r2=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f00000005c0), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0xc3, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r7=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x1b0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000800)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)

26.171140283s ago: executing program 0 (id=6423):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xc3, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)

25.72748551s ago: executing program 0 (id=6429):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000340)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000001540)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="fc", 0x1}], 0x1}}], 0x1, 0x2404c0c0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00')
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES64=r0, @ANYBLOB="4631e29a377ea65a7fca57d2c8427a0e3bc5ee8d4e5df038235ee765d67b86bbed57b238d5fb217a8077d2"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
fsync(0xffffffffffffffff)

25.7272002s ago: executing program 0 (id=6430):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
fsync(0xffffffffffffffff) (fail_nth: 3)

25.681684512s ago: executing program 0 (id=6431):
mkdir(&(0x7f00000001c0)='./file1\x00', 0x110)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x20, 0x0, 0x5, 0x0, 0x6, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x401, 0x204, 0x1, 0x7, 0x0, 0x103, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9, 0x0, r1}, &(0x7f0000000000), 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x800000000006}, 0x18)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r5, 0x0)
mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
socket$can_raw(0x1d, 0x3, 0x1)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r7=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r7}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
restart_syscall()

24.722724007s ago: executing program 0 (id=6439):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000687c001a1c26e0f44e9ad96426593f7b23ced29a4e6a838aa9b4e87ec7d4f738fa334d61aeab0ed90191fa8a4b120fd344c958a7faff3781bfe513890b6f39d1141da5a77fb0505b3dc88978d22b87160d50aa9c04147423a0d3a1e3d5e6462856dc41237ff1d84e5995ca10a88c86c1d8470686aa9f754056da75c5f2310d5179afb5d2c62506c540", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xd, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000ecff000000000000080018000000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008100180000000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0xea)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x3812091, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff0000ff00b7080000000023007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r0, @ANYBLOB="0000000000000000b70500000000000085000000a50000e5170133222020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18)
r4 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xc5fc, 0x40, 0x6, 0x4})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000480), 0x66)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
unlink(&(0x7f0000000140)='./file0\x00')
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2719, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d6, 0x1, @perf_bp={&(0x7f0000000300), 0x9}, 0x100b28, 0x6, 0x82, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$netlink(0x10, 0x3, 0xe)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)

24.628947351s ago: executing program 0 (id=6443):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2, 0x9}, 0x8)

12.648680383s ago: executing program 9 (id=6555):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100004, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}})

12.492973589s ago: executing program 9 (id=6559):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
getrandom(0x0, 0x0, 0x0)

12.407573342s ago: executing program 9 (id=6561):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000007", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x40004)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socket$rds(0x15, 0x5, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000780))
r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r8 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r8, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r8)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628)
process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="854b", 0x2}], 0x20, 0x14, 0x0)

11.713220667s ago: executing program 9 (id=6565):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0, 0x0, 0x6}, 0x18)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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")
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32)
r5 = fcntl$dupfd(r3, 0x0, r2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r3, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0xa2, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f0000000a00), 0x0, 0x0, 0x27, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x17, 0x16, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ldst={0x1, 0x1, 0x3, 0x7, 0x5, 0xfffffffffffffff0, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x817}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x34, &(0x7f0000000800)=""/52, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1c, r4, 0x8, &(0x7f0000000840)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xe, 0x3, 0x8000}, 0x10, r6, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000c00)=[{0x1, 0x3, 0xb, 0x7}, {0x0, 0x5, 0xb, 0xb}, {0x5, 0x4, 0x5, 0xc}, {0x3, 0x5, 0xe, 0xa}, {0x1, 0x3, 0xa, 0x9}, {0x2, 0x5, 0xd, 0x6}, {0x1, 0x1, 0x3, 0x7}, {0x4, 0x2, 0xa, 0x5}], 0x10, 0x1000}, 0x94)
copy_file_range(r4, 0x0, r4, &(0x7f00000004c0)=0x100, 0x9, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r2, 0x0, 0xbf5, 0x2000402)

11.348271241s ago: executing program 9 (id=6567):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0xea)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (fail_nth: 4)

11.121813299s ago: executing program 9 (id=6573):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0, 0x0, 0x6}, 0x18)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==")
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32)
r5 = fcntl$dupfd(r3, 0x0, r2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r3, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0xa2, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x17, 0x16, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ldst={0x1, 0x1, 0x3, 0x7, 0x5, 0xfffffffffffffff0, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x817}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x34, &(0x7f0000000800)=""/52, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1c, r4, 0x8, &(0x7f0000000840)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xe, 0x3, 0x8000}, 0x10, r6, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000c00)=[{0x1, 0x3, 0xb, 0x7}, {0x0, 0x5, 0xb, 0xb}, {0x5, 0x4, 0x5, 0xc}, {0x3, 0x5, 0xe, 0xa}, {0x1, 0x3, 0xa, 0x9}, {0x2, 0x5, 0xd, 0x6}, {0x1, 0x1, 0x3, 0x7}, {0x4, 0x2, 0xa, 0x5}], 0x10, 0x1000}, 0x94)
copy_file_range(r4, 0x0, r4, &(0x7f00000004c0)=0x100, 0x9, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r2, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff})

9.603276845s ago: executing program 38 (id=6443):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2, 0x9}, 0x8)

2.791911647s ago: executing program 6 (id=6652):
sched_setscheduler(0x0, 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008200"/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r5 = socket(0xa, 0x80801, 0x100)
getpeername$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000009006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r8}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000340)='system_u:object_r:bsdpty_device_t:s0\x00', 0x25, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, 0x0, 0x0)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdc00, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

2.737224059s ago: executing program 6 (id=6653):
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000700)='.\x00', 0x0, 0x0, &(0x7f00000000c0)=ANY=[])
syz_io_uring_setup(0x403e, &(0x7f00000000c0)={0x0, 0x5e98, 0x1000, 0x2, 0x2e6, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18030000100a0000000000000000000065000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c)
listen(r2, 0x5)
accept4(r2, &(0x7f0000000240)=@x25, 0x0, 0x80800)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c)

2.038138194s ago: executing program 8 (id=6661):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000840), &(0x7f0000000340)=r1}, 0x20)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00\b\x00'/28], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000)
unshare(0x400)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syslog(0x2, &(0x7f0000000040)=""/10, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x64, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x80, 0xf, 0xe8, 0x8, 0x57c, 0x2200, 0xefd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x160, 0x0, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0x88, 0x68, 0x2b, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x400, 0x3}}]}}]}}]}}, 0x0)

1.831409262s ago: executing program 6 (id=6667):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00'}, 0x18)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0)

1.790590784s ago: executing program 6 (id=6669):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000007", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x40004)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socket$rds(0x15, 0x5, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000780))
r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r8 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r8, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r8)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628)
process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="854b", 0x2}], 0x20, 0x14, 0x0)

1.524233374s ago: executing program 2 (id=6672):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x0, 0x90, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x0, 0x0, 0xb, 0x67a}})

1.447818796s ago: executing program 2 (id=6673):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000d8000001", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000080"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1.447271767s ago: executing program 8 (id=6674):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000007", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0x10)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x40004)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socket$rds(0x15, 0x5, 0x0)
r8 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000780))
r9 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r10 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r10, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r10)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r9, 0x6628)
process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="854b", 0x2}], 0x20, 0x14, 0x0)

1.390472209s ago: executing program 2 (id=6675):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x7}, 0x94)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100001042abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="58000500000000001400350076657468305f746f5f6272696467650008000a00", @ANYRES32=r3, @ANYBLOB="269a4f49126f62acb0ba31b1fbbeaf52da6c70f21e8945568d1e3059b0ade41e6d37fa184086cfe22efc734108f2885b201da200c753df932f9773409ae4f6504a2a03f6c3ed5ca8b6d58db1ccb7dbf1b59a808930b46a50adf50cd642d8f3565299c06d2d49e8ebe7f93d8c5b8b4f30a436dd4f22d600644e0eebd4849c92859271d303ddba8459f01b030520c55ba01350feb24b7e9cd7917c2d37810c94a69da7b4ab84ade7a50c548c1f38cf"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x80)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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")
mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0)
umount2(0x0, 0x9)

1.329283361s ago: executing program 6 (id=6676):
r0 = getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0xa000200)
semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x40, 0x1800}], 0x1, 0x0)
unshare(0x20060400)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='xprtrdma_frwr_dereg\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.059364501s ago: executing program 2 (id=6678):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000800000000001c140000fe0000010000000008000100001001"], 0x24}}, 0x0)

998.854443ms ago: executing program 2 (id=6680):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100004, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}})

986.895223ms ago: executing program 4 (id=6681):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0, 0x0, 0x6}, 0x18)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==")
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32)
r5 = fcntl$dupfd(r3, 0x0, r2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r3, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0xa2, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x17, 0x16, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ldst={0x1, 0x1, 0x3, 0x7, 0x5, 0xfffffffffffffff0, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x817}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x34, &(0x7f0000000800)=""/52, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1c, r4, 0x8, &(0x7f0000000840)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xe, 0x3, 0x8000}, 0x10, r6, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000c00)=[{0x1, 0x3, 0xb, 0x7}, {0x0, 0x5, 0xb, 0xb}, {0x5, 0x4, 0x5, 0xc}, {0x3, 0x5, 0xe, 0xa}, {0x1, 0x3, 0xa, 0x9}, {0x2, 0x5, 0xd, 0x6}, {0x1, 0x1, 0x3, 0x7}, {0x4, 0x2, 0xa, 0x5}], 0x10, 0x1000}, 0x94)
copy_file_range(r4, 0x0, r4, &(0x7f00000004c0)=0x100, 0x9, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r2, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff})

903.267297ms ago: executing program 8 (id=6682):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100004, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
socket$packet(0x11, 0x3, 0x300)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

829.988459ms ago: executing program 2 (id=6683):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xffffffffffff8001}, 0x18)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")

710.820504ms ago: executing program 8 (id=6684):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000840), &(0x7f0000000340)=r1}, 0x20)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00\b\x00'/28], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000)
unshare(0x400)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syslog(0x2, &(0x7f0000000040)=""/10, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x64, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x80, 0xf, 0xe8, 0x8, 0x57c, 0x2200, 0xefd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x160, 0x0, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0x88, 0x68, 0x2b, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x400, 0x3}}]}}]}}]}}, 0x0)

686.383054ms ago: executing program 4 (id=6685):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000d8000001118006b0", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000080"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

574.367349ms ago: executing program 4 (id=6686):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000001008500000001000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)

407.646604ms ago: executing program 4 (id=6687):
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109301)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0)
shutdown(r0, 0x1)
recvfrom(r0, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_complete\x00', r1, 0x0, 0xbe7c}, 0x18)

181.029533ms ago: executing program 4 (id=6688):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x7}, 0x94)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100001042abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="58000500000000001400350076657468305f746f5f6272696467650008000a00", @ANYRES32=r3, @ANYBLOB="269a4f49126f62acb0ba31b1fbbeaf52da6c70f21e8945568d1e3059b0ade41e6d37fa184086cfe22efc734108f2885b201da200c753df932f9773409ae4f6504a2a03f6c3ed5ca8b6d58db1ccb7dbf1b59a808930b46a50adf50cd642d8f3565299c06d2d49e8ebe7f93d8c5b8b4f30a436dd4f22d600644e0eebd4849c92859271d303ddba8459f01b030520c55ba01350feb24b7e9cd7917c2d37810c94a69da7b4ab84ade7a50c548c1f38cf"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x80)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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")
mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0)
umount2(0x0, 0x9)

31.994819ms ago: executing program 4 (id=6689):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000007", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x40004)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socket$rds(0x15, 0x5, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000780))
r8 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r9 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r9, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r9)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628)
process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="854b", 0x2}], 0x20, 0x14, 0x0)

30.818218ms ago: executing program 6 (id=6690):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100004, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
socket$packet(0x11, 0x3, 0x300)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

30.466119ms ago: executing program 8 (id=6691):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000800000000001c140000fe0000010000000008000100001001"], 0x24}}, 0x0)

0s ago: executing program 8 (id=6692):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/269], 0x2, 0x6b1, &(0x7f0000001100)="$eJzs3V1vG1kdx/HfOI7jZqFaAaqqqg+nLSulorhjZ5sqKhJrxuNkwPZYMw5qJKRV2Sarqk4X2iLR3Cy54UFa3gDihgu44EUgcb3vghsE0grukJYLr+bJseOnuuu2u9vvJ9r1eM5/zvnPjOu/JvEcCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHJqtl221PBaO3fMZE4t8Jvp8v97o+1Jb8u6lixcmzmuZEX/qVjU2WTV2W8dN5+J/ndF55Nn51WMHoo6fOPMm7e/mc9l209J+Hlo3g4fPz18cLfb3Xv0DLFLmrv7V0m5bOlUek7GBG25LS/0vWZ1yzVe6JvNjQ37xnY9NHWv4Ya7YcdtGidwcx0/MGvONVPe3Fw3bmnX32lt1aoNN1t567sV294wP1xJTrSkUuhse42G19qKY6LmKOaW+egnSYBbbRqzf7+7tz5rT6Kg8rMEVWYFVexKpVyuVMobNzdv3rLt/OCKnKS8HbHsPo1ssvAXLb5kFvPGDSxALqr//7CkhopqaUd3ZMb+OKopkK/mhPZUVv/fuuFOHXew/mdV/qz0/bT5nOL6fzF5dnFS/Z+Qi5GJNxjXYk1YP9/PcpyR0WM91aEe6K666mpPjxbQt5G5tJBeXsLPlly15CmUL09NVbWlP39d6RqjTW1oQ7be1bbqCmVUl6eGXIXaVaiO3PgV5SiQq6o68hXIaE2OrsmorE1tal1Grkrala8dtbSlmqr6X6/X29f9+LivT8lRWVB5QsDKYFBlSk/DxfyPyur/Tz9MXqd23j6B+v96SV4HK8nDx9NigC+AXnr9Pyg3e7NLLy4jAAAAAACwaFb823cr/tv9BUk91b2Ga7/qtAAAAAAAwAJZ6q3ovKzo+l/SBVlc/wMAAAAA8FVjxffYWZJW4w/1W8d3Qj3LLwGWXkKKAAAAAADgc4rv/L9YkHrxpBWXZM11/Q8AAAAAAL4Efjswx34+m2O3l/1ZPycpbK9Yf/vPioJl66h959vWQTVqqR6kMZ+e7LFTP2edTifqjR8KkuJnjnveOp9MjplOgtmfd/CT/Vlz/VvBiQQKS4MdTEjAikbeyKfP9JEuJ5tcTueZv3eYU9ySjLJa9xpuyfEbt8uqVk/nOu6dzi8e3v+lFPQ/6bB/v7tXeu+D7r04l6No1dFB1OmHQ+nkxh+M41yexPMtxPdcjNvjU6pnQ/6u1Vy14nHtbP+XVD3IDQ407QQcj/lrXVH8qY0rq0ns6mF/xv1o/4vR/pdL8Skb2vtg2TrOonxyz8ediAlZFOMsriYxV9euqvLPZLl/FnJW8TtLUqU0eg6GsqgMZjH7WFj/HTkWA1nED1nLwLFYj7L4e9TRhCzW58ti5IwAwKuyrwuK34UuKJ7EvF+FimndzcpD9qb2XHVndnV/Z7i6P/lDrxdvsCTl079NTB2lqOgdfc2K61Ah2aX8uTHv6HZaV4qa8I5uf47qFo311+PvQErTHsni016vd7scj/v7E1X1T0PDjYwbNipL0SG88eTgZ/EE+JH3997fe1iprG/Yb9v2zYqW491IH5ZE7QEAjJj9HTszI6y3dTmJuHzv328lS0MV7xv9jxSU9J4+UFf3dD37CoFL43tdHfgYwvXkqlUDV63mzJu34++lG44t6/rEq7q4lg7EVvqxy8o2Ga7Ux7HrL/gsAADwcl2ZUYfH1//iUP2/rrUkYu3c2Ovu4VqeXh33L+knxZZnJ//Ooo8GAACvBzf4xFrt/MYKAq/9bnlzs1ztbLsm8J0fmcCrbbnGa3XcwNmutrZc0w78ju/4DdMOtOLV3NCEO+22H3RM3Q9M2w+9O/E3v5v0q99Dt1ltdTwnbDfcaugax291qk7H1LzQMe2dHzS8cNsN4o3Dtut4dc+pdjy/ZUJ/J3DckjGh6w4EejW31fHqXrTYMu3Aa1aDXfNjv7HTdE3NDZ3Aa3f8pMNsLK9V94Nm3G0p3xv3eQEAAF47j58ePrjb7e49OrlwKro0T9YcaULM6EJBj59GV+XRmnzaxBxBAAB8wRwX8Dk2Kr7AhAAAAAAAAAAAAAAAAAAAAAAAwIjZt/TNubA87mZBqb/m56fTNfqVjm8xHOnH0qITm2chN+9W2S0Rhw8+nhRT0N1T/TXZ4R+MOXppO/ivr0lvxGuUrMkvfqxTU07ui1j43n5yRCfGRI1jm1b65yL/HP8cCpoZ8/AvE5p6vV5v+hArw8ewMLSDuWmD5iU9Ksx9CgojL1EAX1WfBQAA//843TOC")
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c42)
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000ebffffff00050000000900010073797a30000000002c000000030a01010000000000800000050000000900010073797a30000000000900030073797a30000000004c000000060a010400"], 0xc0}}, 0x0)
syz_clone3(&(0x7f0000001f40)={0x200280, &(0x7f0000001c80), 0x0, 0x0, {0x2e}, &(0x7f0000001d40)=""/243, 0xf3, 0x0, 0x0}, 0x58)

kernel console output (not intermixed with test programs):

[  520.529072][T23287] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  520.540631][T23287] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  520.549400][T23287] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  520.663330][T23287] 8021q: adding VLAN 0 to HW filter on device bond0
[  520.674315][T23287] 8021q: adding VLAN 0 to HW filter on device team0
[  520.676572][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.676599][ T6123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  520.681810][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.681847][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[  520.747891][T23287] 8021q: adding VLAN 0 to HW filter on device batadv0
[  520.839829][T23401] netlink: 'syz.8.5902': attribute type 6 has an invalid length.
[  520.850084][T23287] veth0_vlan: entered promiscuous mode
[  520.852692][T23287] veth1_vlan: entered promiscuous mode
[  520.873398][T23287] veth0_macvtap: entered promiscuous mode
[  520.874785][T23287] veth1_macvtap: entered promiscuous mode
[  520.878961][T23287] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.882563][T23287] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.888753][   T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.920834][   T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.920872][   T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.920906][   T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  521.057363][T23410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  521.065974][T23410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.187275][T23418] lo speed is unknown, defaulting to 1000
[  521.319951][T23422] program syz.6.5908 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  521.545356][T23433] netlink: 19 bytes leftover after parsing attributes in process `syz.6.5911'.
[  521.571665][T23435] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[  521.578186][T23435] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  521.586410][T23435] vhci_hcd vhci_hcd.0: Device attached
[  521.593941][T23435] vhci_hcd vhci_hcd.0: port 0 already used
[  521.600201][T23437] vhci_hcd: connection closed
[  521.600373][   T31] vhci_hcd: stop threads
[  521.609402][   T31] vhci_hcd: release socket
[  521.613838][   T31] vhci_hcd: disconnect device
[  521.770683][T23454] siw: device registration error -23
[  521.940680][T23471] 9pnet_fd: Insufficient options for proto=fd
[  521.958161][T23473] FAULT_INJECTION: forcing a failure.
[  521.958161][T23473] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  521.971285][T23473] CPU: 0 UID: 0 PID: 23473 Comm: syz.9.5924 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  521.971311][T23473] Tainted: [W]=WARN
[  521.971316][T23473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  521.971327][T23473] Call Trace:
[  521.971332][T23473]  <TASK>
[  521.971339][T23473]  __dump_stack+0x1d/0x30
[  521.971410][T23473]  dump_stack_lvl+0xe8/0x140
[  521.971426][T23473]  dump_stack+0x15/0x1b
[  521.971441][T23473]  should_fail_ex+0x265/0x280
[  521.971526][T23473]  should_fail+0xb/0x20
[  521.971609][T23473]  should_fail_usercopy+0x1a/0x20
[  521.971626][T23473]  _copy_from_user+0x1c/0xb0
[  521.971674][T23473]  ___sys_sendmsg+0xc1/0x1d0
[  521.971701][T23473]  __x64_sys_sendmsg+0xd4/0x160
[  521.971720][T23473]  x64_sys_call+0x191e/0x3000
[  521.971738][T23473]  do_syscall_64+0xd2/0x200
[  521.971756][T23473]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  521.971828][T23473]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  521.971856][T23473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.971874][T23473] RIP: 0033:0x7fa7378bf749
[  521.971886][T23473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  521.971909][T23473] RSP: 002b:00007fa73631f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  521.971925][T23473] RAX: ffffffffffffffda RBX: 00007fa737b15fa0 RCX: 00007fa7378bf749
[  521.971936][T23473] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  521.971976][T23473] RBP: 00007fa73631f090 R08: 0000000000000000 R09: 0000000000000000
[  521.971986][T23473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  521.971997][T23473] R13: 00007fa737b16038 R14: 00007fa737b15fa0 R15: 00007ffcb3581ca8
[  521.972012][T23473]  </TASK>
[  522.205325][T23483] lo speed is unknown, defaulting to 1000
[  522.223447][T23481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.240328][T23481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  522.253220][T23486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5928'.
[  522.285385][T23489] siw: device registration error -23
[  522.528024][T23503] lo speed is unknown, defaulting to 1000
[  522.883194][T23513] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5935'.
[  522.928725][T23516] FAULT_INJECTION: forcing a failure.
[  522.928725][T23516] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  522.942035][T23516] CPU: 0 UID: 0 PID: 23516 Comm: syz.7.5936 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  522.942112][T23516] Tainted: [W]=WARN
[  522.942118][T23516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  522.942128][T23516] Call Trace:
[  522.942136][T23516]  <TASK>
[  522.942144][T23516]  __dump_stack+0x1d/0x30
[  522.942164][T23516]  dump_stack_lvl+0xe8/0x140
[  522.942181][T23516]  dump_stack+0x15/0x1b
[  522.942195][T23516]  should_fail_ex+0x265/0x280
[  522.942284][T23516]  should_fail_alloc_page+0xf2/0x100
[  522.942309][T23516]  __alloc_frozen_pages_noprof+0xff/0x360
[  522.942341][T23516]  alloc_pages_mpol+0xb3/0x260
[  522.942362][T23516]  vma_alloc_folio_noprof+0x1aa/0x300
[  522.942440][T23516]  handle_mm_fault+0xec2/0x2be0
[  522.942464][T23516]  ? mt_find+0x21b/0x330
[  522.942491][T23516]  do_user_addr_fault+0x3fe/0x1080
[  522.942517][T23516]  exc_page_fault+0x62/0xa0
[  522.942625][T23516]  asm_exc_page_fault+0x26/0x30
[  522.942645][T23516] RIP: 0010:rep_movs_alternative+0x33/0x90
[  522.942673][T23516] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d f9 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[  522.942743][T23516] RSP: 0018:ffffc9000b38bdd0 EFLAGS: 00050202
[  522.942824][T23516] RAX: 0000000000000000 RBX: 0000000000000028 RCX: 0000000000000028
[  522.942836][T23516] RDX: 0000000000000000 RSI: ffffc9000b38be28 RDI: 000020000009de80
[  522.942848][T23516] RBP: ffff8881045b9e41 R08: 000000000000091a R09: 0000000000000000
[  522.942859][T23516] R10: 0001c9000b38be28 R11: 0001c9000b38be4f R12: 000020000009dea8
[  522.942870][T23516] R13: 00007ffffffff000 R14: 000020000009de80 R15: ffffc9000b38be28
[  522.942956][T23516]  _copy_to_user+0x7c/0xa0
[  522.942978][T23516]  __se_sys_cachestat+0x5af/0x630
[  522.943002][T23516]  __x64_sys_cachestat+0x55/0x70
[  522.943068][T23516]  x64_sys_call+0x2ca6/0x3000
[  522.943090][T23516]  do_syscall_64+0xd2/0x200
[  522.943185][T23516]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  522.943278][T23516]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  522.943310][T23516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.943333][T23516] RIP: 0033:0x7f82ae19f749
[  522.943349][T23516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  522.943393][T23516] RSP: 002b:00007f82acbff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3
[  522.943412][T23516] RAX: ffffffffffffffda RBX: 00007f82ae3f5fa0 RCX: 00007f82ae19f749
[  522.943424][T23516] RDX: 000020000009de80 RSI: 0000200000000240 RDI: 0000000000000006
[  522.943437][T23516] RBP: 00007f82acbff090 R08: 0000000000000000 R09: 0000000000000000
[  522.943452][T23516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  522.943464][T23516] R13: 00007f82ae3f6038 R14: 00007f82ae3f5fa0 R15: 00007fffb7161f28
[  522.943480][T23516]  </TASK>
[  523.280701][T23524] syz.7.5940 uses obsolete (PF_INET,SOCK_PACKET)
[  523.303822][T23526] lo speed is unknown, defaulting to 1000
[  523.590807][T23549] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[  523.597363][T23549] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  523.605532][T23549] vhci_hcd vhci_hcd.0: Device attached
[  523.664190][T23556] vhci_hcd vhci_hcd.0: port 0 already used
[  523.674353][T23551] vhci_hcd: connection closed
[  523.676591][ T6123] vhci_hcd: stop threads
[  523.685577][ T6123] vhci_hcd: release socket
[  523.689976][ T6123] vhci_hcd: disconnect device
[  523.715820][T23559] netlink: 'syz.0.5947': attribute type 1 has an invalid length.
[  523.723590][T23559] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5947'.
[  524.243452][T23571] bridge0: entered promiscuous mode
[  524.251338][T23571] macsec1: entered promiscuous mode
[  524.264636][T23571] bridge0: port 3(macsec1) entered blocking state
[  524.271137][T23571] bridge0: port 3(macsec1) entered disabled state
[  524.297501][T23571] macsec1: entered allmulticast mode
[  524.302833][T23571] bridge0: entered allmulticast mode
[  524.327385][T23571] macsec1: left allmulticast mode
[  524.332522][T23571] bridge0: left allmulticast mode
[  524.352060][T23571] bridge0: left promiscuous mode
[  524.546352][   T29] kauditd_printk_skb: 503 callbacks suppressed
[  524.546364][   T29] audit: type=1326 audit(1763668326.643:20555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.0.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  524.585410][   T29] audit: type=1326 audit(1763668326.683:20556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.0.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  524.609117][   T29] audit: type=1326 audit(1763668326.683:20557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.0.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b9ed5f783 code=0x7ffc0000
[  524.632702][   T29] audit: type=1326 audit(1763668326.683:20558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.0.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b9ed5f783 code=0x7ffc0000
[  524.656152][   T29] audit: type=1326 audit(1763668326.683:20559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.0.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  524.679717][   T29] audit: type=1326 audit(1763668326.683:20560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.0.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  524.703453][   T29] audit: type=1326 audit(1763668326.683:20561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.0.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  524.727082][   T29] audit: type=1326 audit(1763668326.683:20562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.0.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  524.765579][   T29] audit: type=1326 audit(1763668326.763:20563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.0.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  524.789327][   T29] audit: type=1326 audit(1763668326.763:20564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.0.5957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  524.924592][T23602] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9)
[  524.931116][T23602] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  524.939237][T23602] vhci_hcd vhci_hcd.0: Device attached
[  524.946123][T23602] vhci_hcd vhci_hcd.0: port 0 already used
[  524.952641][T23604] vhci_hcd: connection closed
[  524.952802][ T3449] vhci_hcd: stop threads
[  524.961782][ T3449] vhci_hcd: release socket
[  524.966228][ T3449] vhci_hcd: disconnect device
[  525.206928][T23611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.234082][T23611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.726047][T23626] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5973'.
[  525.802494][T23633] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5975'.
[  525.865864][T23636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.885381][T23636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  526.010160][T23640] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[  526.016752][T23640] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  526.024870][T23640] vhci_hcd vhci_hcd.0: Device attached
[  526.062760][T23640] vhci_hcd vhci_hcd.0: port 0 already used
[  526.075799][T23643] vhci_hcd: connection closed
[  526.076070][ T3449] vhci_hcd: stop threads
[  526.085124][ T3449] vhci_hcd: release socket
[  526.089524][ T3449] vhci_hcd: disconnect device
[  526.505776][T23648] netlink: 'syz.0.5978': attribute type 16 has an invalid length.
[  526.513712][T23648] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5978'.
[  526.537833][T23648] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  526.547386][T23648] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  526.665503][T23652] siw: device registration error -23
[  526.746074][T23662] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5986'.
[  526.812782][T23670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5988'.
[  526.951678][T23683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.983512][T23683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.337191][T23691] netlink: 176 bytes leftover after parsing attributes in process `syz.9.5995'.
[  527.451468][T23701] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5999'.
[  527.497662][T23704] xt_CT: You must specify a L4 protocol and not use inversions on it
[  527.560520][T23704] lo speed is unknown, defaulting to 1000
[  528.033159][T23715] team0: Port device veth0_to_bridge added
[  528.113495][T23716] lo speed is unknown, defaulting to 1000
[  528.549027][T23730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  528.568761][T23730] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  528.644734][T23736] bridge0: entered promiscuous mode
[  528.663002][T23736] macsec1: entered promiscuous mode
[  528.674033][T23736] bridge0: port 3(macsec1) entered blocking state
[  528.680543][T23736] bridge0: port 3(macsec1) entered disabled state
[  528.691614][T23736] macsec1: entered allmulticast mode
[  528.696991][T23736] bridge0: entered allmulticast mode
[  528.733679][T23736] macsec1: left allmulticast mode
[  528.738759][T23736] bridge0: left allmulticast mode
[  528.756133][T23736] bridge0: left promiscuous mode
[  529.027307][T23751] xt_CT: You must specify a L4 protocol and not use inversions on it
[  529.101572][T23751] lo speed is unknown, defaulting to 1000
[  529.551643][   T29] kauditd_printk_skb: 484 callbacks suppressed
[  529.551655][   T29] audit: type=1326 audit(1763668331.643:21049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b9ed5f783 code=0x7ffc0000
[  529.551744][   T29] audit: type=1326 audit(1763668331.653:21050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b9ed5f783 code=0x7ffc0000
[  529.551770][   T29] audit: type=1326 audit(1763668331.653:21051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  529.551796][   T29] audit: type=1326 audit(1763668331.653:21052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  529.558090][   T29] audit: type=1326 audit(1763668331.653:21053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  529.558121][   T29] audit: type=1326 audit(1763668331.653:21054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  529.558222][   T29] audit: type=1326 audit(1763668331.653:21055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  529.558245][   T29] audit: type=1326 audit(1763668331.653:21056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  529.679461][   T29] audit: type=1326 audit(1763668331.773:21057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  529.683069][   T29] audit: type=1326 audit(1763668331.783:21058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  529.807828][T23771] lo speed is unknown, defaulting to 1000
[  530.307397][T23779] netlink: 14 bytes leftover after parsing attributes in process `syz.9.6023'.
[  530.341676][T23779] hsr_slave_0: left promiscuous mode
[  530.466746][T23787] loop0: detected capacity change from 0 to 2048
[  530.474197][T23785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  530.502942][T23785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  530.533420][T23787] EXT4-fs mount: 32 callbacks suppressed
[  530.533437][T23787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.591306][T23787] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  530.809387][T23787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  530.855312][T23794] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6027'.
[  530.871198][T23787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.866921][ T6123] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 345: padding at end of block bitmap is not set
[  531.867058][ T6123] EXT4-fs (loop0): Remounting filesystem read-only
[  531.991655][T23287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.139474][T23824] lo speed is unknown, defaulting to 1000
[  532.542435][T23829] lo speed is unknown, defaulting to 1000
[  533.239109][T23851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6044'.
[  533.288826][T23852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.310869][T23852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.550688][T23857] lo speed is unknown, defaulting to 1000
[  534.031794][T23874] xt_CT: You must specify a L4 protocol and not use inversions on it
[  534.094593][T23871] lo speed is unknown, defaulting to 1000
[  534.456516][T23889] bridge0: entered promiscuous mode
[  534.481277][T23889] macsec1: entered promiscuous mode
[  534.497680][T23889] bridge0: port 3(macsec1) entered blocking state
[  534.504216][T23889] bridge0: port 3(macsec1) entered disabled state
[  534.537811][T23889] macsec1: entered allmulticast mode
[  534.543180][T23889] bridge0: entered allmulticast mode
[  534.567015][T23889] macsec1: left allmulticast mode
[  534.572109][T23889] bridge0: left allmulticast mode
[  534.603930][   T29] kauditd_printk_skb: 151 callbacks suppressed
[  534.603943][   T29] audit: type=1326 audit(1763668336.703:21210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23890 comm="syz.0.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  534.639428][T23891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  534.658183][T23889] bridge0: left promiscuous mode
[  534.667701][T23891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  534.719423][   T29] audit: type=1326 audit(1763668336.733:21211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23890 comm="syz.0.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  534.743214][   T29] audit: type=1326 audit(1763668336.733:21212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23890 comm="syz.0.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  534.766819][   T29] audit: type=1326 audit(1763668336.733:21213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23890 comm="syz.0.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  534.790603][   T29] audit: type=1326 audit(1763668336.733:21214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23890 comm="syz.0.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  534.814319][   T29] audit: type=1326 audit(1763668336.733:21215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23890 comm="syz.0.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  534.838001][   T29] audit: type=1326 audit(1763668336.733:21216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23890 comm="syz.0.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  534.861549][   T29] audit: type=1326 audit(1763668336.733:21217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23890 comm="syz.0.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  534.885183][   T29] audit: type=1326 audit(1763668336.733:21218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23890 comm="syz.0.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  534.908694][   T29] audit: type=1326 audit(1763668336.733:21219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23890 comm="syz.0.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  534.950468][T23892] lo speed is unknown, defaulting to 1000
[  536.005375][T23938] lo speed is unknown, defaulting to 1000
[  536.233492][T23942] loop0: detected capacity change from 0 to 512
[  536.245565][T23942] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  536.285758][T23942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  536.429068][T23957] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9)
[  536.435608][T23957] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  536.443733][T23957] vhci_hcd vhci_hcd.0: Device attached
[  536.453896][T23287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.464141][T23957] vhci_hcd vhci_hcd.0: port 0 already used
[  536.479189][T23961] vhci_hcd: connection closed
[  536.479531][  T168] vhci_hcd: stop threads
[  536.488518][  T168] vhci_hcd: release socket
[  536.492972][  T168] vhci_hcd: disconnect device
[  536.518974][T23966] team0: Port device veth0_to_bridge added
[  536.565932][T23966] loop0: detected capacity change from 0 to 4096
[  536.580882][T23966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  536.677967][T23287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.787234][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.834192][T23976] loop0: detected capacity change from 0 to 4096
[  536.860731][T23976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  536.897303][T23287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.988864][T23986] loop0: detected capacity change from 0 to 1024
[  536.998253][T23986] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  536.998279][T23986] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  536.998308][T23986] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  537.001443][T23986] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: inode #5: comm syz.0.6084: unexpected bad inode w/o EXT4_IGET_BAD
[  537.042404][T23986] EXT4-fs (loop0): no journal found
[  537.042420][T23986] EXT4-fs (loop0): can't get journal size
[  537.057617][T23986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  537.080043][T23287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.365941][T24015] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  537.366043][T24015] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  537.366079][T24015] vhci_hcd vhci_hcd.0: Device attached
[  537.379871][T24015] vhci_hcd vhci_hcd.0: port 0 already used
[  537.380331][T24017] vhci_hcd: connection closed
[  537.380567][  T168] vhci_hcd: stop threads
[  537.380576][  T168] vhci_hcd: release socket
[  537.380582][  T168] vhci_hcd: disconnect device
[  537.804715][T24034] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9)
[  537.811250][T24034] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  537.819432][T24034] vhci_hcd vhci_hcd.0: Device attached
[  537.845399][T24034] vhci_hcd vhci_hcd.0: port 0 already used
[  537.854895][T24036] vhci_hcd: connection closed
[  537.855029][ T1644] vhci_hcd: stop threads
[  537.863995][ T1644] vhci_hcd: release socket
[  537.868442][ T1644] vhci_hcd: disconnect device
[  537.992594][T24051] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6101'.
[  538.080286][T24058] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6103'.
[  538.513430][ T3449] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.532747][T24078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.549343][T24078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.595010][ T3449] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.629659][T24081] lo speed is unknown, defaulting to 1000
[  538.683441][ T3449] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.720795][T24081] chnl_net:caif_netlink_parms(): no params data found
[  538.855129][T24097] lo speed is unknown, defaulting to 1000
[  538.955922][ T3449] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.072082][T24081] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.079166][T24081] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.086937][T24081] bridge_slave_0: entered allmulticast mode
[  539.093501][T24081] bridge_slave_0: entered promiscuous mode
[  539.108707][T24081] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.115879][T24081] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.123115][T24081] bridge_slave_1: entered allmulticast mode
[  539.129555][T24081] bridge_slave_1: entered promiscuous mode
[  539.185603][T24081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  539.203692][T24105] lo speed is unknown, defaulting to 1000
[  539.210580][T24081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  539.246984][T24113] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9)
[  539.247507][T24081] team0: Port device team_slave_0 added
[  539.253511][T24113] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  539.253654][T24113] vhci_hcd vhci_hcd.0: Device attached
[  539.262533][ T3449] bridge_slave_1: left allmulticast mode
[  539.278250][ T3449] bridge_slave_1: left promiscuous mode
[  539.284042][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.297072][T24118] loop0: detected capacity change from 0 to 1024
[  539.315381][T24118] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  539.320912][T24113] vhci_hcd vhci_hcd.0: port 0 already used
[  539.325181][T24118] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  539.336769][T24115] vhci_hcd: connection closed
[  539.341248][T24118] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  539.346370][   T31] vhci_hcd: stop threads
[  539.360286][   T31] vhci_hcd: release socket
[  539.362329][ T3449] bridge_slave_0: left promiscuous mode
[  539.364721][   T31] vhci_hcd: disconnect device
[  539.370321][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.385767][T24118] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: inode #5: comm syz.0.6121: unexpected bad inode w/o EXT4_IGET_BAD
[  539.408369][T24118] EXT4-fs (loop0): no journal found
[  539.413628][T24118] EXT4-fs (loop0): can't get journal size
[  539.420454][T24118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  539.449231][T23287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.553652][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  539.563574][ T3449] bond0 (unregistering): (slave 
c
@0Ù): Releasing backup interface
[  539.572719][ T3449] bond0 (unregistering): Released all slaves
[  539.582840][T24081] team0: Port device team_slave_1 added
[  539.601779][   T36] syû: Port: 1 Link DOWN
[  539.608414][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.646249][   T29] kauditd_printk_skb: 309 callbacks suppressed
[  539.646262][   T29] audit: type=1326 audit(1763668341.743:21529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.6.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  539.676464][   T29] audit: type=1326 audit(1763668341.743:21530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.6.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  539.700241][   T29] audit: type=1326 audit(1763668341.743:21531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.6.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  539.723741][   T29] audit: type=1326 audit(1763668341.743:21532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.6.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  539.747431][   T29] audit: type=1326 audit(1763668341.743:21533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.6.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  539.771071][   T29] audit: type=1326 audit(1763668341.743:21534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.6.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  539.794600][   T29] audit: type=1326 audit(1763668341.743:21535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.6.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  539.818244][   T29] audit: type=1326 audit(1763668341.743:21536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.6.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  539.841728][   T29] audit: type=1326 audit(1763668341.743:21537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.6.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  539.845981][T24145] loop0: detected capacity change from 0 to 512
[  539.865308][   T29] audit: type=1326 audit(1763668341.743:21538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.6.6127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  539.906704][T24081] batman_adv: batadv0: Adding interface: batadv_slave_0
[  539.913788][T24081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  539.939874][T24081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  539.952563][T24145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  539.965649][ T3449] tipc: Left network mode
[  539.970323][T24081] batman_adv: batadv0: Adding interface: batadv_slave_1
[  539.977303][T24081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  540.003397][T24081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  540.101261][T24081] hsr_slave_0: entered promiscuous mode
[  540.106483][T24156] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6131'.
[  540.107355][T24081] hsr_slave_1: entered promiscuous mode
[  540.122341][T24081] debugfs: 'hsr0' already exists in 'hsr'
[  540.128073][T24081] Cannot create hsr debugfs directory
[  540.137439][T24153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.141299][T24145] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6128'.
[  540.146861][T24153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.164489][ T3449] hsr_slave_0: left promiscuous mode
[  540.177093][ T3449] hsr_slave_1: left promiscuous mode
[  540.182712][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  540.190140][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  540.197925][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.205395][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  540.215384][ T3449] veth1_macvtap: left promiscuous mode
[  540.220871][ T3449] veth0_macvtap: left promiscuous mode
[  540.226759][ T3449] veth1_vlan: left promiscuous mode
[  540.227108][T23287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  540.232155][ T3449] veth0_vlan: left promiscuous mode
[  540.288336][T24162] siw: device registration error -23
[  540.313041][ T3449] team0 (unregistering): Port device team_slave_1 removed
[  540.322638][ T3449] team0 (unregistering): Port device C removed
[  540.337244][   T31] smc: removing ib device syû
[  540.342692][ T3449] team0 (unregistering): Port device veth0_to_bridge removed
[  540.370477][T24166] netlink: 'syz.6.6134': attribute type 1 has an invalid length.
[  540.378326][T24166] netlink: 244 bytes leftover after parsing attributes in process `syz.6.6134'.
[  540.793520][T24178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.804508][T24178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.168454][T24179] lo speed is unknown, defaulting to 1000
[  541.334043][T24199] siw: device registration error -23
[  541.377315][T24081] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  541.386578][T24081] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  541.395861][T24081] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  541.404294][T24081] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  541.444074][T24081] 8021q: adding VLAN 0 to HW filter on device bond0
[  541.455901][T24081] 8021q: adding VLAN 0 to HW filter on device team0
[  541.473452][T24081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  541.483840][T24081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  541.504879][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.512009][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.521401][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.528504][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.598283][T24221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.617585][T24221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.636402][T24081] 8021q: adding VLAN 0 to HW filter on device batadv0
[  541.714515][T24210] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6145'.
[  541.754072][T24235] bridge0: entered promiscuous mode
[  541.759576][T24235] macsec1: entered promiscuous mode
[  541.766503][T24235] bridge0: port 3(macsec1) entered blocking state
[  541.773048][T24235] bridge0: port 3(macsec1) entered disabled state
[  541.779655][T24235] macsec1: entered allmulticast mode
[  541.785039][T24235] bridge0: entered allmulticast mode
[  541.791342][T24235] macsec1: left allmulticast mode
[  541.796368][T24235] bridge0: left allmulticast mode
[  541.813065][T24235] bridge0: left promiscuous mode
[  541.878668][T24081] veth0_vlan: entered promiscuous mode
[  541.890358][T24081] veth1_vlan: entered promiscuous mode
[  541.903967][T24081] veth0_macvtap: entered promiscuous mode
[  541.914179][T24081] veth1_macvtap: entered promiscuous mode
[  541.942087][T24081] batman_adv: batadv0: Interface activated: batadv_slave_0
[  541.953919][T24081] batman_adv: batadv0: Interface activated: batadv_slave_1
[  541.966760][ T3449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  541.990017][ T3449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  542.000758][ T3449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  542.011211][ T3449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  542.030826][T24263] loop0: detected capacity change from 0 to 512
[  542.039310][T24263] EXT4-fs: Ignoring removed i_version option
[  542.045423][T24263] EXT4-fs: Ignoring removed bh option
[  542.056792][T24266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.066072][T24266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.072883][T24263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  542.087377][T24263] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  542.126989][T23287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.215443][T24280] 9pnet_fd: Insufficient options for proto=fd
[  542.252905][T24284] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6161'.
[  542.288388][T24289] lo speed is unknown, defaulting to 1000
[  542.642002][T24299] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6164'.
[  542.933539][T24327] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8)
[  542.940078][T24327] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  542.948268][T24327] vhci_hcd vhci_hcd.0: Device attached
[  542.958442][T24322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.968934][T24327] vhci_hcd vhci_hcd.0: port 0 already used
[  542.969629][T24322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.983157][T24329] vhci_hcd: connection closed
[  542.983508][ T3449] vhci_hcd: stop threads
[  542.992465][ T3449] vhci_hcd: release socket
[  542.996916][ T3449] vhci_hcd: disconnect device
[  543.007013][T24336] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6175'.
[  543.170750][T24339] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6178'.
[  543.539952][T24367] loop0: detected capacity change from 0 to 512
[  543.550552][T24367] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  543.585669][T24367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  543.678347][T23287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.924346][T24393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.933315][T24393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  543.943957][T24395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6197'.
[  544.001558][T24401] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8)
[  544.008153][T24401] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  544.016346][T24401] vhci_hcd vhci_hcd.0: Device attached
[  544.022958][T24401] vhci_hcd vhci_hcd.0: port 0 already used
[  544.030602][T24403] vhci_hcd: connection closed
[  544.030663][  T168] vhci_hcd: stop threads
[  544.039639][  T168] vhci_hcd: release socket
[  544.044060][  T168] vhci_hcd: disconnect device
[  544.068429][T24415] lo speed is unknown, defaulting to 1000
[  544.375556][T24424] lo speed is unknown, defaulting to 1000
[  544.502547][T24432] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  544.509096][T24432] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  544.517303][T24432] vhci_hcd vhci_hcd.0: Device attached
[  544.527091][T24432] vhci_hcd vhci_hcd.0: port 0 already used
[  544.534330][T24434] vhci_hcd: connection closed
[  544.534501][  T168] vhci_hcd: stop threads
[  544.543460][  T168] vhci_hcd: release socket
[  544.547881][  T168] vhci_hcd: disconnect device
[  544.640002][T24439] lo speed is unknown, defaulting to 1000
[  544.668437][T24443] team0: Port device veth0_to_bridge added
[  544.676587][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.683789][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.797789][T24452] lo speed is unknown, defaulting to 1000
[  544.916410][  T168] Bluetooth: hci0: Frame reassembly failed (-84)
[  545.121537][T24463] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6216'.
[  545.179087][   T29] kauditd_printk_skb: 439 callbacks suppressed
[  545.179102][   T29] audit: type=1326 audit(1763668347.273:21978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24467 comm="syz.0.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  545.212270][   T29] audit: type=1326 audit(1763668347.273:21979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24467 comm="syz.0.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  545.236016][   T29] audit: type=1326 audit(1763668347.273:21980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24467 comm="syz.0.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  545.259647][   T29] audit: type=1326 audit(1763668347.273:21981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24467 comm="syz.0.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  545.283274][   T29] audit: type=1326 audit(1763668347.273:21982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24467 comm="syz.0.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  545.307001][   T29] audit: type=1326 audit(1763668347.273:21983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24467 comm="syz.0.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  545.330633][   T29] audit: type=1326 audit(1763668347.273:21984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24467 comm="syz.0.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  545.354296][   T29] audit: type=1326 audit(1763668347.273:21985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24467 comm="syz.0.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  545.377984][   T29] audit: type=1326 audit(1763668347.273:21986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24467 comm="syz.0.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  545.401554][   T29] audit: type=1326 audit(1763668347.293:21987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24467 comm="syz.0.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9ed5f749 code=0x7ffc0000
[  545.720709][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.947174][T24479] lo speed is unknown, defaulting to 1000
[  546.075440][T24484] netlink: 'syz.6.6222': attribute type 1 has an invalid length.
[  546.083253][T24484] netlink: 244 bytes leftover after parsing attributes in process `syz.6.6222'.
[  546.360062][T24497] siw: device registration error -23
[  546.380202][T24488] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6224'.
[  546.655068][T24502] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6229'.
[  546.668962][T24508] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7)
[  546.675488][T24508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  546.683693][T24508] vhci_hcd vhci_hcd.0: Device attached
[  546.703562][T24508] vhci_hcd vhci_hcd.0: port 0 already used
[  546.721235][T24510] vhci_hcd: connection closed
[  546.721601][   T31] vhci_hcd: stop threads
[  546.730531][   T31] vhci_hcd: release socket
[  546.735006][   T31] vhci_hcd: disconnect device
[  546.951178][T22398] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  546.957335][ T3581] Bluetooth: hci0: command 0x1003 tx timeout
[  546.983828][T24525] lo speed is unknown, defaulting to 1000
[  547.396139][T24542] lo speed is unknown, defaulting to 1000
[  547.421642][T24538] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6238'.
[  547.694855][T24553] lo speed is unknown, defaulting to 1000
[  547.744451][T24556] netlink: 'syz.4.6243': attribute type 1 has an invalid length.
[  547.752285][T24556] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6243'.
[  548.600298][T24591] netlink: 'syz.4.6253': attribute type 1 has an invalid length.
[  548.600371][T24591] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6253'.
[  548.784345][T24598] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6254'.
[  549.119540][T24606] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7)
[  549.126136][T24606] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  549.134321][T24606] vhci_hcd vhci_hcd.0: Device attached
[  549.143884][T24604] lo speed is unknown, defaulting to 1000
[  549.172969][T24611] vhci_hcd vhci_hcd.0: port 0 already used
[  549.201360][T24608] vhci_hcd: connection closed
[  549.201613][  T168] vhci_hcd: stop threads
[  549.210563][  T168] vhci_hcd: release socket
[  549.215018][  T168] vhci_hcd: disconnect device
[  549.303444][T24618] loop0: detected capacity change from 0 to 512
[  549.321629][T24618] EXT4-fs: Ignoring removed i_version option
[  549.327771][T24618] EXT4-fs: Ignoring removed bh option
[  549.364872][T24618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  549.385574][T24618] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  549.472413][T23287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.557179][T24631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  549.565654][T24631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.023004][T24645] lo speed is unknown, defaulting to 1000
[  550.441140][   T29] kauditd_printk_skb: 284 callbacks suppressed
[  550.441206][   T29] audit: type=1326 audit(1763668352.533:22272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24655 comm="syz.4.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  550.481622][   T29] audit: type=1326 audit(1763668352.573:22273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24655 comm="syz.4.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  550.505336][   T29] audit: type=1326 audit(1763668352.573:22274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24655 comm="syz.4.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f503f01f783 code=0x7ffc0000
[  550.528779][   T29] audit: type=1326 audit(1763668352.573:22275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24657 comm="syz.8.6274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  550.552447][   T29] audit: type=1326 audit(1763668352.573:22276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24657 comm="syz.8.6274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  550.575928][   T29] audit: type=1326 audit(1763668352.573:22277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24657 comm="syz.8.6274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  550.599556][   T29] audit: type=1326 audit(1763668352.573:22278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24657 comm="syz.8.6274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  550.623098][   T29] audit: type=1326 audit(1763668352.573:22279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24657 comm="syz.8.6274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  550.646900][   T29] audit: type=1326 audit(1763668352.573:22280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24657 comm="syz.8.6274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  550.670400][   T29] audit: type=1326 audit(1763668352.573:22281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24657 comm="syz.8.6274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  550.826931][T24681] lo speed is unknown, defaulting to 1000
[  550.966390][T24679] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6279'.
[  551.089638][T24697] lo speed is unknown, defaulting to 1000
[  551.299080][ T3449] Bluetooth: hci0: Frame reassembly failed (-84)
[  551.358731][T24708] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6289'.
[  551.656166][T24727] bridge0: entered promiscuous mode
[  551.675210][T24727] macsec1: entered promiscuous mode
[  551.693988][T24727] bridge0: port 3(macsec1) entered blocking state
[  551.700504][T24727] bridge0: port 3(macsec1) entered disabled state
[  551.721278][T24727] macsec1: entered allmulticast mode
[  551.726660][T24727] bridge0: entered allmulticast mode
[  551.732613][T24727] macsec1: left allmulticast mode
[  551.737665][T24727] bridge0: left allmulticast mode
[  551.747026][T24727] bridge0: left promiscuous mode
[  551.931981][T24734] FAULT_INJECTION: forcing a failure.
[  551.931981][T24734] name failslab, interval 1, probability 0, space 0, times 0
[  551.944675][T24734] CPU: 1 UID: 0 PID: 24734 Comm: syz.4.6301 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  551.944708][T24734] Tainted: [W]=WARN
[  551.944715][T24734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  551.944728][T24734] Call Trace:
[  551.944736][T24734]  <TASK>
[  551.944745][T24734]  __dump_stack+0x1d/0x30
[  551.944844][T24734]  dump_stack_lvl+0xe8/0x140
[  551.944866][T24734]  dump_stack+0x15/0x1b
[  551.944884][T24734]  should_fail_ex+0x265/0x280
[  551.944922][T24734]  ? __pfx_proc_self_get_link+0x10/0x10
[  551.945025][T24734]  ? proc_self_get_link+0x97/0x110
[  551.945050][T24734]  should_failslab+0x8c/0xb0
[  551.945085][T24734]  __kmalloc_cache_noprof+0x4c/0x4a0
[  551.945111][T24734]  ? __pfx_proc_self_get_link+0x10/0x10
[  551.945144][T24734]  proc_self_get_link+0x97/0x110
[  551.945174][T24734]  pick_link+0x47d/0x830
[  551.945205][T24734]  step_into+0x790/0x7f0
[  551.945252][T24734]  ? inode_permission+0x106/0x310
[  551.945276][T24734]  link_path_walk+0x571/0x900
[  551.945419][T24734]  path_openat+0x1de/0x2170
[  551.945438][T24734]  ? css_rstat_updated+0xb7/0x240
[  551.945455][T24734]  ? __rcu_read_unlock+0x4f/0x70
[  551.945477][T24734]  ? __perf_event_task_sched_in+0xa5b/0xac0
[  551.945507][T24734]  ? __list_add_valid_or_report+0x38/0xe0
[  551.945547][T24734]  ? _raw_spin_unlock+0x26/0x50
[  551.945586][T24734]  do_filp_open+0x109/0x230
[  551.945615][T24734]  do_sys_openat2+0xa6/0x110
[  551.945635][T24734]  __x64_sys_openat+0xf2/0x120
[  551.945682][T24734]  x64_sys_call+0x2eab/0x3000
[  551.945762][T24734]  do_syscall_64+0xd2/0x200
[  551.945780][T24734]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  551.945802][T24734]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  551.945831][T24734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.945914][T24734] RIP: 0033:0x7f503f01df90
[  551.945930][T24734] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  551.946014][T24734] RSP: 002b:00007f503da7ef60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  551.946034][T24734] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f503f01df90
[  551.946047][T24734] RDX: 0000000000000000 RSI: 00007f503f0a407e RDI: 00000000ffffff9c
[  551.946125][T24734] RBP: 00007f503f0a407e R08: 0000000000000000 R09: 0000000000000000
[  551.946137][T24734] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  551.946150][T24734] R13: 00007f503f276038 R14: 00007f503f275fa0 R15: 00007ffd566461c8
[  551.946169][T24734]  </TASK>
[  552.289658][T24750] siw: device registration error -23
[  552.296679][T24746] lo speed is unknown, defaulting to 1000
[  552.328744][T24754] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6309'.
[  552.395646][   T31] Bluetooth: hci1: Frame reassembly failed (-84)
[  552.479742][T24767] bridge0: entered promiscuous mode
[  552.485189][T24767] macsec1: entered promiscuous mode
[  552.491188][T24767] bridge0: port 3(macsec1) entered blocking state
[  552.497735][T24767] bridge0: port 3(macsec1) entered disabled state
[  552.504763][T24767] macsec1: entered allmulticast mode
[  552.510123][T24767] bridge0: entered allmulticast mode
[  552.519608][T24767] macsec1: left allmulticast mode
[  552.524720][T24767] bridge0: left allmulticast mode
[  552.530865][T24767] bridge0: left promiscuous mode
[  552.560216][T24774] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9)
[  552.566812][T24774] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  552.575085][T24774] vhci_hcd vhci_hcd.0: Device attached
[  552.585410][T24774] vhci_hcd vhci_hcd.0: port 0 already used
[  552.605599][T24776] vhci_hcd: connection closed
[  552.605731][   T52] vhci_hcd: stop threads
[  552.614707][   T52] vhci_hcd: release socket
[  552.619121][   T52] vhci_hcd: disconnect device
[  552.817142][T24789] siw: device registration error -23
[  553.185942][T24800] FAULT_INJECTION: forcing a failure.
[  553.185942][T24800] name failslab, interval 1, probability 0, space 0, times 0
[  553.198617][T24800] CPU: 1 UID: 0 PID: 24800 Comm: syz.8.6322 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  553.198678][T24800] Tainted: [W]=WARN
[  553.198683][T24800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  553.198693][T24800] Call Trace:
[  553.198700][T24800]  <TASK>
[  553.198786][T24800]  __dump_stack+0x1d/0x30
[  553.198809][T24800]  dump_stack_lvl+0xe8/0x140
[  553.198905][T24800]  dump_stack+0x15/0x1b
[  553.198921][T24800]  should_fail_ex+0x265/0x280
[  553.198955][T24800]  should_failslab+0x8c/0xb0
[  553.199078][T24800]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  553.199107][T24800]  ? dup_task_struct+0x70/0x6b0
[  553.199198][T24800]  dup_task_struct+0x70/0x6b0
[  553.199225][T24800]  ? _parse_integer+0x27/0x40
[  553.199327][T24800]  copy_process+0x399/0x2000
[  553.199349][T24800]  ? kstrtouint+0x76/0xc0
[  553.199378][T24800]  ? kstrtouint_from_user+0x9f/0xf0
[  553.199427][T24800]  ? __rcu_read_unlock+0x4f/0x70
[  553.199507][T24800]  kernel_clone+0x16c/0x5c0
[  553.199534][T24800]  ? vfs_write+0x7e8/0x960
[  553.199634][T24800]  __x64_sys_clone+0xe6/0x120
[  553.199670][T24800]  x64_sys_call+0x119c/0x3000
[  553.199690][T24800]  do_syscall_64+0xd2/0x200
[  553.199708][T24800]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  553.199788][T24800]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  553.199837][T24800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.199860][T24800] RIP: 0033:0x7fd91998f749
[  553.199902][T24800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  553.199918][T24800] RSP: 002b:00007fd9183f6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  553.199934][T24800] RAX: ffffffffffffffda RBX: 00007fd919be5fa0 RCX: 00007fd91998f749
[  553.200051][T24800] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[  553.200063][T24800] RBP: 00007fd9183f7090 R08: 0000000000000000 R09: 0000000000000000
[  553.200074][T24800] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  553.200084][T24800] R13: 00007fd919be6038 R14: 00007fd919be5fa0 R15: 00007fff19af7ff8
[  553.200100][T24800]  </TASK>
[  553.341082][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  553.368178][T24763] Bluetooth: hci0: command 0x1003 tx timeout
[  553.817069][T24819] siw: device registration error -23
[  553.908284][T24824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  553.916945][T24824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.461151][T22398] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  554.463479][ T3581] Bluetooth: hci1: command 0x1003 tx timeout
[  554.643312][T24842] lo speed is unknown, defaulting to 1000
[  554.865771][T24857] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6345'.
[  554.938545][T24861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.950041][T24863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.950619][T24863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.959197][T24861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.034064][T24867] bridge0: entered promiscuous mode
[  555.034099][T24867] macsec1: entered promiscuous mode
[  555.034901][T24867] bridge0: port 3(macsec1) entered blocking state
[  555.034925][T24867] bridge0: port 3(macsec1) entered disabled state
[  555.034987][T24867] macsec1: entered allmulticast mode
[  555.063556][T24867] bridge0: entered allmulticast mode
[  555.069443][T24867] macsec1: left allmulticast mode
[  555.069502][T24867] bridge0: left allmulticast mode
[  555.069957][T24867] bridge0: left promiscuous mode
[  555.194383][T24874] FAULT_INJECTION: forcing a failure.
[  555.194383][T24874] name failslab, interval 1, probability 0, space 0, times 0
[  555.194454][T24874] CPU: 0 UID: 0 PID: 24874 Comm: syz.4.6351 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  555.194476][T24874] Tainted: [W]=WARN
[  555.194482][T24874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  555.194492][T24874] Call Trace:
[  555.194498][T24874]  <TASK>
[  555.194505][T24874]  __dump_stack+0x1d/0x30
[  555.194568][T24874]  dump_stack_lvl+0xe8/0x140
[  555.194657][T24874]  dump_stack+0x15/0x1b
[  555.194673][T24874]  should_fail_ex+0x265/0x280
[  555.194704][T24874]  should_failslab+0x8c/0xb0
[  555.194731][T24874]  kmem_cache_alloc_noprof+0x50/0x480
[  555.194778][T24874]  ? security_inode_alloc+0x37/0x100
[  555.194852][T24874]  security_inode_alloc+0x37/0x100
[  555.194872][T24874]  inode_init_always_gfp+0x4b7/0x500
[  555.194930][T24874]  ? __pfx_sock_alloc_inode+0x10/0x10
[  555.194999][T24874]  alloc_inode+0x58/0x170
[  555.195021][T24874]  __sock_create+0x122/0x5b0
[  555.195047][T24874]  ? fput+0x8f/0xc0
[  555.195063][T24874]  __sys_socket+0xb0/0x180
[  555.195165][T24874]  __x64_sys_socket+0x3f/0x50
[  555.195190][T24874]  x64_sys_call+0x1147/0x3000
[  555.195211][T24874]  do_syscall_64+0xd2/0x200
[  555.195230][T24874]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  555.195267][T24874]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  555.195298][T24874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.195319][T24874] RIP: 0033:0x7f503f01f749
[  555.195333][T24874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  555.195350][T24874] RSP: 002b:00007f503da7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  555.195441][T24874] RAX: ffffffffffffffda RBX: 00007f503f275fa0 RCX: 00007f503f01f749
[  555.195453][T24874] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000028
[  555.195465][T24874] RBP: 00007f503da7f090 R08: 0000000000000000 R09: 0000000000000000
[  555.195477][T24874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  555.195488][T24874] R13: 00007f503f276038 R14: 00007f503f275fa0 R15: 00007ffd566461c8
[  555.195528][T24874]  </TASK>
[  555.195552][T24874] socket: no more sockets
[  555.472340][   T29] kauditd_printk_skb: 384 callbacks suppressed
[  555.472354][   T29] audit: type=1326 audit(1763668357.573:22666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.6.6354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  555.472376][   T29] audit: type=1326 audit(1763668357.573:22667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.6.6354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  555.478843][   T29] audit: type=1326 audit(1763668357.573:22668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.6.6354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  555.478874][   T29] audit: type=1326 audit(1763668357.573:22669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.6.6354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  555.478974][   T29] audit: type=1326 audit(1763668357.573:22670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.6.6354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  555.478998][   T29] audit: type=1326 audit(1763668357.573:22671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.6.6354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  555.479022][   T29] audit: type=1326 audit(1763668357.573:22672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.6.6354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  555.479046][   T29] audit: type=1326 audit(1763668357.573:22673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.6.6354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  555.479136][   T29] audit: type=1326 audit(1763668357.573:22674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.6.6354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  555.479160][   T29] audit: type=1326 audit(1763668357.573:22675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.6.6354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  555.724644][T24886] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6357'.
[  555.803875][T24890] lo speed is unknown, defaulting to 1000
[  555.937077][T24906] FAULT_INJECTION: forcing a failure.
[  555.937077][T24906] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  555.950480][T24906] CPU: 1 UID: 0 PID: 24906 Comm: syz.8.6365 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  555.950556][T24906] Tainted: [W]=WARN
[  555.950563][T24906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  555.950576][T24906] Call Trace:
[  555.950647][T24906]  <TASK>
[  555.950656][T24906]  __dump_stack+0x1d/0x30
[  555.950678][T24906]  dump_stack_lvl+0xe8/0x140
[  555.950695][T24906]  dump_stack+0x15/0x1b
[  555.950710][T24906]  should_fail_ex+0x265/0x280
[  555.950809][T24906]  should_fail_alloc_page+0xf2/0x100
[  555.950911][T24906]  __alloc_frozen_pages_noprof+0xff/0x360
[  555.950941][T24906]  alloc_pages_mpol+0xb3/0x260
[  555.950961][T24906]  folio_alloc_mpol_noprof+0x39/0x80
[  555.950984][T24906]  shmem_get_folio_gfp+0x3cf/0xd60
[  555.951045][T24906]  ? simple_xattr_get+0xb9/0x120
[  555.951076][T24906]  shmem_write_begin+0xa8/0x190
[  555.951095][T24906]  generic_perform_write+0x184/0x490
[  555.951152][T24906]  shmem_file_write_iter+0xc5/0xf0
[  555.951177][T24906]  do_iter_readv_writev+0x4a1/0x540
[  555.951208][T24906]  vfs_writev+0x2df/0x8b0
[  555.951317][T24906]  __se_sys_pwritev2+0xfc/0x1c0
[  555.951346][T24906]  __x64_sys_pwritev2+0x67/0x80
[  555.951375][T24906]  x64_sys_call+0x2c59/0x3000
[  555.951434][T24906]  do_syscall_64+0xd2/0x200
[  555.951479][T24906]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  555.951508][T24906]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  555.951542][T24906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.951588][T24906] RIP: 0033:0x7fd91998f749
[  555.951604][T24906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  555.951620][T24906] RSP: 002b:00007fd9183f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  555.951640][T24906] RAX: ffffffffffffffda RBX: 00007fd919be5fa0 RCX: 00007fd91998f749
[  555.951708][T24906] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006
[  555.951719][T24906] RBP: 00007fd9183f7090 R08: 0000000000000000 R09: 0000000000000003
[  555.951729][T24906] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[  555.951739][T24906] R13: 00007fd919be6038 R14: 00007fd919be5fa0 R15: 00007fff19af7ff8
[  555.951758][T24906]  </TASK>
[  555.982387][T24910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.184308][T24910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.192993][T24914] smc: net device hsr0 applied user defined pnetid SYZ2
[  556.811250][T24961] xt_CT: You must specify a L4 protocol and not use inversions on it
[  556.872696][T24961] lo speed is unknown, defaulting to 1000
[  557.276406][T24976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.302250][T24976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.574895][ T3420] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4
[  557.582672][ T3420] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2
[  557.591838][ T3420] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3
[  557.600136][ T3420] hid-generic 0000:3000000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  557.989782][T22398] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  557.996489][ T3581] Bluetooth: hci0: command 0x1003 tx timeout
[  558.212994][T24995] fido_id[24995]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  558.307814][T25000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.575446][T25000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.687835][T25007] siw: device registration error -23
[  559.165091][T25032] loop4: detected capacity change from 0 to 512
[  559.171837][T25032] EXT4-fs: Ignoring removed i_version option
[  559.177837][T25032] EXT4-fs: Ignoring removed bh option
[  559.192740][T25032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  559.205472][T25032] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  559.239671][T24081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  559.437462][T25045] lo speed is unknown, defaulting to 1000
[  559.671919][T25049] smc: net device hsr0 applied user defined pnetid SYZ2
[  559.766627][T25055] loop0: detected capacity change from 0 to 4096
[  559.797136][T25055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  559.834432][T23287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  560.097042][T25067] bridge0: entered promiscuous mode
[  560.102343][T25067] macsec1: entered promiscuous mode
[  560.108390][T25067] bridge0: port 3(macsec1) entered blocking state
[  560.114860][T25067] bridge0: port 3(macsec1) entered disabled state
[  560.140453][T25067] macsec1: entered allmulticast mode
[  560.145817][T25067] bridge0: entered allmulticast mode
[  560.159844][T25067] macsec1: left allmulticast mode
[  560.159866][T25067] bridge0: left allmulticast mode
[  560.161735][T25067] bridge0: left promiscuous mode
[  560.212659][T25077] loop4: detected capacity change from 0 to 512
[  560.235162][T25077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  560.269499][T25065] loop6: detected capacity change from 0 to 164
[  560.280612][T25065] ISOFS: unable to read i-node block
[  560.289432][T25065] isofs_fill_super: get root inode failed
[  560.333330][T25088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6431'.
[  560.346740][   T52] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  560.356786][T25088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6431'.
[  560.365837][   T52] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  560.374920][   T52] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  560.383854][   T52] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  560.393810][T25088] futex_wake_op: syz.0.6431 tries to shift op by -1; fix this program
[  560.415444][T25088] loop0: detected capacity change from 0 to 128
[  560.427679][T25088] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  560.435644][T25088] FAT-fs (loop0): Filesystem has been set read-only
[  560.442258][T25088] bio_check_eod: 96 callbacks suppressed
[  560.442271][T25088] syz.0.6431: attempt to access beyond end of device
[  560.442271][T25088] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  560.442766][T24081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  560.447922][T25088] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  560.478339][T25088] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  560.486533][T25088] syz.0.6431: attempt to access beyond end of device
[  560.486533][T25088] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  560.499824][T25088] syz.0.6431: attempt to access beyond end of device
[  560.499824][T25088] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  560.513277][T25088] syz.0.6431: attempt to access beyond end of device
[  560.513277][T25088] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  560.522891][   T29] kauditd_printk_skb: 608 callbacks suppressed
[  560.522905][   T29] audit: type=1326 audit(1763668362.623:23282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25091 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  560.526721][T25088] syz.0.6431: attempt to access beyond end of device
[  560.526721][T25088] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  560.534021][   T29] audit: type=1326 audit(1763668362.633:23283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25091 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  560.556439][T25088] syz.0.6431: attempt to access beyond end of device
[  560.556439][T25088] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  560.606494][   T29] audit: type=1326 audit(1763668362.673:23284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25091 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  560.606714][T25088] syz.0.6431: attempt to access beyond end of device
[  560.606714][T25088] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  560.630236][   T29] audit: type=1326 audit(1763668362.673:23285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25091 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  560.666968][   T29] audit: type=1326 audit(1763668362.673:23286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25091 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  560.681428][T25088] syz.0.6431: attempt to access beyond end of device
[  560.681428][T25088] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  560.690705][   T29] audit: type=1326 audit(1763668362.673:23287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25091 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  560.705926][T25088] syz.0.6431: attempt to access beyond end of device
[  560.705926][T25088] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  560.727333][   T29] audit: type=1326 audit(1763668362.673:23288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25091 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  560.727357][   T29] audit: type=1326 audit(1763668362.673:23289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25091 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  560.787769][   T29] audit: type=1326 audit(1763668362.773:23290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25091 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  560.787781][T25088] syz.0.6431: attempt to access beyond end of device
[  560.787781][T25088] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  560.824655][   T29] audit: type=1326 audit(1763668362.773:23291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25091 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  560.865828][T25094] team0: Port device veth0_to_bridge added
[  560.891713][T25094] loop4: detected capacity change from 0 to 4096
[  560.909691][T25094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  560.939196][T24081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  560.998725][T25100] loop4: detected capacity change from 0 to 512
[  561.006192][T25100] EXT4-fs: Ignoring removed i_version option
[  561.012290][T25100] EXT4-fs: Ignoring removed bh option
[  561.042795][T25100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  561.064674][T25104] FAULT_INJECTION: forcing a failure.
[  561.064674][T25104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  561.077795][T25104] CPU: 0 UID: 0 PID: 25104 Comm: syz.9.6437 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  561.077830][T25104] Tainted: [W]=WARN
[  561.077837][T25104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  561.077848][T25104] Call Trace:
[  561.077855][T25104]  <TASK>
[  561.077862][T25104]  __dump_stack+0x1d/0x30
[  561.077955][T25104]  dump_stack_lvl+0xe8/0x140
[  561.077976][T25104]  dump_stack+0x15/0x1b
[  561.078005][T25104]  should_fail_ex+0x265/0x280
[  561.078085][T25104]  should_fail+0xb/0x20
[  561.078098][T25104]  should_fail_usercopy+0x1a/0x20
[  561.078116][T25104]  _copy_from_user+0x1c/0xb0
[  561.078206][T25104]  ___sys_sendmsg+0xc1/0x1d0
[  561.078237][T25104]  __x64_sys_sendmsg+0xd4/0x160
[  561.078259][T25104]  x64_sys_call+0x191e/0x3000
[  561.078328][T25104]  do_syscall_64+0xd2/0x200
[  561.078367][T25104]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  561.078390][T25104]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  561.078464][T25104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.078482][T25104] RIP: 0033:0x7fa7378bf749
[  561.078495][T25104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  561.078510][T25104] RSP: 002b:00007fa73631f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  561.078547][T25104] RAX: ffffffffffffffda RBX: 00007fa737b15fa0 RCX: 00007fa7378bf749
[  561.078561][T25104] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000004
[  561.078574][T25104] RBP: 00007fa73631f090 R08: 0000000000000000 R09: 0000000000000000
[  561.078587][T25104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  561.078601][T25104] R13: 00007fa737b16038 R14: 00007fa737b15fa0 R15: 00007ffcb3581ca8
[  561.078692][T25104]  </TASK>
[  561.078893][T25100] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  561.306446][T24081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  561.340185][T25115] loop6: detected capacity change from 0 to 512
[  561.418614][T25115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  561.582227][ T3581] Bluetooth: hci0: command 0x1003 tx timeout
[  561.588300][T22398] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  561.702682][T25130] netlink: 124 bytes leftover after parsing attributes in process `syz.9.6445'.
[  561.740726][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  561.789581][T25143] bridge0: entered promiscuous mode
[  561.795060][T25143] macsec1: entered promiscuous mode
[  561.801847][T25143] bridge0: port 3(macsec1) entered blocking state
[  561.808354][T25143] bridge0: port 3(macsec1) entered disabled state
[  561.815554][T25143] macsec1: entered allmulticast mode
[  561.820841][T25143] bridge0: entered allmulticast mode
[  561.828299][T25143] macsec1: left allmulticast mode
[  561.833369][T25143] bridge0: left allmulticast mode
[  561.839027][T25143] bridge0: left promiscuous mode
[  562.127028][T25154] loop6: detected capacity change from 0 to 1024
[  562.137866][T25154] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  562.148870][T25154] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  562.190164][T25154] JBD2: no valid journal superblock found
[  562.195965][T25154] EXT4-fs (loop6): Could not load journal inode
[  562.607694][T25158] lo speed is unknown, defaulting to 1000
[  564.004873][T25182] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6459'.
[  564.140986][T25212] wireguard0: entered promiscuous mode
[  564.146549][T25212] wireguard0: entered allmulticast mode
[  564.236844][T25215] lo speed is unknown, defaulting to 1000
[  564.382797][T25219] loop6: detected capacity change from 0 to 4096
[  564.402648][T25219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  564.467185][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.529122][T25225] wireguard0: entered promiscuous mode
[  564.534808][T25225] wireguard0: entered allmulticast mode
[  564.657558][T25228] x_tables: duplicate entry at hook 2
[  564.729332][T25229] loop6: detected capacity change from 0 to 512
[  564.751904][T25229] EXT4-fs (loop6): 1 orphan inode deleted
[  564.757963][T25229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  564.846389][ T3421] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4
[  564.854115][ T3421] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2
[  564.866975][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.892803][ T3421] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3
[  564.924796][ T3421] hid-generic 0000:3000000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  565.021803][T25240] fido_id[25240]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  565.196254][T25250] loop6: detected capacity change from 0 to 164
[  565.221172][T25250] Unable to read rock-ridge attributes
[  565.260360][T25250] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6483'.
[  565.352802][T25252] netlink: 124 bytes leftover after parsing attributes in process `syz.8.6481'.
[  565.391199][T25244] netlink: 176 bytes leftover after parsing attributes in process `syz.9.6480'.
[  565.609240][   T29] kauditd_printk_skb: 325 callbacks suppressed
[  565.609254][   T29] audit: type=1326 audit(1763668367.703:23617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25258 comm="syz.8.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  565.644897][T25264] loop6: detected capacity change from 0 to 512
[  565.652737][   T29] audit: type=1326 audit(1763668367.743:23618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25258 comm="syz.8.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  565.676280][   T29] audit: type=1326 audit(1763668367.743:23619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25258 comm="syz.8.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  565.699914][   T29] audit: type=1326 audit(1763668367.743:23620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25258 comm="syz.8.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  565.723476][   T29] audit: type=1326 audit(1763668367.743:23621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25258 comm="syz.8.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  565.747008][   T29] audit: type=1326 audit(1763668367.743:23622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25258 comm="syz.8.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  565.770648][   T29] audit: type=1326 audit(1763668367.743:23623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25258 comm="syz.8.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91998f749 code=0x7ffc0000
[  565.794240][   T29] audit: type=1326 audit(1763668367.743:23624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25265 comm="syz.9.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7378bf749 code=0x7ffc0000
[  565.817919][   T29] audit: type=1326 audit(1763668367.743:23625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25265 comm="syz.9.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7378bf749 code=0x7ffc0000
[  565.841343][   T29] audit: type=1326 audit(1763668367.743:23626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25265 comm="syz.9.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7378bf749 code=0x7ffc0000
[  565.873744][T25264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  566.007227][T25264] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6487'.
[  566.116034][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.138796][T25278] lo speed is unknown, defaulting to 1000
[  566.457974][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.498001][T25292] loop4: detected capacity change from 0 to 4096
[  566.510915][T25292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  566.550342][T24081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.657596][T25305] loop6: detected capacity change from 0 to 512
[  566.673262][T25305] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  566.705859][T25305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  566.812694][T25310] lo speed is unknown, defaulting to 1000
[  566.905184][T25306] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6496'.
[  567.119918][ T3420] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4
[  567.119991][ T3420] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2
[  567.120027][ T3420] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3
[  567.120385][ T3420] hid-generic 0000:3000000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  567.310798][T25321] fido_id[25321]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  567.909597][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.186250][T25340] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6507'.
[  568.196336][T25342] siw: device registration error -23
[  568.569778][T25350] lo speed is unknown, defaulting to 1000
[  568.774981][T25354] FAULT_INJECTION: forcing a failure.
[  568.774981][T25354] name failslab, interval 1, probability 0, space 0, times 0
[  568.787737][T25354] CPU: 0 UID: 0 PID: 25354 Comm: syz.9.6512 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  568.787771][T25354] Tainted: [W]=WARN
[  568.787777][T25354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  568.787788][T25354] Call Trace:
[  568.787794][T25354]  <TASK>
[  568.787800][T25354]  __dump_stack+0x1d/0x30
[  568.787878][T25354]  dump_stack_lvl+0xe8/0x140
[  568.787899][T25354]  dump_stack+0x15/0x1b
[  568.787914][T25354]  should_fail_ex+0x265/0x280
[  568.787941][T25354]  should_failslab+0x8c/0xb0
[  568.787989][T25354]  kmem_cache_alloc_noprof+0x50/0x480
[  568.788017][T25354]  ? getname_flags+0x80/0x3b0
[  568.788048][T25354]  getname_flags+0x80/0x3b0
[  568.788074][T25354]  __se_sys_move_mount+0x2d6/0x490
[  568.788151][T25354]  __x64_sys_move_mount+0x67/0x80
[  568.788172][T25354]  x64_sys_call+0xcfe/0x3000
[  568.788195][T25354]  do_syscall_64+0xd2/0x200
[  568.788315][T25354]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  568.788344][T25354]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  568.788375][T25354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.788472][T25354] RIP: 0033:0x7fa7378bf749
[  568.788485][T25354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  568.788501][T25354] RSP: 002b:00007fa73631f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad
[  568.788519][T25354] RAX: ffffffffffffffda RBX: 00007fa737b15fa0 RCX: 00007fa7378bf749
[  568.788532][T25354] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000006
[  568.788546][T25354] RBP: 00007fa73631f090 R08: 0003000000000000 R09: 0000000000000000
[  568.788619][T25354] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  568.788632][T25354] R13: 00007fa737b16038 R14: 00007fa737b15fa0 R15: 00007ffcb3581ca8
[  568.788694][T25354]  </TASK>
[  568.971108][ T3581] Bluetooth: hci0: command 0x1003 tx timeout
[  568.977203][T22398] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  569.250251][T25357] netlink: 176 bytes leftover after parsing attributes in process `syz.9.6514'.
[  569.268313][T25362] lo speed is unknown, defaulting to 1000
[  569.298089][T25359] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6513'.
[  569.408880][T25371] netlink: 196 bytes leftover after parsing attributes in process `syz.6.6518'.
[  569.485849][T25379] loop6: detected capacity change from 0 to 1024
[  569.506001][T25377] siw: device registration error -23
[  569.517467][T25379] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  569.527357][T25379] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  569.569345][T25379] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  569.580808][T25379] EXT4-fs error (device loop6): ext4_get_journal_inode:5808: inode #5: comm syz.6.6521: unexpected bad inode w/o EXT4_IGET_BAD
[  569.613696][T25379] EXT4-fs (loop6): no journal found
[  569.618916][T25379] EXT4-fs (loop6): can't get journal size
[  569.620147][T25387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6523'.
[  569.855679][T25379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  569.981832][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.070579][T25396] lo speed is unknown, defaulting to 1000
[  570.346952][T25399] lo speed is unknown, defaulting to 1000
[  570.598115][T25412] xt_CT: You must specify a L4 protocol and not use inversions on it
[  570.632868][T25403] netlink: 176 bytes leftover after parsing attributes in process `syz.9.6528'.
[  570.661837][T25415] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6530'.
[  570.720942][T25414] lo speed is unknown, defaulting to 1000
[  570.788840][T25420] loop4: detected capacity change from 0 to 512
[  570.803155][T25420] EXT4-fs: Ignoring removed i_version option
[  570.809176][T25420] EXT4-fs: Ignoring removed bh option
[  570.849366][T25420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  570.893380][T25420] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  571.062060][T24081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.113232][T25438] lo speed is unknown, defaulting to 1000
[  571.142253][   T29] kauditd_printk_skb: 134 callbacks suppressed
[  571.142266][   T29] audit: type=1326 audit(1763668373.243:23761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  571.180527][T25449] loop6: detected capacity change from 0 to 2048
[  571.191311][   T29] audit: type=1326 audit(1763668373.243:23762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  571.214919][   T29] audit: type=1326 audit(1763668373.243:23763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  571.238454][   T29] audit: type=1326 audit(1763668373.243:23764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  571.262075][   T29] audit: type=1326 audit(1763668373.243:23765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  571.285557][   T29] audit: type=1326 audit(1763668373.243:23766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  571.309139][   T29] audit: type=1326 audit(1763668373.243:23767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  571.332632][   T29] audit: type=1326 audit(1763668373.243:23768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  571.356317][   T29] audit: type=1326 audit(1763668373.243:23769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  571.379902][   T29] audit: type=1326 audit(1763668373.243:23770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  571.599312][T25449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  571.670025][T25449] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  571.857172][T25458] lo speed is unknown, defaulting to 1000
[  571.991696][T25449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  572.010452][T25449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  572.194130][T25464] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6543'.
[  572.397085][T25484] smc: net device hsr0 applied user defined pnetid SYZ2
[  572.441185][T25485] xt_CT: You must specify a L4 protocol and not use inversions on it
[  572.525292][T25488] lo speed is unknown, defaulting to 1000
[  572.557956][T25490] siw: device registration error -23
[  572.797665][T25495] lo speed is unknown, defaulting to 1000
[  572.928505][T25498] loop8: detected capacity change from 0 to 764
[  573.107637][T25498] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  573.131855][T25500] loop9: detected capacity change from 0 to 512
[  573.139102][T25500] EXT4-fs: Ignoring removed i_version option
[  573.145148][T25500] EXT4-fs: Ignoring removed bh option
[  573.185731][T25500] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  573.221257][T25500] ext4 filesystem being mounted at /527/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  573.249433][T25498] loop8: detected capacity change from 0 to 8192
[  573.354980][T17536] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.617881][T25515] loop9: detected capacity change from 0 to 512
[  573.638668][T25515] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  573.695320][ T3449] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set
[  573.727771][T25522] lo speed is unknown, defaulting to 1000
[  573.793333][ T3449] EXT4-fs (loop6): Remounting filesystem read-only
[  573.828766][T25521] lo speed is unknown, defaulting to 1000
[  574.028966][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.084533][T25527] loop6: detected capacity change from 0 to 256
[  574.114253][T25527] netlink: 'syz.6.6562': attribute type 1 has an invalid length.
[  574.122056][T25527] netlink: 244 bytes leftover after parsing attributes in process `syz.6.6562'.
[  574.153672][T25530] SELinux:  Context system_u:object_r:pam_var_run_t:s0 is not valid (left unmapped).
[  574.168190][T25515] netlink: 176 bytes leftover after parsing attributes in process `syz.9.6561'.
[  574.291803][T17536] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.353395][T25532] loop9: detected capacity change from 0 to 512
[  574.411607][T25532] EXT4-fs: Ignoring removed i_version option
[  574.417628][T25532] EXT4-fs: Ignoring removed bh option
[  574.453442][T25532] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  574.481595][T25532] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  574.492583][T25536] loop4: detected capacity change from 0 to 4096
[  574.543118][T25536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  574.633477][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6564'.
[  574.661598][T17536] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.687149][T24081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.784793][T25550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  574.793780][T25550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  575.013558][T25560] loop4: detected capacity change from 0 to 512
[  575.083009][T25560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  575.216684][T25564] loop6: detected capacity change from 0 to 1024
[  575.233609][T25564] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  575.244627][T25564] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  575.291331][T25564] JBD2: no valid journal superblock found
[  575.297093][T25564] EXT4-fs (loop6): Could not load journal inode
[  575.468844][T25560] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6575'.
[  575.550068][T24081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.667011][T25572] loop8: detected capacity change from 0 to 1024
[  575.693473][T25573] lo speed is unknown, defaulting to 1000
[  575.704489][T25572] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  575.800036][  T168] Bluetooth: hci0: Frame reassembly failed (-84)
[  576.065329][T25579] loop6: detected capacity change from 0 to 1024
[  576.091607][T25579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  576.372387][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.420359][   T29] kauditd_printk_skb: 117 callbacks suppressed
[  576.420372][   T29] audit: type=1326 audit(1763668378.513:23888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25584 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  576.493795][   T29] audit: type=1326 audit(1763668378.553:23889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25584 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  576.517487][   T29] audit: type=1326 audit(1763668378.553:23890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25584 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  576.541244][   T29] audit: type=1326 audit(1763668378.553:23891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25584 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  576.564972][   T29] audit: type=1326 audit(1763668378.553:23892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25584 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  576.588523][   T29] audit: type=1326 audit(1763668378.553:23893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25584 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  576.612263][   T29] audit: type=1326 audit(1763668378.553:23894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25584 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  576.635833][   T29] audit: type=1326 audit(1763668378.553:23895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25584 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  576.659408][   T29] audit: type=1326 audit(1763668378.553:23896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25584 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  576.683063][   T29] audit: type=1326 audit(1763668378.553:23897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25584 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb478cf749 code=0x7ffc0000
[  576.719037][T25595] loop6: detected capacity change from 0 to 512
[  576.720424][T17513] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.747549][  T168] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  576.753465][T25595] EXT4-fs: Ignoring removed i_version option
[  576.757920][  T168] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.763866][T25595] EXT4-fs: Ignoring removed bh option
[  576.802809][T25595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  576.827941][T25595] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  576.843486][T25586] lo speed is unknown, defaulting to 1000
[  576.851560][  T168] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  576.861972][  T168] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.916774][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.952181][  T168] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  576.962558][  T168] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.990293][T25612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  577.001292][T25612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  577.029437][T25586] chnl_net:caif_netlink_parms(): no params data found
[  577.070393][  T168] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.080749][  T168] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.147982][   T36] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4
[  577.155708][   T36] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2
[  577.163639][   T36] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3
[  577.176429][   T36] hid-generic 0000:3000000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  577.188142][T25586] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.195329][T25586] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.202653][T25586] bridge_slave_0: entered allmulticast mode
[  577.209172][T25586] bridge_slave_0: entered promiscuous mode
[  577.216276][T25586] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.223393][T25586] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.231239][T25586] bridge_slave_1: entered allmulticast mode
[  577.237804][T25586] bridge_slave_1: entered promiscuous mode
[  577.296925][T25623] fido_id[25623]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  577.318691][T25586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.329798][T25586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  577.465971][T25586] team0: Port device team_slave_0 added
[  577.489153][  T168] bridge_slave_1: left allmulticast mode
[  577.494897][  T168] bridge_slave_1: left promiscuous mode
[  577.500530][  T168] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.553053][  T168] bridge_slave_0: left allmulticast mode
[  577.558753][  T168] bridge_slave_0: left promiscuous mode
[  577.564497][  T168] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.784087][  T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  577.795502][  T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  577.806737][  T168] bond0 (unregistering): Released all slaves
[  577.815741][T25586] team0: Port device team_slave_1 added
[  577.821420][T22398] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  577.853071][T25631] loop8: detected capacity change from 0 to 164
[  577.860909][T25586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  577.867920][T25586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  577.893823][T25586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  577.913573][T25586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  577.920552][T25586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  577.921073][T25631] Unable to read rock-ridge attributes
[  577.946742][T25586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  577.966642][  T168] hsr_slave_0: left promiscuous mode
[  577.971307][T25631] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6594'.
[  578.040418][  T168] hsr_slave_1: left promiscuous mode
[  578.046630][  T168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  578.054138][  T168] batman_adv: batadv0: Removing interface: batadv_slave_0
[  578.063970][  T168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  578.071402][  T168] batman_adv: batadv0: Removing interface: batadv_slave_1
[  578.081774][  T168] veth1_macvtap: left promiscuous mode
[  578.087347][  T168] veth0_macvtap: left promiscuous mode
[  578.093015][  T168] veth1_vlan: left promiscuous mode
[  578.098381][  T168] veth0_vlan: left promiscuous mode
[  578.160244][T25638] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9)
[  578.166866][T25638] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  578.175014][T25638] vhci_hcd vhci_hcd.0: Device attached
[  578.184000][T25638] vhci_hcd vhci_hcd.0: port 0 already used
[  578.190556][T25640] vhci_hcd: connection closed
[  578.190723][   T12] vhci_hcd: stop threads
[  578.199691][   T12] vhci_hcd: release socket
[  578.204188][   T12] vhci_hcd: disconnect device
[  578.204281][  T168] smc: removing net device hsr0 with user defined pnetid SYZ2
[  578.228136][  T168] team0 (unregistering): Port device team_slave_1 removed
[  578.239096][  T168] team0 (unregistering): Port device team_slave_0 removed
[  578.257981][  T168] team0 (unregistering): Port device veth0_to_bridge removed
[  578.313581][T25586] hsr_slave_0: entered promiscuous mode
[  578.319674][T25586] hsr_slave_1: entered promiscuous mode
[  578.336419][T25586] debugfs: 'hsr0' already exists in 'hsr'
[  578.342214][T25586] Cannot create hsr debugfs directory
[  578.350541][T25645] loop6: detected capacity change from 0 to 512
[  578.373804][T25645] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  578.405295][T25645] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  578.767761][T25661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  578.767870][T25661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  578.842222][T25663] siw: device registration error -23
[  578.996290][ T3378] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4
[  578.996321][ T3378] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2
[  578.996358][ T3378] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3
[  578.997382][ T3378] hid-generic 0000:3000000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  579.140241][T25668] fido_id[25668]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  579.332471][T25586] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  579.335729][T25586] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  579.338580][T25586] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  579.345633][T25586] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  579.440438][T25586] 8021q: adding VLAN 0 to HW filter on device bond0
[  579.508266][T25586] 8021q: adding VLAN 0 to HW filter on device team0
[  579.529563][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.529597][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  579.534216][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.534305][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  579.559130][T25678] loop4: detected capacity change from 0 to 764
[  579.565348][T25586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  579.625330][T25586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  579.635823][T25678] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  579.691899][T25586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  579.722013][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  579.767015][T25678] loop4: detected capacity change from 0 to 8192
[  579.767150][T25586] veth0_vlan: entered promiscuous mode
[  579.783610][T25586] veth1_vlan: entered promiscuous mode
[  579.796828][T25690] loop6: detected capacity change from 0 to 164
[  579.806979][T25586] veth0_macvtap: entered promiscuous mode
[  579.820536][T25690] Unable to read rock-ridge attributes
[  579.830216][T25586] veth1_macvtap: entered promiscuous mode
[  579.849889][T25586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  579.867934][T25690] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6606'.
[  579.902700][T25586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  579.934244][  T168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  579.949306][  T168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  579.966769][  T168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  579.985426][  T168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  580.073975][T25705] loop6: detected capacity change from 0 to 512
[  580.080591][T25705] EXT4-fs: Ignoring removed i_version option
[  580.086627][T25705] EXT4-fs: Ignoring removed bh option
[  580.163716][T25705] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  580.179441][T25710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  580.187981][T25710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  580.201739][T25705] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  580.282409][T25717] lo speed is unknown, defaulting to 1000
[  580.502777][ T3420] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4
[  580.510486][ T3420] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2
[  580.681174][ T3420] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3
[  580.699268][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  581.035600][T25733] loop8: detected capacity change from 0 to 164
[  581.082673][T25733] Unable to read rock-ridge attributes
[  581.104327][ T3420] hid-generic 0000:3000000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  581.117779][T25733] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6620'.
[  581.144367][T25734] loop2: detected capacity change from 0 to 2048
[  581.168302][T25738] fido_id[25738]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  581.186908][T25737] loop6: detected capacity change from 0 to 764
[  581.203544][T25737] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  581.223921][T25734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  581.270744][T25734] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  581.351278][T25737] loop6: detected capacity change from 0 to 8192
[  581.354875][T25744] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6622'.
[  581.393276][T25734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  581.431197][T25734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.576695][T25753] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  581.583229][T25753] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  581.591461][T25753] vhci_hcd vhci_hcd.0: Device attached
[  581.617232][T25753] vhci_hcd vhci_hcd.0: port 0 already used
[  581.639807][T25755] vhci_hcd: connection closed
[  581.639920][   T12] vhci_hcd: stop threads
[  581.648932][   T12] vhci_hcd: release socket
[  581.653366][   T12] vhci_hcd: disconnect device
[  581.796570][T25765] loop4: detected capacity change from 0 to 1024
[  581.823281][T25765] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  581.833127][T25765] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  581.867462][T25765] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  581.888294][T25765] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: inode #5: comm syz.4.6629: unexpected bad inode w/o EXT4_IGET_BAD
[  581.921221][T25765] EXT4-fs (loop4): no journal found
[  581.926465][T25765] EXT4-fs (loop4): can't get journal size
[  581.942895][T25765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  581.996585][T24081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  582.036696][   T29] kauditd_printk_skb: 207 callbacks suppressed
[  582.036710][   T29] audit: type=1326 audit(1763668384.133:24105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25767 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  582.097551][   T29] audit: type=1326 audit(1763668384.173:24106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25767 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  582.121149][   T29] audit: type=1326 audit(1763668384.173:24107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25767 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  582.144814][   T29] audit: type=1326 audit(1763668384.173:24108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25767 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  582.168403][   T29] audit: type=1326 audit(1763668384.173:24109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25767 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  582.191912][   T29] audit: type=1326 audit(1763668384.173:24110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25767 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  582.215562][   T29] audit: type=1326 audit(1763668384.173:24111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25767 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  582.239243][   T29] audit: type=1326 audit(1763668384.173:24112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25767 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  582.262842][   T29] audit: type=1326 audit(1763668384.173:24113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25767 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  582.286409][   T29] audit: type=1326 audit(1763668384.173:24114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25767 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503f01f749 code=0x7ffc0000
[  582.378841][T25780] loop4: detected capacity change from 0 to 764
[  582.428620][T25780] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  582.538017][T25790] loop6: detected capacity change from 0 to 512
[  582.568450][   T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set
[  582.568538][T25780] loop4: detected capacity change from 0 to 8192
[  582.604084][T25790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  582.621168][   T12] EXT4-fs (loop2): Remounting filesystem read-only
[  582.741366][T25586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  582.836767][T25790] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6638'.
[  583.006631][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  583.119149][T25806] netlink: 124 bytes leftover after parsing attributes in process `syz.8.6644'.
[  583.234169][T25833] siw: device registration error -23
[  583.290829][T25835] loop6: detected capacity change from 0 to 1024
[  583.312518][T25835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  583.372222][T25841] loop4: detected capacity change from 0 to 512
[  583.381383][T25841] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  583.404767][T25841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  583.837674][T25853] lo speed is unknown, defaulting to 1000
[  583.845338][T25855] loop2: detected capacity change from 0 to 512
[  583.845706][T25855] EXT4-fs: Ignoring removed i_version option
[  583.845732][T25855] EXT4-fs: Ignoring removed bh option
[  583.869068][T25855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  583.869230][T25855] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  583.966004][T25586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.026956][T25867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.027096][T25867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.130913][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.189126][T25877] team0: Port device veth0_to_bridge added
[  584.228249][T25877] loop2: detected capacity change from 0 to 4096
[  584.238760][T25879] loop6: detected capacity change from 0 to 512
[  584.255517][T25879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  584.257581][T25877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  584.295513][T25586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.327068][T25884] loop2: detected capacity change from 0 to 1024
[  584.352415][T25884] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  584.362207][T25884] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  584.372124][T25884] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  584.392166][T25884] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: inode #5: comm syz.2.6670: unexpected bad inode w/o EXT4_IGET_BAD
[  584.415624][T25884] EXT4-fs (loop2): no journal found
[  584.420906][T25884] EXT4-fs (loop2): can't get journal size
[  584.443926][T25884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  584.458928][T24081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.479132][T25586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.546228][T25888] lo speed is unknown, defaulting to 1000
[  584.562522][T25892] loop8: detected capacity change from 0 to 512
[  584.574856][T25879] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6669'.
[  584.617996][T25892] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  584.663793][T20374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.685648][T25900] loop2: detected capacity change from 0 to 4096
[  584.718407][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.728055][T25900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  584.905699][T25892] netlink: 176 bytes leftover after parsing attributes in process `syz.8.6674'.
[  584.916235][T25586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.978417][T25912] lo speed is unknown, defaulting to 1000
[  585.059041][T17513] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.069867][T25918] loop4: detected capacity change from 0 to 512
[  585.100589][T25918] EXT4-fs: Ignoring removed i_version option
[  585.106791][T25918] EXT4-fs: Ignoring removed bh option
[  585.144207][T25918] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  585.352154][T25931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.390873][T25931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  585.419993][T25932] loop2: detected capacity change from 0 to 1024
[  585.469509][T25932] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  585.480504][T25932] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  585.547008][T25932] JBD2: no valid journal superblock found
[  585.552794][T25932] EXT4-fs (loop2): Could not load journal inode
[  585.645589][T25936] lo speed is unknown, defaulting to 1000
[  585.879324][T25940] loop4: detected capacity change from 0 to 4096
[  586.020295][T25950] loop8: detected capacity change from 0 to 164
[  586.026701][T25948] loop4: detected capacity change from 0 to 512
[  586.026791][T25950] ==================================================================
[  586.026811][T25950] BUG: KCSAN: data-race in _prb_read_valid / data_alloc
[  586.026830][T25950] 
[  586.026834][T25950] write to 0xffffffff868914c8 of 8 bytes by task 25948 on cpu 1:
[  586.026848][T25950]  data_alloc+0x274/0x2e0
[  586.026866][T25950]  prb_reserve+0x807/0xaf0
[  586.026881][T25950]  vprintk_store+0x56d/0x860
[  586.026898][T25950]  vprintk_emit+0x10d/0x580
[  586.026916][T25950]  vprintk_default+0x26/0x30
[  586.026939][T25950]  vprintk+0x1d/0x30
[  586.026963][T25950]  _printk+0x79/0xa0
[  586.026989][T25950]  set_capacity_and_notify+0x14c/0x1f0
[  586.027008][T25950]  loop_set_size+0x2e/0x70
[  586.027037][T25950]  loop_configure+0x828/0x9c0
[  586.027072][T25950]  lo_ioctl+0x1e1/0x12b0
[  586.027095][T25950]  blkdev_ioctl+0x356/0x440
[  586.027111][T25950]  __se_sys_ioctl+0xce/0x140
[  586.027129][T25950]  __x64_sys_ioctl+0x43/0x50
[  586.027148][T25950]  x64_sys_call+0x1816/0x3000
[  586.027168][T25950]  do_syscall_64+0xd2/0x200
[  586.027186][T25950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.027207][T25950] 
[  586.027213][T25950] read to 0xffffffff868914c8 of 16 bytes by task 25950 on cpu 0:
[  586.027229][T25950]  _prb_read_valid+0x1bc/0x920
[  586.027247][T25950]  prb_read_valid+0x3c/0x60
[  586.027266][T25950]  printk_get_next_message+0xc8/0x510
[  586.027291][T25950]  console_flush_all+0x290/0x6a0
[  586.027315][T25950]  console_unlock+0xa1/0x2e0
[  586.027332][T25950]  vprintk_emit+0x3b5/0x580
[  586.027349][T25950]  vprintk_default+0x26/0x30
[  586.027366][T25950]  vprintk+0x1d/0x30
[  586.027392][T25950]  _printk+0x79/0xa0
[  586.027420][T25950]  set_capacity_and_notify+0x14c/0x1f0
[  586.027441][T25950]  loop_set_size+0x2e/0x70
[  586.027464][T25950]  loop_configure+0x828/0x9c0
[  586.027491][T25950]  lo_ioctl+0x1e1/0x12b0
[  586.027517][T25950]  blkdev_ioctl+0x356/0x440
[  586.027535][T25950]  __se_sys_ioctl+0xce/0x140
[  586.027553][T25950]  __x64_sys_ioctl+0x43/0x50
[  586.027568][T25950]  x64_sys_call+0x1816/0x3000
[  586.027586][T25950]  do_syscall_64+0xd2/0x200
[  586.027602][T25950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.027620][T25950] 
[  586.027625][T25950] Reported by Kernel Concurrency Sanitizer on:
[  586.027638][T25950] CPU: 0 UID: 0 PID: 25950 Comm: syz.8.6692 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  586.027664][T25950] Tainted: [W]=WARN
[  586.027670][T25950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  586.027683][T25950] ==================================================================
[  586.341552][T25950] Unable to read rock-ridge attributes
[  586.350105][T25950] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6692'.
[  586.464674][T25948] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6689'.