last executing test programs:

12m5.378183592s ago: executing program 32 (id=97):
rt_sigsuspend(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = memfd_secret(0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffff9}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x14c17}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7ff}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200410c0}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'sit0\x00', r6, 0x40, 0x40, 0x5, 0xffff, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x67, 0x0, 0xf, 0x4, 0x0, @rand_addr=0x64010101, @empty, {[@rr={0x7, 0x13, 0x52, [@broadcast, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, @local]}]}}}}})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r7, &(0x7f0000000b80)='syz0\x00', 0x1ff)
close_range(r3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffffffffffffffff, 0x8000000000000000}, 0x0, 0x10000, 0x4, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf25"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000001a40)=ANY=[], 0x17)
write$binfmt_script(r8, &(0x7f00000000c0), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0x2e0, 0x1b8, 0xd0, 0xd0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private=0xa010101}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)
r10 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20)

11m7.478039885s ago: executing program 33 (id=874):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='contention_end\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000080)={[{@dioread_lock}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@usrquota}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@nobh}, {@grpid}], [], 0x2c}, 0x1, 0x4d8, &(0x7f0000000900)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000006c0)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x4c, 0x0, "1e88d70de91a9aa50c2979a5659901f246b7456fbd05f358b9ce135c1348bb0770fad6c76e59329e60c15ef9e9794a1db9e0006577eafab55731bb348046cdcd4f28dfc1430c1de0f7eb4fb91a7abc8f"}, 0xd8)
r7 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={<r8=>0x0, @empty, @private}, &(0x7f00000003c0)=0xc)
r9 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r7, &(0x7f0000000400)={0x2c, 0x1, r8, 0x2b, r9}, 0x10)

10m59.035573241s ago: executing program 34 (id=975):
r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000a40)="$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")
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
syz_pidfd_open(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}]}, &(0x7f0000000140)=0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0xa5, 0x10001, 0xe6b})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, <r5=>0xffffffffffffffff, {0x29}}, './file0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3, 0x0, 0x3ff}, 0x18)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc)
keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1)
sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r9], 0x104}}, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$RTC_WIE_OFF(r5, 0x7010)

10m37.293251881s ago: executing program 35 (id=1346):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x840000000002, 0x3, 0x9) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sysinfo(&(0x7f0000000300)=""/191)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', <r5=>0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
lseek(r6, 0x5, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xd, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x40890) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)={0x94, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2c}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}]}, 0x94}}, 0x0)
ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f00000001c0)='dvmrp0\x00'})
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) (async)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) (async)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2) (async)
r8 = syz_io_uring_setup(0x837, &(0x7f00000000c0)={0x0, 0x432a, 0x400, 0x2, 0x3d0}, &(0x7f0000000180)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x3}}) (async)
io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0)

10m7.904724126s ago: executing program 36 (id=2063):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)

9m58.355246523s ago: executing program 37 (id=1954):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x3, [0x400, 0x3], 0x4}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

9m56.414192177s ago: executing program 38 (id=2012):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380))

9m43.664976175s ago: executing program 39 (id=2175):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x38604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_setup(0x3, &(0x7f0000000180)=<r0=>0x0)
r1 = socket(0x1d, 0x2, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000102030000000000000000000a0000014400028006000340000000002c0001"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x24008040)
io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18)
open_tree(r3, &(0x7f0000000040)='./file0\x00', 0x81101)

9m40.514701711s ago: executing program 40 (id=2197):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0x7f, [0xfffffffd, 0x81], 0x8}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x500)

9m32.119764542s ago: executing program 41 (id=2303):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x38604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_setup(0x3, &(0x7f0000000180))
socket(0x1d, 0x2, 0x6)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000102030000000000000000000a0000014400028006000340000000002c0001"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x24008040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
open_tree(r3, &(0x7f0000000040)='./file0\x00', 0x81101)

9m27.814756364s ago: executing program 42 (id=2352):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)

9m20.375692529s ago: executing program 43 (id=2402):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0)

9m7.871952263s ago: executing program 44 (id=2536):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18)
r3 = socket(0x10, 0x3, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18)
connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x27dfdbfd, {}, [{0x4}]}, 0x18}}, 0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x47f8, 0x1e43, 0x0, 0x0, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000280), 0x8, 0x188341)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200))
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095360400000000009dbc10fee0a71cc0afc3967179620c6bdfd683aa2068ef31b15922"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
pidfd_send_signal(r7, 0x2, 0x0, 0x0)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf25010009000000000005000600000000000a0000000000000000000000000000000000000000000001fbffffff00000000020001000000003eb638e10c00000010050005005eb214000000000a000000000000000000000000000000000000000000000107000000000000000100080000000000"], 0x80}, 0x1, 0x7}, 0x14)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

9m1.428117488s ago: executing program 45 (id=2598):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18)
shmctl$IPC_RMID(0x0, 0x0)

9m0.519706319s ago: executing program 46 (id=2610):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_nolock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r0, 0x0, 0x40}, 0x18)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0xfe37, 0x0)

8m57.641223078s ago: executing program 47 (id=2625):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x38604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_setup(0x3, &(0x7f0000000180))
socket(0x1d, 0x2, 0x6)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000102030000000000000000000a0000014400028006000340000000002c0001"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x24008040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x81101)

8m38.146588362s ago: executing program 48 (id=2801):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x3, [0x400, 0x3], 0x4}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

8m3.886076026s ago: executing program 49 (id=3577):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x7c7c01, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
pipe2(&(0x7f00000006c0)={<r4=>0xffffffffffffffff}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f0000000000)=r6}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800000, 0x0, 0xfdfffffd, 0x5, 0x3ffd, 0x7})
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r10, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)

6m34.800686974s ago: executing program 50 (id=6093):
fcntl$notify(0xffffffffffffffff, 0x402, 0x5)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x9}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x40, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x3ff})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) (fail_nth: 1)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94)

6m29.634073852s ago: executing program 51 (id=6194):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000001c0), 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = io_uring_setup(0x7285, &(0x7f0000000340)={0x0, 0x890f, 0x1880, 0xfffffffd, 0xfffffffd})
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x19d5de, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x16084, 0x4005, 0x7, 0x0, 0x3, 0x1, 0xd, 0x0, 0x0, 0x0, 0x20006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24)
setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r3, 0x0, &(0x7f00000006c0)=""/46}, 0x20)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x2040400)
syz_open_dev$MSR(&(0x7f0000000000), 0x474a, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000100)=0x1)
preadv(r5, &(0x7f0000000840)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1, 0x8, 0xa76)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)}, 0x24000008)
r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x802)
writev(r6, &(0x7f0000000280)=[{&(0x7f0000000300)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
memfd_secret(0x80000)

5m57.283241464s ago: executing program 52 (id=6554):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20)
setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2)
r3 = socket$inet6_sctp(0xa, 0x6, 0x84)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001580)={[{@map_off}, {@session={'session', 0x3d, 0x17}, 0x0}, {@sbsector={'sbsector', 0x3d, 0x100000001}}, {@sbsector={'sbsector', 0x3d, 0x5}}, {@session={'session', 0x3d, 0x62}}, {@nojoliet, 0x41}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {}]}, 0xfa, 0x69f, &(0x7f0000000840)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={<r6=>0x0, 0x3ff}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000740)={r6, @in6={{0xa, 0x4e23, 0xffff, @private1, 0x7}}}, &(0x7f00000003c0)=0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r7, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, r8, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xf}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x48f00000}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xe7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40014}, 0x50070)

5m17.986153922s ago: executing program 53 (id=7895):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3b8, 0x2d0, 0x1e0, 0x1e8, 0x1e0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff)
socket$inet_sctp(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x20a8, 0x4005, 0x8000000b, 0x0, 0x3, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00'}, 0x10)
syz_pidfd_open(0x0, 0x0)
semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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")

3m28.632843913s ago: executing program 54 (id=9629):
r0 = syz_open_dev$usbfs(&(0x7f0000000540), 0x7, 0x80)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000008c0)=@urb_type_iso={0x0, {0x2, 0x1}, 0x80000000, 0x82, &(0x7f0000000800)="dbfad977aec1a4a4be8c7925ddc1e6190acd77a4720dac69f886043936fbd2b3ba7767446857af8bdb051387c5233d74f8ae7905755db4e682b603f547a1857f92a7b4f10fa8a0d1078ac4b57532f53f62b2b95e1e21644c6a7ee29d562ff28998a209292dc5e6324bfb34e109344bba272a65817d08522b1e6fce086830a09d562be3bf0c278624313b2a3a275b8c9e73a431b8", 0x94, 0x40, 0xdbf0, 0x10, 0x5, 0x9, &(0x7f0000000580)="7ef8ed21514e7848488417815ac4880f7a531096349d44fcded57c459435aac43302b134da8d0920cad9919ffdadd8057fc9a1790f4d", [{0xfffffffe, 0x9, 0x1}, {0xdb, 0x40}, {0x3, 0x7, 0x5}, {0x7f, 0x3, 0xe}, {0x100, 0x7, 0x2}, {0x3, 0x8, 0xadf}, {0x1, 0x10, 0xff}, {0x7, 0x2, 0x2}, {0x71c, 0x1, 0xd05}, {0xfffffffc, 0x3ff000, 0x5}, {0x2, 0x31d, 0x9}, {0xf4, 0x6, 0x21}, {0x3952, 0xfa7, 0x1ff}, {0x8, 0x1, 0x8}, {0x80000000, 0x6}, {0x8032, 0x0, 0x8000}]})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
syz_clone3(&(0x7f0000000200)={0x24204000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0], 0x1}, 0x58)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)={'team0\x00', <r4=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003010000f7ffffff0000000000200000", @ANYRES32=0x1, @ANYBLOB="02000000000000e2a4f557d5b8c287c56b3ce280", @ANYRES32=r4, @ANYRES32, @ANYBLOB="05000000050000000200"/28], 0x50)
creat(&(0x7f00000000c0)='./file0\x00', 0xa2)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f00000000c0)=ANY=[@ANYBLOB="646f74732c666d61736b3d3030303030568a303030303030303030303030363637352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relaxed,nodots,sys_immutable,nodots,showexec,flush,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
unshare(0x28000600)
r5 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r5, 0x180000000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000050010000500000005"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, &(0x7f0000000100), 0x0}, 0x20)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x432402)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}]}, &(0x7f00000002c0)=0x10)

1m44.558493864s ago: executing program 55 (id=12110):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)

1m26.350072078s ago: executing program 56 (id=12410):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = gettid()
exit(0xfffffffffffffff7)
tgkill(r1, r1, 0x36)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, 0x1fd)

1m24.970057057s ago: executing program 57 (id=12427):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x1007, 0x4, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0xd, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000d2d3, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x6, 0x3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3901, 0x5, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000041, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x20, 0x120]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x1947}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

57.935931406s ago: executing program 9 (id=12915):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)=""/99, 0x63)

57.934876236s ago: executing program 9 (id=12916):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x7, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@errors_remount}, {@inlinecrypt}, {@sysvgroups}, {@nodioread_nolock}]}, 0xbd, 0x7c0, &(0x7f0000000f80)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_aout(r2, 0x0, 0x20)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bf28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44089}, 0x8004)
close(0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
clock_gettime(0x0, &(0x7f0000000200))

57.713871588s ago: executing program 58 (id=12918):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}, 0x1, 0x0, 0x0, 0x10004045}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
socket(0x23, 0x1, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x4070bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffff, 0xfff3}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

57.653495455s ago: executing program 9 (id=12921):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8)

57.181839282s ago: executing program 9 (id=12926):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@private=0xa010101, @loopback, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x4, 0x6b}, 0x3c)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x200, 0xfe, 0x0, 0x1, 0x7, 0x2, 0x1, 0x0, 0xfffff7fc, 0x2, 0x0, 0x0, 0xfffffffa, [0xfffffffa, 0x80]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0)
keyctl$clear(0x7, 0xfffffffffffffffa)
ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000002f80)=""/61)

56.326833228s ago: executing program 9 (id=12934):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18)
r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
chmod(&(0x7f0000000040)='./file1\x00', 0x39)

55.886116752s ago: executing program 9 (id=12943):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r3=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)

55.885701282s ago: executing program 59 (id=12943):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r3=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)

55.79919911s ago: executing program 3 (id=12947):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

55.755985725s ago: executing program 3 (id=12948):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffc3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x2, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@deltaction={0xcc, 0x31, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x46cc}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c0}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4c845}, 0x0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84b}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x0, 0x0, 0x1, 0x2, 0x8, 0xffffffffffffffc0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x3, 0x6, 0x7, 0x5, 0xfffffffffffffffc, 0x8}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x7fffffff, 0xb5, &(0x7f0000000640)=""/181, 0x41000, 0x4, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x9, 0x1, 0xb4ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x80000000}, 0xe9)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000380)=ANY=[@ANYRES64=r12], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', r10, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r13}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

55.381204722s ago: executing program 3 (id=12951):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040))
timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_io_uring_setup(0x68fd, 0x0, &(0x7f0000000200)=<r3=>0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0xffffffff, 0xffeffc03}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000240)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0})
syz_io_uring_submit(r3, r6, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r10}, 0x10)
r11 = dup(r8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [], 0x6b}})

55.127804337s ago: executing program 3 (id=12952):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@private=0xa010101, @loopback, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x4, 0x6b}, 0x3c)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x200, 0xfe, 0x0, 0x1, 0x7, 0x2, 0x1, 0x0, 0xfffff7fc, 0x2, 0x0, 0x0, 0xfffffffa, [0xfffffffa, 0x80]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0)
keyctl$clear(0x7, 0xfffffffffffffffa)
ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000002f80)=""/61)

54.248106806s ago: executing program 3 (id=12956):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25080000001800028014000380100000140400030008000100050000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14)

53.842528717s ago: executing program 3 (id=12959):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000140)=0x70000000, 0x4)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
r1 = gettid()
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fallocate(0xffffffffffffffff, 0x2, 0x1, 0x2000000000000)
ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r3=>0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x9d}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(r1, 0xa, &(0x7f0000000140)={0x7, 0x800000000008}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

53.842203926s ago: executing program 60 (id=12959):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000140)=0x70000000, 0x4)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
r1 = gettid()
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fallocate(0xffffffffffffffff, 0x2, 0x1, 0x2000000000000)
ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r3=>0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x9d}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(r1, 0xa, &(0x7f0000000140)={0x7, 0x800000000008}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

50.579139113s ago: executing program 7 (id=13009):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000000000000000)

50.553851186s ago: executing program 7 (id=13010):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r6, 0x1, 0x6, @broadcast}, 0x10)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)

50.526492499s ago: executing program 7 (id=13012):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@private=0xa010101, @loopback, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x4, 0x6b}, 0x3c)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x200, 0xfe, 0x0, 0x1, 0x7, 0x2, 0x1, 0x0, 0xfffff7fc, 0x2, 0x0, 0x0, 0xfffffffa, [0xfffffffa, 0x80]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0)
keyctl$clear(0x7, 0xfffffffffffffffa)
ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000002f80)=""/61)

49.669798355s ago: executing program 7 (id=13038):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@private=0xa010101, @loopback, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x4, 0x6b}, 0x3c)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0)
keyctl$clear(0x7, 0xfffffffffffffffa)
ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000002f80)=""/61)

48.807827891s ago: executing program 7 (id=13052):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000002004740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

47.530184079s ago: executing program 7 (id=13074):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
creat(&(0x7f0000000000)='./file1\x00', 0x14c)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000041da5c0b000000000000af3f4a603e49085255c6ffd4b73c68a93c9c6cda0e22149366d49ee6190124f2d5b442df77430e3f498d0e668b021a79c459184dc859f8499749c9aa5cacd118de135cc11b0e32022cecec6d56e6291a0897b8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setresuid(0x0, 0x0, 0xee00)
setreuid(0xee00, 0xee00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x0, 0x7ffc0001}]})
statfs(&(0x7f0000000300)='./file1\x00', &(0x7f0000000540)=""/105)

47.51725887s ago: executing program 61 (id=13074):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
creat(&(0x7f0000000000)='./file1\x00', 0x14c)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000041da5c0b000000000000af3f4a603e49085255c6ffd4b73c68a93c9c6cda0e22149366d49ee6190124f2d5b442df77430e3f498d0e668b021a79c459184dc859f8499749c9aa5cacd118de135cc11b0e32022cecec6d56e6291a0897b8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setresuid(0x0, 0x0, 0xee00)
setreuid(0xee00, 0xee00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x0, 0x7ffc0001}]})
statfs(&(0x7f0000000300)='./file1\x00', &(0x7f0000000540)=""/105)

41.617336512s ago: executing program 6 (id=13176):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (fail_nth: 4)

40.376041176s ago: executing program 6 (id=13189):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0)
r2 = dup(r1)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xa8, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffffc}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xac9}, @ETHTOOL_A_RINGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xd7}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc811}, 0x40)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
ftruncate(r3, 0xee72)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
r4 = socket$netlink(0x10, 0x3, 0x14)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000002480)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r7, 0x0, r9, 0x0, 0x7, 0x9)
read(r8, &(0x7f0000032440)=""/102364, 0x18fdc)
write$P9_RAUTH(r9, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x4}}, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

40.318518162s ago: executing program 0 (id=13193):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x3, 0x0, 0x7ffc0003}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000780))
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="2000000076000d0b0000000100000000030000000b00002008000a"], 0x20}}, 0x0)
r4 = msgget$private(0x0, 0x790)
msgrcv(r4, 0x0, 0x0, 0x1, 0x0)
msgctl$IPC_RMID(r4, 0x0)
shmget(0x0, 0x3000, 0x1, &(0x7f0000003000/0x3000)=nil)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r7=>r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='kmem_cache_free\x00', r6, 0x0, 0x5ffffff}, 0x9)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
nanosleep(&(0x7f0000000380), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRESHEX=r7, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a911d79d8f9172823eb39d985ebc307c9d6dfdf9ac87f6bc9824506aea64bfa9bf348156c8bfadfd998f8395227e9944399d4337f11b92b5c30905b608ab05ae4d53cbb292ab6a90072d6d95e713136a194567bbe48dfb47bca2894d08328b66475614b85faaeea2fdbe413a6642379a63c438e887d4c7b4e5558eca9db9b728e0d1eed98e26d4df01d639100a12d24e4d5d38366aadd58613a5f8c1a857a3604a93f1bfb0a8ba1b8e90c48d08f73ca8a70a551a148ef62e344f3df8740d90e70bfa1f7bfc97c821a372e86aa6b777ac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x20, 0x7, &(0x7f0000000740)=ANY=[@ANYRESHEX=r8, @ANYRES32=r8, @ANYRES16=r1], &(0x7f0000000dc0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x4, 0xd, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x10, 0x1, 0x2, 0x7}})
r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', r9}, 0x18)
read$eventfd(r9, &(0x7f00000008c0), 0x8)

40.013054522s ago: executing program 0 (id=13194):
syz_usbip_server_init(0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000a0000000000000003400000850000002c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_usbip_server_init(0x5)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0xfd, 0x0, 0x0, 0x0, 0x4, 0x20280, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x1e, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000010ffffff0000000000000800fc0200000000000000000000000000012001000000000000000000000000000200"/58], 0x3a)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x5, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x44884}, 0x1)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
unlink(&(0x7f0000000100)='./file0/file1\x00')
sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475486dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4)

39.43689195s ago: executing program 6 (id=13203):
mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000)
mbind(&(0x7f0000a4c000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x0, 0x7)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000002c0)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb5d}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x14000000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r2, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x5c}], 0x1, 0x62, 0xfd4c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x34, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$inet6(0xa, 0x2, 0x0)
shutdown(r5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4)
r6 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=<r7=>0x0)
syz_io_uring_setup(0xa97, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000000)=<r8=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r10}, 0x10)
ioctl$KDGKBDIACR(r9, 0x4b4a, &(0x7f0000000000)=""/88)

39.23755076s ago: executing program 0 (id=13204):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x3, 0x0, 0x7ffc0003}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000780))
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="2000000076000d0b0000000100000000030000000b00002008000a"], 0x20}}, 0x0)
r4 = msgget$private(0x0, 0x790)
msgrcv(r4, 0x0, 0x0, 0x1, 0x0)
msgctl$IPC_RMID(r4, 0x0)
shmget(0x0, 0x3000, 0x1, &(0x7f0000003000/0x3000)=nil)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r7=>r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='kmem_cache_free\x00', r6, 0x0, 0x5ffffff}, 0x9)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
nanosleep(&(0x7f0000000380), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRESHEX=r7, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a911d79d8f9172823eb39d985ebc307c9d6dfdf9ac87f6bc9824506aea64bfa9bf348156c8bfadfd998f8395227e9944399d4337f11b92b5c30905b608ab05ae4d53cbb292ab6a90072d6d95e713136a194567bbe48dfb47bca2894d08328b66475614b85faaeea2fdbe413a6642379a63c438e887d4c7b4e5558eca9db9b728e0d1eed98e26d4df01d639100a12d24e4d5d38366aadd58613a5f8c1a857a3604a93f1bfb0a8ba1b8e90c48d08f73ca8a70a551a148ef62e344f3df8740d90e70bfa1f7bfc97c821a372e86aa6b777ac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x20, 0x7, &(0x7f0000000740)=ANY=[@ANYRESHEX=r8, @ANYRES32=r8, @ANYRES16=r1], &(0x7f0000000dc0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x4, 0xd, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x10, 0x1, 0x2, 0x7}})
r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', r9}, 0x18)
read$eventfd(r9, &(0x7f00000008c0), 0x8)

39.209797683s ago: executing program 6 (id=13206):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@private=0xa010101, @loopback, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x4, 0x6b}, 0x3c)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x200, 0xfe, 0x0, 0x1, 0x7, 0x2, 0x1, 0x0, 0xfffff7fc, 0x2, 0x0, 0x0, 0xfffffffa, [0xfffffffa, 0x80]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0)
keyctl$clear(0x7, 0xfffffffffffffffa)
ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000002f80)=""/61)

39.13585669s ago: executing program 0 (id=13208):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x50)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0)
sendfile(r1, r1, 0x0, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000780)={[], [{@permit_directio}, {@seclabel}, {@permit_directio}, {@hash}, {@fowner_gt}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, '802.15.4 MAC\x00'}}, {@fowner_lt}]}, 0x1, 0x512, &(0x7f0000001380)="$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")
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', <r3=>0x0, 0x700, 0x8000, 0x9, 0x4948, {{0x2b, 0x4, 0x2, 0x6, 0xac, 0x64, 0x0, 0x0, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x11}, {[@noop, @end, @timestamp_prespec={0x44, 0x2c, 0xe8, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x200}, {@multicast1, 0xd}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x3}, {@empty, 0xa87}, {@remote}]}, @lsrr={0x83, 0x13, 0xda, [@multicast2, @rand_addr=0x64010101, @remote, @local]}, @cipso={0x86, 0x55, 0x1, [{0x1, 0xc, "f88e2778f4bd0f03babd"}, {0x6, 0xd, "859b96f4c7e8e864becce6"}, {0x1, 0x7, "9a5ec86843"}, {0x7, 0x9, "9df12fbe08b0b9"}, {0x7, 0x11, "6ebecb5982b8837dfd3d4f634df596"}, {0x5, 0xc, "35fc1983b8f9e3a696ed"}, {0x6, 0x3, 'j'}, {0x1, 0x6, "d7eb61b8"}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@mcast1, 0x3b, r3})

39.074730147s ago: executing program 0 (id=13209):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18)
bind$inet6(r0, 0x0, 0x0)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, 0x0, 0x8010)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x4000084)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000001500)=0x10)
syz_read_part_table(0x1054, &(0x7f0000000000)="$eJzsz8EJwkAQBdC/2aCkC5uwEAUrsAivXmzGLrxYgd2IRDZB0AbUw3uHgT/DftjwU31yWSTZ1JbKY1qWadasurd4renasswxxzbGceg/C6drOdyGU6vNkOXrMt5re7+fu5Ptutudv/BFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh7zwAAAP//llkLfw==")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000d3cbc8b9230400"/28], 0x50)

39.029064391s ago: executing program 0 (id=13210):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804808, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x121a, &(0x7f00000020c0)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
preadv2(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000105e8e3f06000000181100001e117eb9803a97dcd63f573833c8c40c06964e3964d17865c488c1f109e28a076e5daf104e5543abc988add8a86c8ccb28b0cf15792b12176a590c4ec32ba158729c4f72a7262e658f3730f62401376db1ae136b34da7a", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000340)=""/139)

38.360245078s ago: executing program 6 (id=13216):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r1 = socket(0x15, 0x5, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0xe1e5e49166489937)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x10001}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@grpjquota}, {@sb={'sb', 0x3d, 0x64}}, {@orlov}, {@norecovery}, {@delalloc}, {@data_journal}]}, 0x0, 0x506, &(0x7f0000000200)="$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")
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a3000000000080007400000000004000380140000001100"], 0xc0}}, 0x2404c010)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x71b5, &(0x7f0000000040)={0x0, 0x9272, 0xc000, 0x1, 0xae})
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8054}, 0x4af584f715520309)
io_uring_enter(r3, 0xf00, 0x2, 0x17, 0x0, 0x0)

37.890408455s ago: executing program 6 (id=13226):
syz_usbip_server_init(0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000a0000000000000003400000850000002c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_usbip_server_init(0x5)
syz_usbip_server_init(0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0xfd, 0x0, 0x0, 0x0, 0x4, 0x20280, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x1e, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000010ffffff0000000000000800fc0200000000000000000000000000012001000000000000000000000000000200"/58], 0x3a)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x5, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x44884}, 0x1)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
unlink(&(0x7f0000000100)='./file0/file1\x00')
sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64", 0x7, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4)

37.880212466s ago: executing program 62 (id=13226):
syz_usbip_server_init(0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000a0000000000000003400000850000002c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_usbip_server_init(0x5)
syz_usbip_server_init(0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0xfd, 0x0, 0x0, 0x0, 0x4, 0x20280, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x1e, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000010ffffff0000000000000800fc0200000000000000000000000000012001000000000000000000000000000200"/58], 0x3a)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x5, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x44884}, 0x1)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
unlink(&(0x7f0000000100)='./file0/file1\x00')
sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64", 0x7, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4)

24.023783505s ago: executing program 63 (id=13210):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804808, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x121a, &(0x7f00000020c0)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
preadv2(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000105e8e3f06000000181100001e117eb9803a97dcd63f573833c8c40c06964e3964d17865c488c1f109e28a076e5daf104e5543abc988add8a86c8ccb28b0cf15792b12176a590c4ec32ba158729c4f72a7262e658f3730f62401376db1ae136b34da7a", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000340)=""/139)

1.669905603s ago: executing program 5 (id=14002):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x0, 0x35, 0x0, 0x1, 0x4}, 0x28)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x40, 0x10, 0x8, 0x4, {{0x17, 0x4, 0x1, 0x33, 0x5c, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @remote, {[@ssrr={0x89, 0x7, 0x98, [@multicast2]}, @timestamp_addr={0x44, 0x2c, 0xe4, 0x1, 0x1, [{@local, 0x4}, {@local, 0x80000000}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x9}, {@loopback, 0x800}]}, @timestamp_prespec={0x44, 0x14, 0x4f, 0x3, 0xa, [{@empty, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x438b}]}]}}}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0)
write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xffa8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

1.612510669s ago: executing program 5 (id=14003):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000a40)='./file0/../file0\x00', 0x0, 0x3cdc19, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x401, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

1.586181182s ago: executing program 5 (id=14005):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080))

1.551894495s ago: executing program 5 (id=14007):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
close_range(r0, r0, 0x0)

1.534928437s ago: executing program 5 (id=14009):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)

1.512445899s ago: executing program 5 (id=14010):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r2, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r3}], 0x200000000000000e, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8)
dup2(r0, r2)
tkill(r1, 0x20)
fcntl$setown(r3, 0x8, r1)
tkill(r1, 0x13)

1.043398346s ago: executing program 8 (id=14025):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f00000000c0))
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00'})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r9}, 0x18)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r10}, 0x18)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$tipc(r11, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0)

1.036926176s ago: executing program 2 (id=14027):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x114b00, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r1=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000380)={0x2c, 0x6, r1, 0x1}, 0x10)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}})
accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000300)=0x1c)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffdfd)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
sigaltstack(0x0, 0x0)

1.014829469s ago: executing program 2 (id=14029):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
socket$inet6_icmp(0xa, 0x2, 0x3a)
epoll_create1(0x80000)

1.00239304s ago: executing program 2 (id=14030):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080))

983.583191ms ago: executing program 2 (id=14031):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@private=0xa010101, @loopback, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x4, 0x6b}, 0x3c)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x200, 0xfe, 0x0, 0x1, 0x7, 0x2, 0x1, 0x0, 0xfffff7fc, 0x2, 0x0, 0x0, 0xfffffffa, [0xfffffffa, 0x80]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0)
keyctl$clear(0x7, 0xfffffffffffffffa)
ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000002f80)=""/61)

548.712125ms ago: executing program 4 (id=14039):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

532.071207ms ago: executing program 4 (id=14040):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x114b00, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r1=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000380)={0x2c, 0x6, r1, 0x1}, 0x10)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}})
accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000300)=0x1c)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffdfd)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sigaltstack(0x0, 0x0)

504.32872ms ago: executing program 4 (id=14041):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
socket$inet6_icmp(0xa, 0x2, 0x3a)
epoll_create1(0x80000)

484.598231ms ago: executing program 4 (id=14042):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0)

398.68798ms ago: executing program 1 (id=14044):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0)
r2 = dup(r1)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xa8, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffffc}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xac9}, @ETHTOOL_A_RINGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xd7}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc811}, 0x40)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
ftruncate(r3, 0xee72)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
socket$netlink(0x10, 0x3, 0x14)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
pipe(&(0x7f0000002480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
read(r5, &(0x7f0000032440)=""/102364, 0x18fdc)
write$P9_RAUTH(r6, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x4}}, 0x14)

277.006852ms ago: executing program 1 (id=14045):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080))

253.862385ms ago: executing program 1 (id=14046):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
close_range(r0, r0, 0x0)

239.029156ms ago: executing program 1 (id=14047):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
unshare(0x2c020400)
r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0x2000000000000}, 0x18)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001100), &(0x7f0000001140)=0x10, 0x80400)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085006d28b5a4bba683bb0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa3)

187.714231ms ago: executing program 8 (id=14048):
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004854)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f00000003c0)}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r5, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}], 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000080)=0xb6, 0x4)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f00000004c0), 0x10)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x3200c94, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d64ab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3000000"], 0x1, 0x2b9, &(0x7f0000000fc0)="$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")
r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r8, &(0x7f00000004c0)='./file0\x00', 0x2)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="0500000003000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8=r2, @ANYRES64=0x2710], 0x38}, 0x300}, 0x400c040)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="0000000000000000aad324c80000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

185.437211ms ago: executing program 1 (id=14049):
r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0)
r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r2}, 0x10)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', '', [], 0xa, "651f25f7ea8ab3447337fa674798bf949e2f9a7fc7e7"}, 0x1a)
r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x100000002)

142.559785ms ago: executing program 1 (id=14050):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000140)=0x70000000, 0x4)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
r1 = gettid()
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fallocate(0xffffffffffffffff, 0x2, 0x1, 0x2000000000000)
ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r3=>0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x9d}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(r1, 0xa, &(0x7f0000000140)={0x7, 0x800000000008}, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

142.099226ms ago: executing program 8 (id=14051):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2}, 0x18)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000002004740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

108.467729ms ago: executing program 2 (id=14052):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x114b00, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r1=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000380)={0x2c, 0x6, r1, 0x1}, 0x10)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}})
accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000300)=0x1c)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffdfd)
sigaltstack(0x0, 0x0)

99.93265ms ago: executing program 8 (id=14053):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
socket$inet6_icmp(0xa, 0x2, 0x3a)
epoll_create1(0x80000)

76.225762ms ago: executing program 8 (id=14054):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x123042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000)

75.825262ms ago: executing program 2 (id=14055):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xa6c3, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003"], 0x110}}, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xda25]}, 0x8)
r3 = dup(0xffffffffffffffff)
ioctl$GIO_UNISCRNMAP(r3, 0x43403d0e, 0x0)

48.527795ms ago: executing program 4 (id=14056):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x35, 0x0, 0x1, 0x4}, 0x28)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x40, 0x10, 0x8, 0x4, {{0x17, 0x4, 0x1, 0x33, 0x5c, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @remote, {[@ssrr={0x89, 0x7, 0x98, [@multicast2]}, @timestamp_addr={0x44, 0x2c, 0xe4, 0x1, 0x1, [{@local, 0x4}, {@local, 0x80000000}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x9}, {@loopback, 0x800}]}, @timestamp_prespec={0x44, 0x14, 0x4f, 0x3, 0xa, [{@empty, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x438b}]}]}}}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0)
write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xffa8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

8.691279ms ago: executing program 4 (id=14057):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0)
r2 = dup(r1)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xa8, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffffc}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xac9}, @ETHTOOL_A_RINGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xd7}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc811}, 0x40)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
ftruncate(r3, 0xee72)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
socket$netlink(0x10, 0x3, 0x14)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
pipe(&(0x7f0000002480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
read(r5, &(0x7f0000032440)=""/102364, 0x18fdc)
write$P9_RAUTH(r6, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x4}}, 0x14)

0s ago: executing program 8 (id=14058):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f00000000c0))
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r8}, 0x18)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r9}, 0x18)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

709.992792][T18663] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.13024: bg 0: block 40: padding at end of block bitmap is not set
[  710.007359][T18663] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  710.017708][T18663] EXT4-fs (loop5): 1 truncate cleaned up
[  710.023726][T18663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  710.039996][T18663] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.13024: corrupted xattr block 31: invalid header
[  710.056608][T18663] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=16
[  710.065734][T18663] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.13024: corrupted xattr block 31: invalid header
[  710.079402][T18663] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=16
[  710.088769][T18663] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.13024: bad symlink.
[  710.089486][T18671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13026'.
[  710.126583][T17063] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  710.228830][T18682] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13029'.
[  710.242339][T18682] syz0: rxe_newlink: already configured on bond_slave_0
[  710.319261][T18697] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  710.362813][T18690] lo speed is unknown, defaulting to 1000
[  710.373298][T18004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  710.444054][T18735] loop7: detected capacity change from 0 to 512
[  710.471982][T18735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  710.493038][T18740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  710.501783][T18740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  710.505269][T18735] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #18: comm syz.7.13038: corrupted inode contents
[  710.522059][T18735] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #18: comm syz.7.13038: mark_inode_dirty error
[  710.534260][T18735] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #18: comm syz.7.13038: corrupted inode contents
[  710.546363][T18735] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2996: inode #18: comm syz.7.13038: mark_inode_dirty error
[  710.558561][T18735] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #18: comm syz.7.13038: mark inode dirty (error -117)
[  710.571988][T18735] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117)
[  710.909952][T18746] /dev/loop0: Can't lookup blockdev
[  710.982284][T18752] /dev/loop0: Can't lookup blockdev
[  711.043527][T18757] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  711.110517][T18764] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  711.232835][T18004] EXT4-fs error (device loop7): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size
[  711.244220][T18004] EXT4-fs error (device loop7): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size
[  711.256499][T18004] EXT4-fs error (device loop7): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size
[  711.267468][T18004] EXT4-fs error (device loop7): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size
[  711.278516][T18004] EXT4-fs error (device loop7): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size
[  711.746287][T18807] __nla_validate_parse: 3 callbacks suppressed
[  711.746302][T18807] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13064'.
[  711.763879][T18807] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  712.039617][T18820] program syz.1.13070 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  712.089950][T18826] 8021q: adding VLAN 0 to HW filter on device bond0
[  712.169703][T18864] netlink: 188 bytes leftover after parsing attributes in process `syz.0.13068'.
[  712.211909][T18863] SELinux: failed to load policy
[  712.369129][ T3487] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  712.375251][ T4034] Bluetooth: hci0: command 0x1003 tx timeout
[  712.379162][T32052] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  712.449077][ T3641] usb usb4-port1: attempt power cycle
[  712.482930][T11882] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.489240][T18004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  712.576129][T11882] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.612851][T11882] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.672097][T11882] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.683457][T18876] lo speed is unknown, defaulting to 1000
[  712.764815][T11882] bridge_slave_1: left allmulticast mode
[  712.770531][T11882] bridge_slave_1: left promiscuous mode
[  712.776163][T11882] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.783904][T11882] bridge_slave_0: left allmulticast mode
[  712.789814][T11882] bridge_slave_0: left promiscuous mode
[  712.795632][T11882] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.871053][T11882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  712.881098][T11882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  712.890465][T11882] bond0 (unregistering): Released all slaves
[  712.901800][T18876] chnl_net:caif_netlink_parms(): no params data found
[  712.936191][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13077'.
[  712.973719][T18876] bridge0: port 1(bridge_slave_0) entered blocking state
[  712.980873][T18876] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.998428][T18876] bridge_slave_0: entered allmulticast mode
[  713.012877][T18876] bridge_slave_0: entered promiscuous mode
[  713.020474][T18876] bridge0: port 2(bridge_slave_1) entered blocking state
[  713.027639][T18876] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.034972][T18876] bridge_slave_1: entered allmulticast mode
[  713.041429][T18876] bridge_slave_1: entered promiscuous mode
[  713.092189][T11882] hsr_slave_0: left promiscuous mode
[  713.098107][T11882] hsr_slave_1: left promiscuous mode
[  713.106448][T11882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  713.113929][T11882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  713.121616][T11882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  713.129140][T11882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  713.141655][T11882] veth1_macvtap: left promiscuous mode
[  713.147249][T11882] veth0_macvtap: left promiscuous mode
[  713.152935][T11882] veth1_vlan: left promiscuous mode
[  713.158452][T11882] veth0_vlan: left promiscuous mode
[  713.244775][T11882] team0 (unregistering): Port device team_slave_1 removed
[  713.257737][T11882] team0 (unregistering): Port device team_slave_0 removed
[  713.315600][T19074] FAULT_INJECTION: forcing a failure.
[  713.315600][T19074] name failslab, interval 1, probability 0, space 0, times 0
[  713.328297][T19074] CPU: 1 UID: 0 PID: 19074 Comm: syz.1.13080 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  713.328363][T19074] Tainted: [W]=WARN
[  713.328370][T19074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  713.328487][T19074] Call Trace:
[  713.328549][T19074]  <TASK>
[  713.328558][T19074]  __dump_stack+0x1d/0x30
[  713.328582][T19074]  dump_stack_lvl+0xe8/0x140
[  713.328603][T19074]  dump_stack+0x15/0x1b
[  713.328622][T19074]  should_fail_ex+0x265/0x280
[  713.328767][T19074]  should_failslab+0x8c/0xb0
[  713.328797][T19074]  kmem_cache_alloc_noprof+0x50/0x480
[  713.328829][T19074]  ? create_new_namespaces+0x3c/0x3d0
[  713.328897][T19074]  ? __rcu_read_unlock+0x4f/0x70
[  713.328925][T19074]  create_new_namespaces+0x3c/0x3d0
[  713.328961][T19074]  __se_sys_setns+0x199/0xef0
[  713.329004][T19074]  __x64_sys_setns+0x31/0x40
[  713.329022][T19074]  x64_sys_call+0x2b1a/0x3000
[  713.329048][T19074]  do_syscall_64+0xd2/0x200
[  713.329072][T19074]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  713.329133][T19074]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  713.329226][T19074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.329246][T19074] RIP: 0033:0x7f56ea23f6c9
[  713.329261][T19074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  713.329278][T19074] RSP: 002b:00007f56e8ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134
[  713.329298][T19074] RAX: ffffffffffffffda RBX: 00007f56ea495fa0 RCX: 00007f56ea23f6c9
[  713.329309][T19074] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000003
[  713.329382][T19074] RBP: 00007f56e8ca7090 R08: 0000000000000000 R09: 0000000000000000
[  713.329394][T19074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  713.329405][T19074] R13: 00007f56ea496038 R14: 00007f56ea495fa0 R15: 00007ffc65862b68
[  713.329423][T19074]  </TASK>
[  713.528048][T18876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  713.568269][T18876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  713.615583][T18876] team0: Port device team_slave_0 added
[  713.624626][T19092] SELinux: failed to load policy
[  713.631374][T18876] team0: Port device team_slave_1 added
[  713.663729][T19128] netlink: 96 bytes leftover after parsing attributes in process `syz.5.13084'.
[  713.673266][T18876] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.680362][T18876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  713.706324][T18876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  713.718585][T18876] batman_adv: batadv0: Adding interface: batadv_slave_1
[  713.725636][T18876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  713.751806][T18876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  713.790838][T32052] Bluetooth: hci0: sending frame failed (-49)
[  713.796973][ T8590] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  713.824088][T18876] hsr_slave_0: entered promiscuous mode
[  713.842762][T18876] hsr_slave_1: entered promiscuous mode
[  713.858580][T18876] debugfs: 'hsr0' already exists in 'hsr'
[  713.864338][T18876] Cannot create hsr debugfs directory
[  713.925888][T19194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13089'.
[  714.045287][T19252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13091'.
[  714.110742][T19262] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13093'.
[  714.121799][T19262] syz0: rxe_newlink: already configured on bond_slave_0
[  714.150882][T19274] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13096'.
[  714.172727][T18876] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  714.181454][T18876] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  714.191878][T18876] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  714.265085][T18876] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  714.291146][T19289] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  714.297704][T19289] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  714.305159][T19289] vhci_hcd vhci_hcd.0: Device attached
[  714.321407][T19289] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  714.327961][T19289] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  714.335688][T19289] vhci_hcd vhci_hcd.0: Device attached
[  714.342563][T19289] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  714.381757][T19287] syz!: rxe_newlink: already configured on team_slave_0
[  714.425777][T18876] 8021q: adding VLAN 0 to HW filter on device bond0
[  714.447262][T19305] can0: slcan on ttyS3.
[  714.459923][T18876] 8021q: adding VLAN 0 to HW filter on device team0
[  714.488688][   T29] kauditd_printk_skb: 543 callbacks suppressed
[  714.488705][   T29] audit: type=1326 audit(1482.484:86844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19288 comm="syz.1.13098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ea23f6c9 code=0x7ffc0000
[  714.518125][   T29] audit: type=1326 audit(1482.484:86845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19288 comm="syz.1.13098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f56ea23f6c9 code=0x7ffc0000
[  714.541259][   T29] audit: type=1326 audit(1482.484:86846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19288 comm="syz.1.13098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ea23f6c9 code=0x7ffc0000
[  714.564425][   T29] audit: type=1326 audit(1482.484:86847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19288 comm="syz.1.13098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56ea23f6c9 code=0x7ffc0000
[  714.588546][ T3641] usb 4-1: SetAddress Request (45) to port 0
[  714.595926][T19289] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10)
[  714.602586][T19289] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  714.610122][T19289] vhci_hcd vhci_hcd.0: Device attached
[  714.615788][ T3641] usb 4-1: new SuperSpeed USB device number 45 using vhci_hcd
[  714.629279][T11890] bridge0: port 1(bridge_slave_0) entered blocking state
[  714.635815][   T29] audit: type=1326 audit(1482.644:86848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19313 comm="syz.8.13100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  714.636355][T11890] bridge0: port 1(bridge_slave_0) entered forwarding state
[  714.659495][   T29] audit: type=1326 audit(1482.644:86849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19313 comm="syz.8.13100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  714.699251][T10555] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.703072][   T29] audit: type=1326 audit(1482.674:86850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19313 comm="syz.8.13100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  714.706323][T10555] bridge0: port 2(bridge_slave_1) entered forwarding state
[  714.729542][   T29] audit: type=1326 audit(1482.674:86851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19313 comm="syz.8.13100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  714.759883][   T29] audit: type=1326 audit(1482.674:86852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19313 comm="syz.8.13100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  714.787911][T19305] can0 (unregistered): slcan off ttyS3.
[  714.789657][T18876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  714.804050][T18876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  714.807759][T19318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13101'.
[  714.828741][   T29] audit: type=1326 audit(1482.804:86853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19288 comm="syz.1.13098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ea23f6c9 code=0x7ffc0000
[  714.867544][T19318] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  714.898239][T19302] vhci_hcd: connection closed
[  714.898438][T19290] vhci_hcd: connection closed
[  714.898569][T10555] vhci_hcd: stop threads
[  714.903186][T19295] vhci_hcd: connection reset by peer
[  714.907849][T10555] vhci_hcd: release socket
[  714.907954][T10555] vhci_hcd: disconnect device
[  714.922492][T18876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  714.936243][T10555] vhci_hcd: stop threads
[  714.940679][T10555] vhci_hcd: release socket
[  714.945285][T10555] vhci_hcd: disconnect device
[  714.951284][T10555] vhci_hcd: stop threads
[  714.955543][T10555] vhci_hcd: release socket
[  714.959982][T10555] vhci_hcd: disconnect device
[  715.093824][T19347] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13105'.
[  715.096750][T18876] veth0_vlan: entered promiscuous mode
[  715.119182][T18876] veth1_vlan: entered promiscuous mode
[  715.155350][T18876] veth0_macvtap: entered promiscuous mode
[  715.171788][T18876] veth1_macvtap: entered promiscuous mode
[  715.198961][T18876] batman_adv: batadv0: Interface activated: batadv_slave_0
[  715.218286][T18876] batman_adv: batadv0: Interface activated: batadv_slave_1
[  715.253541][T19357] SELinux: failed to load policy
[  715.259909][T10549] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  715.284396][T10549] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  715.304190][T10549] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  715.313687][T10549] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  715.329114][T19362] program syz.5.13110 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  715.389461][T19370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  715.398300][T19370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  715.398687][T19375] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  715.731686][T19399] can0: slcan on ptm0.
[  715.837468][T19398] can0 (unregistered): slcan off ptm0.
[  715.949385][T19410] loop6: detected capacity change from 0 to 512
[  715.956629][T19410] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  715.987899][T19410] EXT4-fs (loop6): 1 truncate cleaned up
[  715.994197][T19410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  716.013016][T19410] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  716.031876][T18876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  716.138148][T19423] can0: slcan on ptm0.
[  716.277389][T19422] can0 (unregistered): slcan off ptm0.
[  716.286435][T19429] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  716.961790][T19470] loop6: detected capacity change from 0 to 512
[  716.968455][T19470] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  716.980425][T19470] EXT4-fs (loop6): 1 truncate cleaned up
[  716.986584][T19470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  717.007448][T18876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  717.042375][T19476] loop6: detected capacity change from 0 to 164
[  717.288572][T19499] __nla_validate_parse: 6 callbacks suppressed
[  717.288587][T19499] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13154'.
[  717.304180][ T3644] IPVS: starting estimator thread 0...
[  717.320795][T19485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13148'.
[  717.371740][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13160'.
[  717.396495][T19503] IPVS: using max 3024 ests per chain, 151200 per kthread
[  717.409445][T19516] FAULT_INJECTION: forcing a failure.
[  717.409445][T19516] name failslab, interval 1, probability 0, space 0, times 0
[  717.422178][T19516] CPU: 0 UID: 0 PID: 19516 Comm: syz.1.13161 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  717.422245][T19516] Tainted: [W]=WARN
[  717.422249][T19516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  717.422256][T19516] Call Trace:
[  717.422261][T19516]  <TASK>
[  717.422267][T19516]  __dump_stack+0x1d/0x30
[  717.422282][T19516]  dump_stack_lvl+0xe8/0x140
[  717.422294][T19516]  dump_stack+0x15/0x1b
[  717.422354][T19516]  should_fail_ex+0x265/0x280
[  717.422374][T19516]  should_failslab+0x8c/0xb0
[  717.422399][T19516]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[  717.422418][T19516]  ? sidtab_sid2str_get+0xa0/0x130
[  717.422436][T19516]  kmemdup_noprof+0x2b/0x70
[  717.422497][T19516]  sidtab_sid2str_get+0xa0/0x130
[  717.422536][T19516]  security_sid_to_context_core+0x1eb/0x2e0
[  717.422568][T19516]  security_sid_to_context+0x27/0x40
[  717.422650][T19516]  selinux_lsmprop_to_secctx+0x67/0xf0
[  717.422677][T19516]  security_lsmprop_to_secctx+0x1a3/0x1c0
[  717.422692][T19516]  audit_log_subj_ctx+0xa4/0x3e0
[  717.422705][T19516]  ? skb_put+0xa9/0xf0
[  717.422812][T19516]  audit_log_task_context+0x48/0x70
[  717.422828][T19516]  audit_log_task+0xf4/0x250
[  717.422902][T19516]  audit_seccomp+0x61/0x100
[  717.422920][T19516]  ? __seccomp_filter+0x82d/0x1250
[  717.422936][T19516]  __seccomp_filter+0x83e/0x1250
[  717.422997][T19516]  ? kmem_cache_free+0xe4/0x3d0
[  717.423083][T19516]  __secure_computing+0x82/0x150
[  717.423099][T19516]  syscall_trace_enter+0xcf/0x1e0
[  717.423117][T19516]  do_syscall_64+0xac/0x200
[  717.423171][T19516]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  717.423188][T19516]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  717.423207][T19516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.423235][T19516] RIP: 0033:0x7f56ea23e0dc
[  717.423246][T19516] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  717.423258][T19516] RSP: 002b:00007f56e8ca7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  717.423271][T19516] RAX: ffffffffffffffda RBX: 00007f56ea495fa0 RCX: 00007f56ea23e0dc
[  717.423278][T19516] RDX: 000000000000000f RSI: 00007f56e8ca70a0 RDI: 0000000000000006
[  717.423286][T19516] RBP: 00007f56e8ca7090 R08: 0000000000000000 R09: 0000000000000000
[  717.423296][T19516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  717.423311][T19516] R13: 00007f56ea496038 R14: 00007f56ea495fa0 R15: 00007ffc65862b68
[  717.423324][T19516]  </TASK>
[  717.700284][T19524] sg_write: data in/out 28/42 bytes for SCSI command 0x0-- guessing data in;
[  717.700284][T19524]    program syz.1.13164 not setting count and/or reply_len properly
[  717.921224][T19534] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13168'.
[  717.931510][ T3643] IPVS: starting estimator thread 0...
[  717.988654][T19513] Set syz1 is full, maxelem 65536 reached
[  718.026175][T19535] IPVS: using max 5088 ests per chain, 254400 per kthread
[  718.269499][T19554] can0: slcan on ptm0.
[  718.526012][T19553] can0 (unregistered): slcan off ptm0.
[  718.540193][T19566] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  718.546759][T19566] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  718.554368][T19566] vhci_hcd vhci_hcd.0: Device attached
[  718.567265][T19571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13178'.
[  718.579504][T19566] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  718.586083][T19566] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  718.593905][T19566] vhci_hcd vhci_hcd.0: Device attached
[  718.599534][T19571] netlink: 'syz.5.13178': attribute type 10 has an invalid length.
[  718.610389][T19571] 8021q: adding VLAN 0 to HW filter on device team0
[  718.617959][T19566] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  718.628251][T19571] bond0: (slave team0): Enslaving as an active interface with an up link
[  718.637897][T19566] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10)
[  718.644543][T19566] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  718.652065][T19566] vhci_hcd vhci_hcd.0: Device attached
[  718.662865][T19571] netlink: 'syz.5.13178': attribute type 1 has an invalid length.
[  718.665146][T19566] can0: slcan on ttyS3.
[  718.686542][T19574] FAULT_INJECTION: forcing a failure.
[  718.686542][T19574] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  718.699684][T19574] CPU: 1 UID: 0 PID: 19574 Comm: syz.6.13176 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  718.699740][T19574] Tainted: [W]=WARN
[  718.699746][T19574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  718.699759][T19574] Call Trace:
[  718.699764][T19574]  <TASK>
[  718.699772][T19574]  __dump_stack+0x1d/0x30
[  718.699792][T19574]  dump_stack_lvl+0xe8/0x140
[  718.699869][T19574]  dump_stack+0x15/0x1b
[  718.699886][T19574]  should_fail_ex+0x265/0x280
[  718.699988][T19574]  should_fail+0xb/0x20
[  718.700023][T19574]  should_fail_usercopy+0x1a/0x20
[  718.700045][T19574]  _copy_from_user+0x1c/0xb0
[  718.700090][T19574]  __se_sys_mount+0x10d/0x2e0
[  718.700117][T19574]  ? fput+0x8f/0xc0
[  718.700134][T19574]  ? ksys_write+0x192/0x1a0
[  718.700176][T19574]  __x64_sys_mount+0x67/0x80
[  718.700199][T19574]  x64_sys_call+0x2b51/0x3000
[  718.700219][T19574]  do_syscall_64+0xd2/0x200
[  718.700320][T19574]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  718.700347][T19574]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  718.700378][T19574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.700401][T19574] RIP: 0033:0x7efd7dc3f6c9
[  718.700446][T19574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  718.700466][T19574] RSP: 002b:00007efd7c65d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  718.700488][T19574] RAX: ffffffffffffffda RBX: 00007efd7de96180 RCX: 00007efd7dc3f6c9
[  718.700500][T19574] RDX: 0000200000000280 RSI: 00002000000002c0 RDI: 0000000000000000
[  718.700513][T19574] RBP: 00007efd7c65d090 R08: 0000200000000540 R09: 0000000000000000
[  718.700528][T19574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  718.700553][T19574] R13: 00007efd7de96218 R14: 00007efd7de96180 R15: 00007ffedf282d98
[  718.700573][T19574]  </TASK>
[  718.891629][   T23] vhci_hcd: vhci_device speed not set
[  718.916051][T19566] can0 (unregistered): slcan off ttyS3.
[  718.965751][   T23] usb 1-1: new full-speed USB device number 30 using vhci_hcd
[  718.970746][T19592] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13180'.
[  718.998476][T19594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  719.024086][T19567] vhci_hcd: connection reset by peer
[  719.024106][T19575] vhci_hcd: connection closed
[  719.032117][T19572] vhci_hcd: connection closed
[  719.032129][T10537] vhci_hcd: stop threads
[  719.032139][T10537] vhci_hcd: release socket
[  719.050273][T10537] vhci_hcd: disconnect device
[  719.089165][T10537] vhci_hcd: stop threads
[  719.093429][T10537] vhci_hcd: release socket
[  719.097869][T10537] vhci_hcd: disconnect device
[  719.105396][T10537] vhci_hcd: stop threads
[  719.109722][T10537] vhci_hcd: release socket
[  719.114160][T10537] vhci_hcd: disconnect device
[  719.151761][T19601] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13183'.
[  719.187550][T19603] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13184'.
[  719.198578][T19603] syz0: rxe_newlink: already configured on bond_slave_0
[  719.223993][T19605] FAULT_INJECTION: forcing a failure.
[  719.223993][T19605] name failslab, interval 1, probability 0, space 0, times 0
[  719.236779][T19605] CPU: 0 UID: 0 PID: 19605 Comm: syz.1.13185 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  719.236846][T19605] Tainted: [W]=WARN
[  719.236852][T19605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  719.236864][T19605] Call Trace:
[  719.236870][T19605]  <TASK>
[  719.236878][T19605]  __dump_stack+0x1d/0x30
[  719.236899][T19605]  dump_stack_lvl+0xe8/0x140
[  719.236919][T19605]  dump_stack+0x15/0x1b
[  719.236938][T19605]  should_fail_ex+0x265/0x280
[  719.236987][T19605]  should_failslab+0x8c/0xb0
[  719.237016][T19605]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  719.237043][T19605]  ? __alloc_skb+0x101/0x320
[  719.237096][T19605]  __alloc_skb+0x101/0x320
[  719.237207][T19605]  netlink_alloc_large_skb+0xbf/0xf0
[  719.237309][T19605]  netlink_sendmsg+0x3cf/0x6b0
[  719.237359][T19605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  719.237382][T19605]  __sock_sendmsg+0x145/0x180
[  719.237408][T19605]  ____sys_sendmsg+0x31e/0x4e0
[  719.237427][T19605]  ___sys_sendmsg+0x17b/0x1d0
[  719.237462][T19605]  __x64_sys_sendmsg+0xd4/0x160
[  719.237521][T19605]  x64_sys_call+0x191e/0x3000
[  719.237546][T19605]  do_syscall_64+0xd2/0x200
[  719.237622][T19605]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  719.237653][T19605]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  719.237745][T19605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.237766][T19605] RIP: 0033:0x7f56ea23f6c9
[  719.237783][T19605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  719.237838][T19605] RSP: 002b:00007f56e8ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  719.237931][T19605] RAX: ffffffffffffffda RBX: 00007f56ea495fa0 RCX: 00007f56ea23f6c9
[  719.237942][T19605] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[  719.237960][T19605] RBP: 00007f56e8ca7090 R08: 0000000000000000 R09: 0000000000000000
[  719.237974][T19605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  719.237985][T19605] R13: 00007f56ea496038 R14: 00007f56ea495fa0 R15: 00007ffc65862b68
[  719.238002][T19605]  </TASK>
[  719.702796][T19620] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  719.724669][   T29] kauditd_printk_skb: 273 callbacks suppressed
[  719.724683][   T29] audit: type=1326 audit(2255.732:87124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87367f6c9 code=0x7ffc0000
[  719.725327][ T3641] usb 4-1: device descriptor read/8, error -110
[  719.731547][   T29] audit: type=1326 audit(2255.732:87125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87367f6c9 code=0x7ffc0000
[  719.785152][   T29] audit: type=1326 audit(2255.772:87126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd87367f6c9 code=0x7ffc0000
[  719.808518][   T29] audit: type=1326 audit(2255.772:87127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87367f6c9 code=0x7ffc0000
[  719.831672][   T29] audit: type=1326 audit(2255.772:87128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87367f6c9 code=0x7ffc0000
[  719.854967][   T29] audit: type=1326 audit(2255.772:87129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd87367f6c9 code=0x7ffc0000
[  719.855238][ T3641] usb 4-1: new SuperSpeed USB device number 45 using vhci_hcd
[  719.878165][   T29] audit: type=1326 audit(2255.772:87130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87367f6c9 code=0x7ffc0000
[  719.905275][ T3641] usb 4-1: enqueue for inactive port 0
[  719.909093][   T29] audit: type=1326 audit(2255.772:87131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87367f6c9 code=0x7ffc0000
[  719.915254][T19629] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  719.937558][   T29] audit: type=1326 audit(2255.772:87132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd87367f6c9 code=0x7ffc0000
[  719.937587][   T29] audit: type=1326 audit(2255.792:87133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87367f6c9 code=0x7ffc0000
[  719.944258][ T3641] usb 4-1: enqueue for inactive port 0
[  720.020177][ T3641] usb 4-1: enqueue for inactive port 0
[  720.027571][T19633] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  720.034111][T19633] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  720.041710][T19633] vhci_hcd vhci_hcd.0: Device attached
[  720.053317][T19633] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  720.059828][T19633] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  720.067604][T19633] vhci_hcd vhci_hcd.0: Device attached
[  720.074044][T19633] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  720.083287][T19633] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10)
[  720.090064][T19633] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  720.097626][T19633] vhci_hcd vhci_hcd.0: Device attached
[  720.109656][T19633] can0: slcan on ttyS3.
[  720.165167][T19633] can0 (unregistered): slcan off ttyS3.
[  720.205191][ T3421] vhci_hcd: vhci_device speed not set
[  720.216267][T19638] vhci_hcd: connection closed
[  720.216388][T19636] vhci_hcd: connection closed
[  720.216532][T10537] vhci_hcd: stop threads
[  720.221106][T19634] vhci_hcd: connection closed
[  720.230145][T10537] vhci_hcd: release socket
[  720.239208][T10537] vhci_hcd: disconnect device
[  720.244087][T10537] vhci_hcd: stop threads
[  720.248357][T10537] vhci_hcd: release socket
[  720.252820][T10537] vhci_hcd: disconnect device
[  720.257810][T10537] vhci_hcd: stop threads
[  720.262044][T10537] vhci_hcd: release socket
[  720.266494][T10537] vhci_hcd: disconnect device
[  720.480905][T19707] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  720.487442][T19707] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  720.494937][T19707] vhci_hcd vhci_hcd.0: Device attached
[  720.507294][T19707] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  720.513862][T19707] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  720.521703][T19707] vhci_hcd vhci_hcd.0: Device attached
[  720.530824][T19707] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  720.541623][T19707] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(10)
[  720.548332][T19707] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  720.555809][T19707] vhci_hcd vhci_hcd.0: Device attached
[  720.581355][T19707] can0: slcan on ttyS3.
[  720.627606][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13203'.
[  720.637067][T19707] can0 (unregistered): slcan off ttyS3.
[  720.672656][T19724] netlink: 324 bytes leftover after parsing attributes in process `syz.6.13203'.
[  720.682193][T16021] vhci_hcd: vhci_device speed not set
[  720.735620][T19709] vhci_hcd: connection closed
[  720.735862][T11890] vhci_hcd: stop threads
[  720.744879][T11890] vhci_hcd: release socket
[  720.749296][T11890] vhci_hcd: disconnect device
[  720.754176][T19711] vhci_hcd: connection closed
[  720.754295][T16021] usb 11-1: new full-speed USB device number 12 using vhci_hcd
[  720.776541][T19713] vhci_hcd: connection closed
[  720.798558][T16021] usb 11-1: enqueue for inactive port 0
[  720.814255][T11890] vhci_hcd: stop threads
[  720.818615][T11890] vhci_hcd: release socket
[  720.823161][T11890] vhci_hcd: disconnect device
[  720.839032][T16021] usb 11-1: enqueue for inactive port 0
[  720.844621][T16021] usb 11-1: enqueue for inactive port 0
[  720.851267][T11890] vhci_hcd: stop threads
[  720.855701][T11890] vhci_hcd: release socket
[  720.860123][T11890] vhci_hcd: disconnect device
[  720.887461][T19739] loop6: detected capacity change from 0 to 512
[  720.914697][T16021] vhci_hcd: vhci_device speed not set
[  720.927234][T19739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  720.943848][T19739] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #18: comm syz.6.13206: corrupted inode contents
[  720.956348][T19739] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #18: comm syz.6.13206: mark_inode_dirty error
[  720.968749][T19739] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #18: comm syz.6.13206: corrupted inode contents
[  720.981234][T19739] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #18: comm syz.6.13206: mark_inode_dirty error
[  720.995472][T19739] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #18: comm syz.6.13206: mark inode dirty (error -117)
[  721.010090][T19739] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117)
[  721.356144][T19758] netlink: 'syz.5.13212': attribute type 39 has an invalid length.
[  721.609584][T19766] veth0_to_team: entered promiscuous mode
[  721.678935][T18876] EXT4-fs error (device loop6): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size
[  721.704661][T18876] EXT4-fs error (device loop6): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size
[  721.737625][T18876] EXT4-fs error (device loop6): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size
[  721.751623][T18876] EXT4-fs error (device loop6): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size
[  721.762817][T18876] EXT4-fs error (device loop6): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size
[  721.813984][T19777] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  721.820553][T19777] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  721.828169][T19777] vhci_hcd vhci_hcd.0: Device attached
[  721.834884][T19781] pimreg: entered allmulticast mode
[  721.849205][T19777] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  721.855737][T19777] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  721.863469][T19777] vhci_hcd vhci_hcd.0: Device attached
[  721.871399][T19777] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  721.889208][T19777] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(10)
[  721.895856][T19777] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  721.903330][T19777] vhci_hcd vhci_hcd.0: Device attached
[  721.915721][T19777] can0: slcan on ttyS3.
[  721.964354][T16005] usb 12-1: SetAddress Request (30) to port 0
[  721.970523][T16005] usb 12-1: new SuperSpeed USB device number 30 using vhci_hcd
[  722.046694][T19777] can0 (unregistered): slcan off ttyS3.
[  722.075052][T18876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  722.186508][T11899] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.204656][T19815] syz_tun: entered allmulticast mode
[  722.215301][T19811] pimreg: entered allmulticast mode
[  722.223643][T19778] vhci_hcd: connection closed
[  722.223931][T19784] vhci_hcd: connection reset by peer
[  722.224161][T11882] vhci_hcd: stop threads
[  722.229112][T19788] vhci_hcd: connection closed
[  722.234027][T11882] vhci_hcd: release socket
[  722.234045][T11882] vhci_hcd: disconnect device
[  722.253040][T19801] Set syz1 is full, maxelem 65536 reached
[  722.270382][T11882] vhci_hcd: stop threads
[  722.274732][T11882] vhci_hcd: release socket
[  722.279155][T11882] vhci_hcd: disconnect device
[  722.285842][T11882] vhci_hcd: stop threads
[  722.290087][T11882] vhci_hcd: release socket
[  722.294550][T11882] vhci_hcd: disconnect device
[  722.306820][T11899] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.357328][T11899] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.399177][T11899] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.448223][T19818] lo speed is unknown, defaulting to 1000
[  722.489375][T11899] bridge_slave_1: left allmulticast mode
[  722.495125][T11899] bridge_slave_1: left promiscuous mode
[  722.500909][T11899] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.519419][T11899] bridge_slave_0: left allmulticast mode
[  722.525132][T11899] bridge_slave_0: left promiscuous mode
[  722.530800][T11899] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.627742][T11899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  722.638294][T11899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  722.648297][T11899] bond0 (unregistering): Released all slaves
[  722.724796][T19818] chnl_net:caif_netlink_parms(): no params data found
[  722.782611][T11899] hsr_slave_0: left promiscuous mode
[  722.790387][T11899] hsr_slave_1: left promiscuous mode
[  722.796156][T11899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  722.803524][T11899] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.811152][T11899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.818673][T11899] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.829480][T11899] veth1_macvtap: left promiscuous mode
[  722.835094][T11899] veth0_macvtap: left promiscuous mode
[  722.840603][T11899] veth1_vlan: left promiscuous mode
[  722.847085][T11899] veth0_vlan: left promiscuous mode
[  722.918491][T11899] team0 (unregistering): Port device team_slave_1 removed
[  722.929603][T11899] team0 (unregistering): Port device team_slave_0 removed
[  722.969479][T19809] syz_tun: left allmulticast mode
[  723.025994][T19818] bridge0: port 1(bridge_slave_0) entered blocking state
[  723.033116][T19818] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.045107][T20005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.054087][T19995] __nla_validate_parse: 2 callbacks suppressed
[  723.054099][T19995] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13231'.
[  723.069801][T20005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  723.078331][T19818] bridge_slave_0: entered allmulticast mode
[  723.087593][T19818] bridge_slave_0: entered promiscuous mode
[  723.098806][T19818] bridge0: port 2(bridge_slave_1) entered blocking state
[  723.105896][T19818] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.116294][T19818] bridge_slave_1: entered allmulticast mode
[  723.123014][T19818] bridge_slave_1: entered promiscuous mode
[  723.146444][T19818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  723.157069][T19818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  723.183441][T19818] team0: Port device team_slave_0 added
[  723.190089][T19818] team0: Port device team_slave_1 added
[  723.212933][T19818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  723.219978][T19818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  723.245916][T19818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  723.267545][T19818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  723.274546][T19818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  723.300765][T19818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  723.313999][T11899] IPVS: stop unused estimator thread 0...
[  723.340158][T19818] hsr_slave_0: entered promiscuous mode
[  723.346998][T19818] hsr_slave_1: entered promiscuous mode
[  723.352815][T19818] debugfs: 'hsr0' already exists in 'hsr'
[  723.358734][T19818] Cannot create hsr debugfs directory
[  723.573765][T19818] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  723.582930][T19818] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  723.592706][T19818] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  723.601805][T19818] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  723.653833][T20197] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13234'.
[  723.699144][T19818] 8021q: adding VLAN 0 to HW filter on device bond0
[  723.713557][T19818] 8021q: adding VLAN 0 to HW filter on device team0
[  723.723183][T11890] bridge0: port 1(bridge_slave_0) entered blocking state
[  723.730284][T11890] bridge0: port 1(bridge_slave_0) entered forwarding state
[  723.755907][T11890] bridge0: port 2(bridge_slave_1) entered blocking state
[  723.763034][T11890] bridge0: port 2(bridge_slave_1) entered forwarding state
[  723.864548][T19818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  723.986697][T19818] veth0_vlan: entered promiscuous mode
[  723.998027][T19818] veth1_vlan: entered promiscuous mode
[  724.028603][T19818] veth0_macvtap: entered promiscuous mode
[  724.037430][T19818] veth1_macvtap: entered promiscuous mode
[  724.051198][T19818] batman_adv: batadv0: Interface activated: batadv_slave_0
[  724.053462][   T23] usb 1-1: enqueue for inactive port 0
[  724.062269][T19818] batman_adv: batadv0: Interface activated: batadv_slave_1
[  724.068367][   T23] usb 1-1: enqueue for inactive port 0
[  724.075331][T11882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  724.095007][T11882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  724.110436][T11882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  724.127866][T11882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  724.163120][   T23] vhci_hcd: vhci_device speed not set
[  724.213893][T20228] SELinux: failed to load policy
[  724.241303][T20231] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13241'.
[  724.251324][ T3421] IPVS: starting estimator thread 0...
[  724.280291][T20235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13242'.
[  724.310761][T20237] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13243'.
[  724.343041][T20232] IPVS: using max 2832 ests per chain, 141600 per kthread
[  724.435176][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13244'.
[  724.476417][T20244] netlink: 'syz.2.13245': attribute type 1 has an invalid length.
[  724.488940][T20244] 8021q: adding VLAN 0 to HW filter on device batadv1
[  724.497744][T20244] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  724.524962][T20244] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.532291][T20244] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.554282][T20244] bridge_slave_0: left allmulticast mode
[  724.559971][T20244] bridge_slave_0: left promiscuous mode
[  724.566153][T20244] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.576663][T20244] bridge_slave_1: left allmulticast mode
[  724.582345][T20244] bridge_slave_1: left promiscuous mode
[  724.588608][T20244] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.600476][T20244] bond0: (slave bond_slave_0): Releasing backup interface
[  724.611006][T20244] bond0: (slave bond_slave_1): Releasing backup interface
[  724.621831][T20244] team0: Port device team_slave_0 removed
[  724.630737][T20244] team0: Port device team_slave_1 removed
[  724.637708][T20244] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  724.646522][T20244] batman_adv: batadv0: Removing interface: batadv_slave_0
[  724.655639][T20244] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  724.664542][T20244] batman_adv: batadv0: Removing interface: batadv_slave_1
[  724.674901][T20244] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  724.729519][   T29] kauditd_printk_skb: 556 callbacks suppressed
[  724.729536][   T29] audit: type=1326 audit(2772.745:87690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.5.13238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b7cb56567 code=0x7ffc0000
[  724.759712][   T29] audit: type=1326 audit(2772.775:87691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.5.13238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b7cafb789 code=0x7ffc0000
[  724.782914][   T29] audit: type=1326 audit(2772.775:87692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.5.13238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b7cb56567 code=0x7ffc0000
[  724.805962][   T29] audit: type=1326 audit(2772.775:87693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.5.13238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b7cafb789 code=0x7ffc0000
[  724.829099][   T29] audit: type=1326 audit(2772.775:87694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.5.13238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  724.852317][   T29] audit: type=1326 audit(2772.775:87695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.5.13238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b7cb56567 code=0x7ffc0000
[  724.875430][   T29] audit: type=1326 audit(2772.775:87696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.5.13238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b7cafb789 code=0x7ffc0000
[  724.898462][   T29] audit: type=1326 audit(2772.775:87697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.5.13238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  724.935119][   T29] audit: type=1326 audit(2772.865:87698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.5.13238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b7cb56567 code=0x7ffc0000
[  724.958229][   T29] audit: type=1326 audit(2772.865:87699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.5.13238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b7cafb789 code=0x7ffc0000
[  724.996577][T20248] sd 0:0:1:0: device reset
[  725.001731][T20248] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.13247'.
[  725.025546][T20251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13246'.
[  725.313032][T20269] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13254'.
[  725.366267][T20271] 9pnet_fd: Insufficient options for proto=fd
[  725.675443][T20282] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13259'.
[  725.699091][T20284] FAULT_INJECTION: forcing a failure.
[  725.699091][T20284] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  725.712271][T20284] CPU: 1 UID: 0 PID: 20284 Comm: syz.5.13260 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  725.712305][T20284] Tainted: [W]=WARN
[  725.712324][T20284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  725.712337][T20284] Call Trace:
[  725.712344][T20284]  <TASK>
[  725.712353][T20284]  __dump_stack+0x1d/0x30
[  725.712378][T20284]  dump_stack_lvl+0xe8/0x140
[  725.712401][T20284]  dump_stack+0x15/0x1b
[  725.712421][T20284]  should_fail_ex+0x265/0x280
[  725.712495][T20284]  should_fail+0xb/0x20
[  725.712521][T20284]  should_fail_usercopy+0x1a/0x20
[  725.712542][T20284]  _copy_from_user+0x1c/0xb0
[  725.712651][T20284]  ___sys_recvmsg+0xaa/0x370
[  725.712673][T20284]  ? 0xffffffff81000000
[  725.712687][T20284]  ? __rcu_read_unlock+0x4f/0x70
[  725.712772][T20284]  __x64_sys_recvmsg+0xd1/0x160
[  725.712795][T20284]  x64_sys_call+0x2b46/0x3000
[  725.712910][T20284]  do_syscall_64+0xd2/0x200
[  725.712928][T20284]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  725.712958][T20284]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  725.713037][T20284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.713062][T20284] RIP: 0033:0x7f8b7cb5f6c9
[  725.713076][T20284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  725.713096][T20284] RSP: 002b:00007f8b7b5bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  725.713118][T20284] RAX: ffffffffffffffda RBX: 00007f8b7cdb5fa0 RCX: 00007f8b7cb5f6c9
[  725.713133][T20284] RDX: 0000000040012021 RSI: 0000200000000480 RDI: 0000000000000003
[  725.713147][T20284] RBP: 00007f8b7b5bf090 R08: 0000000000000000 R09: 0000000000000000
[  725.713161][T20284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  725.713175][T20284] R13: 00007f8b7cdb6038 R14: 00007f8b7cdb5fa0 R15: 00007ffd34a07ad8
[  725.713192][T20284]  </TASK>
[  725.932048][T20286] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  725.938632][T20286] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  725.946156][T20286] vhci_hcd vhci_hcd.0: Device attached
[  725.960225][T20286] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  725.967184][T20286] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  725.974926][T20286] vhci_hcd vhci_hcd.0: Device attached
[  725.986025][T20286] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  725.997650][T20286] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10)
[  726.004263][T20286] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  726.011729][T20286] vhci_hcd vhci_hcd.0: Device attached
[  726.028901][T20286] can0: slcan on ttyS3.
[  726.056121][T20306] 9pnet_fd: Insufficient options for proto=fd
[  726.065348][T20306] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  726.073589][T20306] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  726.082573][T20286] can0 (unregistered): slcan off ttyS3.
[  726.097992][T20309] can0: slcan on ttyS3.
[  726.132681][   T23] vhci_hcd: vhci_device speed not set
[  726.162689][T20291] vhci_hcd: connection closed
[  726.162721][T20287] vhci_hcd: connection closed
[  726.162831][T20295] vhci_hcd: connection closed
[  726.172583][T11890] vhci_hcd: stop threads
[  726.181654][T11890] vhci_hcd: release socket
[  726.186128][T11890] vhci_hcd: disconnect device
[  726.207964][   T23] usb 3-1: new full-speed USB device number 20 using vhci_hcd
[  726.215614][T20289] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  726.221753][T11890] vhci_hcd: stop threads
[  726.226103][T11890] vhci_hcd: release socket
[  726.230511][T11890] vhci_hcd: disconnect device
[  726.235461][T11890] vhci_hcd: stop threads
[  726.239708][T11890] vhci_hcd: release socket
[  726.244206][T11890] vhci_hcd: disconnect device
[  726.248435][T20319] SELinux: failed to load policy
[  726.842849][T20338] lo speed is unknown, defaulting to 1000
[  726.866010][T11882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.936687][T11882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.992204][T20309] can0 (unregistered): slcan off ttyS3.
[  726.998674][T20338] chnl_net:caif_netlink_parms(): no params data found
[  727.011695][T16005] usb 12-1: device descriptor read/8, error -110
[  727.026615][T11882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.071951][T11882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.100153][T20338] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.107303][T20338] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.115268][T20338] bridge_slave_0: entered allmulticast mode
[  727.121984][T20338] bridge_slave_0: entered promiscuous mode
[  727.131559][T16005] usb 12-1: new SuperSpeed USB device number 30 using vhci_hcd
[  727.140425][T20338] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.147578][T20338] bridge0: port 2(bridge_slave_1) entered disabled state
[  727.155015][T20338] bridge_slave_1: entered allmulticast mode
[  727.161554][T20338] bridge_slave_1: entered promiscuous mode
[  727.161997][T16005] usb 12-1: enqueue for inactive port 0
[  727.178369][T11882] bridge_slave_1: left allmulticast mode
[  727.183793][T16005] usb 12-1: enqueue for inactive port 0
[  727.184111][T11882] bridge_slave_1: left promiscuous mode
[  727.195172][T11882] bridge0: port 2(bridge_slave_1) entered disabled state
[  727.196121][T16005] usb 12-1: enqueue for inactive port 0
[  727.208259][T11882] bridge_slave_0: left allmulticast mode
[  727.213999][T11882] bridge_slave_0: left promiscuous mode
[  727.219672][T11882] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.272764][T11882] dvmrp0 (unregistering): left allmulticast mode
[  727.324978][T11882] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  727.334942][T11882] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  727.344334][T11882] .` (unregistering): Released all slaves
[  727.353357][T11882] bond0 (unregistering): Released all slaves
[  727.371359][T16020] syz0: Port: 1 Link DOWN
[  727.373496][T20338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  727.387129][T20338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  727.401433][T16021] vhci_hcd: vhci_device speed not set
[  727.418873][T20338] team0: Port device team_slave_0 added
[  727.433968][T20338] team0: Port device team_slave_1 added
[  727.497999][T11882] hsr_slave_0: left promiscuous mode
[  727.504241][T11882] hsr_slave_1: left promiscuous mode
[  727.509997][T11882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  727.517467][T11882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  727.525543][T11882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  727.533000][T11882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  727.544353][T11882] veth1_macvtap: left promiscuous mode
[  727.550005][T11882] veth0_macvtap: left promiscuous mode
[  727.555696][T11882] veth1_vlan: left promiscuous mode
[  727.560968][T11882] veth0_vlan: left promiscuous mode
[  727.604565][T11882] pimreg (unregistering): left allmulticast mode
[  727.638295][T11882] team0 (unregistering): Port device team_slave_1 removed
[  727.648265][T11882] team0 (unregistering): Port device team_slave_0 removed
[  727.662512][T11899] smc: removing ib device syz0
[  727.686329][T20338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  727.693460][T20338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  727.719426][T20338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  727.732227][T20598] team_slave_0: entered promiscuous mode
[  727.737898][T20598] team_slave_1: entered promiscuous mode
[  727.744128][T20338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  727.751084][T20338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  727.777376][T20338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  727.822429][T20338] hsr_slave_0: entered promiscuous mode
[  727.828843][T20338] hsr_slave_1: entered promiscuous mode
[  727.835244][T20338] debugfs: 'hsr0' already exists in 'hsr'
[  727.840997][T20338] Cannot create hsr debugfs directory
[  728.058031][T11882] IPVS: stop unused estimator thread 0...
[  728.267594][T20715] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13284'.
[  728.295719][T20338] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  728.308941][T20338] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  728.318957][T20338] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  728.328352][T20338] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  728.367215][T20338] 8021q: adding VLAN 0 to HW filter on device bond0
[  728.371219][T32052] Bluetooth: hci0: command 0x1003 tx timeout
[  728.378924][T20338] 8021q: adding VLAN 0 to HW filter on device team0
[  728.379975][ T8590] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  728.392830][T20597] team_slave_0: left promiscuous mode
[  728.398280][T20597] team_slave_1: left promiscuous mode
[  728.424044][T11882] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.431129][T11882] bridge0: port 1(bridge_slave_0) entered forwarding state
[  728.435142][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13286'.
[  728.439780][T11882] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.454552][T11882] bridge0: port 2(bridge_slave_1) entered forwarding state
[  728.472903][T20338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  728.483290][T20338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  728.545152][T20338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  728.888515][T20338] veth0_vlan: entered promiscuous mode
[  728.903223][T20338] veth1_vlan: entered promiscuous mode
[  728.932369][T20338] veth0_macvtap: entered promiscuous mode
[  728.954442][T20338] veth1_macvtap: entered promiscuous mode
[  728.974145][T20338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  728.982917][T20338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  728.998333][T11899] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  729.029391][T11899] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  729.041163][T16005] usb usb12-port1: attempt power cycle
[  729.043961][T11899] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  729.066769][T20763] veth0_to_team: entered promiscuous mode
[  729.090134][T11899] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  729.112246][T20771] can0: slcan on ptm0.
[  729.128722][T20778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13294'.
[  729.207140][T20783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13296'.
[  729.280725][T20770] can0 (unregistered): slcan off ptm0.
[  729.569674][T20842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13310'.
[  729.920016][   T29] kauditd_printk_skb: 447 callbacks suppressed
[  729.920030][   T29] audit: type=1326 audit(3289.936:88147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="syz.2.13316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  729.969700][   T29] audit: type=1326 audit(3289.936:88148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="syz.2.13316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  729.992961][   T29] audit: type=1326 audit(3289.946:88149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="syz.2.13316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  730.016086][   T29] audit: type=1326 audit(3289.946:88150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="syz.2.13316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  730.039293][   T29] audit: type=1326 audit(3289.946:88151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="syz.2.13316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  730.062488][   T29] audit: type=1326 audit(3289.946:88152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="syz.2.13316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  730.085728][   T29] audit: type=1326 audit(3289.946:88153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="syz.2.13316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  730.108907][   T29] audit: type=1326 audit(3289.946:88154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="syz.2.13316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  730.132073][   T29] audit: type=1326 audit(3289.946:88155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="syz.2.13316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  730.155228][   T29] audit: type=1326 audit(3289.946:88156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="syz.2.13316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  730.230516][T20913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  730.239148][T20913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  730.691871][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13325'.
[  730.702869][T20969] netlink: 256 bytes leftover after parsing attributes in process `syz.1.13325'.
[  731.031375][T20997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13330'.
[  731.049857][T16005] usb usb12-port1: unable to enumerate USB device
[  731.249553][   T23] usb 3-1: enqueue for inactive port 0
[  731.255182][   T23] usb 3-1: enqueue for inactive port 0
[  731.329499][   T23] vhci_hcd: vhci_device speed not set
[  731.352021][T21016] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13331'.
[  731.732056][T21033] FAULT_INJECTION: forcing a failure.
[  731.732056][T21033] name failslab, interval 1, probability 0, space 0, times 0
[  731.744877][T21033] CPU: 1 UID: 0 PID: 21033 Comm: syz.2.13339 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  731.744913][T21033] Tainted: [W]=WARN
[  731.744993][T21033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  731.745011][T21033] Call Trace:
[  731.745019][T21033]  <TASK>
[  731.745028][T21033]  __dump_stack+0x1d/0x30
[  731.745073][T21033]  dump_stack_lvl+0xe8/0x140
[  731.745101][T21033]  dump_stack+0x15/0x1b
[  731.745117][T21033]  should_fail_ex+0x265/0x280
[  731.745153][T21033]  should_failslab+0x8c/0xb0
[  731.745216][T21033]  __kmalloc_noprof+0xa5/0x570
[  731.745241][T21033]  ? shmem_initxattrs+0x1c2/0x350
[  731.745267][T21033]  shmem_initxattrs+0x1c2/0x350
[  731.745324][T21033]  security_inode_init_security+0x25c/0x330
[  731.745396][T21033]  ? __pfx_shmem_initxattrs+0x10/0x10
[  731.745421][T21033]  shmem_mknod+0xad/0x180
[  731.745475][T21033]  shmem_mkdir+0x33/0x70
[  731.745572][T21033]  vfs_mkdir+0x213/0x340
[  731.745595][T21033]  do_mkdirat+0x132/0x3f0
[  731.745618][T21033]  __x64_sys_mkdirat+0x4c/0x60
[  731.745647][T21033]  x64_sys_call+0x2b7/0x3000
[  731.745725][T21033]  do_syscall_64+0xd2/0x200
[  731.745745][T21033]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  731.745770][T21033]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  731.745841][T21033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  731.745860][T21033] RIP: 0033:0x7fa20f5bf6c9
[  731.745874][T21033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  731.745891][T21033] RSP: 002b:00007fa20e01f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  731.745946][T21033] RAX: ffffffffffffffda RBX: 00007fa20f815fa0 RCX: 00007fa20f5bf6c9
[  731.745961][T21033] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  731.745976][T21033] RBP: 00007fa20e01f090 R08: 0000000000000000 R09: 0000000000000000
[  731.745991][T21033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  731.746004][T21033] R13: 00007fa20f816038 R14: 00007fa20f815fa0 R15: 00007ffd55f51a58
[  731.746020][T21033]  </TASK>
[  732.125173][T21041] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13342'.
[  732.257791][T21050] lo speed is unknown, defaulting to 1000
[  732.386778][T21086] syzkaller0: entered allmulticast mode
[  732.400945][T21086] syzkaller0: entered promiscuous mode
[  732.432431][T21086] syzkaller0 (unregistering): left allmulticast mode
[  732.439310][T21086] syzkaller0 (unregistering): left promiscuous mode
[  732.493888][T21098] sd 0:0:1:0: device reset
[  732.614381][T21107] veth0_to_team: entered promiscuous mode
[  733.016317][T21127] SELinux: failed to load policy
[  733.255894][T21146] sd 0:0:1:0: device reset
[  733.475016][T21157] __nla_validate_parse: 4 callbacks suppressed
[  733.475032][T21157] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13375'.
[  733.738042][T21169] bridge0: entered allmulticast mode
[  733.998519][ T3421] usb usb4-port1: attempt power cycle
[  734.095472][T21206] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13395'.
[  734.126498][T21209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13396'.
[  734.168362][T21206] infiniband syz0: set down
[  734.172905][T21206] infiniband syz0: added bond_slave_0
[  734.194392][T21206] RDS/IB: syz0: added
[  734.199630][T21206] smc: adding ib device syz0 with port count 1
[  734.205937][T21206] smc:    ib device syz0 port 1 has no pnetid
[  735.017323][T21264] sd 0:0:1:0: device reset
[  735.039556][   T29] kauditd_printk_skb: 548 callbacks suppressed
[  735.039573][   T29] audit: type=1326 audit(3807.064:88705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.5.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  735.069412][   T29] audit: type=1326 audit(3807.064:88706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.5.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  735.092737][   T29] audit: type=1326 audit(3807.064:88707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.5.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  735.116394][   T29] audit: type=1326 audit(3807.064:88708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.5.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  735.140325][   T29] audit: type=1326 audit(3807.064:88709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.5.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  735.164007][   T29] audit: type=1326 audit(3807.064:88710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.5.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  735.189697][   T29] audit: type=1326 audit(3807.064:88711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.5.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  735.213399][   T29] audit: type=1326 audit(3807.064:88712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.5.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  735.238194][   T29] audit: type=1326 audit(3807.064:88713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.5.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  735.262424][   T29] audit: type=1326 audit(3807.064:88714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.5.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  735.316795][T21270] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13405'.
[  735.513360][T21284] sd 0:0:1:0: device reset
[  735.587718][T21295] netlink: 'syz.1.13407': attribute type 1 has an invalid length.
[  735.604221][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13407'.
[  735.919827][ T3421] usb usb4-port1: unable to enumerate USB device
[  736.055128][T21334] netlink: 164 bytes leftover after parsing attributes in process `syz.1.13418'.
[  736.125333][T21347] ip6erspan0: entered promiscuous mode
[  736.136150][T21335] lo speed is unknown, defaulting to 1000
[  736.239647][T21335] chnl_net:caif_netlink_parms(): no params data found
[  736.266511][T21455] netlink: 96 bytes leftover after parsing attributes in process `syz.8.13421'.
[  736.279296][T21455] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  736.292628][T10555] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.325671][T21335] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.333112][T21335] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.341033][T21335] bridge_slave_0: entered allmulticast mode
[  736.349258][T21335] bridge_slave_0: entered promiscuous mode
[  736.357049][T10555] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.368233][T21335] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.375286][T21335] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.376624][T21510] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13423'.
[  736.382535][T21335] bridge_slave_1: entered allmulticast mode
[  736.397998][T21335] bridge_slave_1: entered promiscuous mode
[  736.423018][T21335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  736.433794][T21335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  736.446409][T10555] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.480810][T21335] team0: Port device team_slave_0 added
[  736.489468][T21335] team0: Port device team_slave_1 added
[  736.503422][T10555] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.522752][T21335] batman_adv: batadv0: Adding interface: batadv_slave_0
[  736.529946][T21335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  736.555876][T21335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  736.574664][T21335] batman_adv: batadv0: Adding interface: batadv_slave_1
[  736.581679][T21335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  736.607884][T21335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  736.614603][T21602] netlink: 44 bytes leftover after parsing attributes in process `syz.8.13429'.
[  736.663292][T21335] hsr_slave_0: entered promiscuous mode
[  736.669689][T21335] hsr_slave_1: entered promiscuous mode
[  736.681196][T21335] debugfs: 'hsr0' already exists in 'hsr'
[  736.686988][T21335] Cannot create hsr debugfs directory
[  736.712884][T10555] bridge_slave_1: left allmulticast mode
[  736.718810][T10555] bridge_slave_1: left promiscuous mode
[  736.724682][T10555] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.737798][T10555] bridge_slave_0: left allmulticast mode
[  736.743530][T10555] bridge_slave_0: left promiscuous mode
[  736.749721][T10555] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.808764][T21670] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  736.858831][T10555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  736.868696][T10555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  736.878217][T10555] bond0 (unregistering): Released all slaves
[  736.886439][T10555] bond1 (unregistering): Released all slaves
[  736.894153][T21668] netlink: 96 bytes leftover after parsing attributes in process `syz.8.13432'.
[  737.009261][T10555] hsr_slave_0: left promiscuous mode
[  737.017274][T10555] hsr_slave_1: left promiscuous mode
[  737.024566][T10555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  737.032026][T10555] batadv0: mtu less than device minimum
[  737.037924][T10555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  737.048924][T10555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  737.059759][T10555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  737.070776][T10555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  737.081725][T10555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  737.092578][T10555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  737.103239][T10555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  737.114226][T10555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  737.125403][T10555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  737.139942][T10555] batman_adv: batadv0: Removing interface: batadv_slave_0
[  737.207333][T10555] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  737.222338][T10555] batman_adv: batadv0: Removing interface: batadv_slave_1
[  737.230089][T10555] batman_adv: batadv0: Interface deactivated: dummy0
[  737.236931][T10555] batman_adv: batadv0: Removing interface: dummy0
[  737.246261][T10555] veth1_macvtap: left promiscuous mode
[  737.252024][T10555] veth0_macvtap: left promiscuous mode
[  737.259651][T10555] veth1_vlan: left promiscuous mode
[  737.265077][T10555] veth0_vlan: left promiscuous mode
[  737.351999][T10555] team0 (unregistering): Port device team_slave_1 removed
[  737.363779][T10555] team0 (unregistering): Port device team_slave_0 removed
[  737.374059][T11882] smc: removing ib device syz!
[  737.440998][ T3421] lo speed is unknown, defaulting to 1000
[  737.446880][ T3421] infiniband syz2: ib_query_port failed (-19)
[  737.489196][T21737] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[  737.496060][T21737] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  737.503698][T21737] vhci_hcd vhci_hcd.0: Device attached
[  737.523774][T21737] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[  737.530391][T21737] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  737.538102][T21737] vhci_hcd vhci_hcd.0: Device attached
[  737.564147][T21737] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  737.586404][T21737] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(10)
[  737.593045][T21737] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  737.600548][T21737] vhci_hcd vhci_hcd.0: Device attached
[  737.639785][T21737] can0: slcan on ttyS3.
[  737.686408][T16020] vhci_hcd: vhci_device speed not set
[  737.721481][T21773] sd 0:0:1:0: device reset
[  737.728672][T21737] can0 (unregistered): slcan off ttyS3.
[  737.746732][T16020] usb 17-1: new full-speed USB device number 10 using vhci_hcd
[  737.757297][T21335] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  737.771726][T21790] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  737.786567][T21335] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  737.795615][T21756] vhci_hcd: connection closed
[  737.795717][T21739] vhci_hcd: connection reset by peer
[  737.795791][T21753] vhci_hcd: connection closed
[  737.811878][T11882] vhci_hcd: stop threads
[  737.813747][T21335] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  737.816648][T11882] vhci_hcd: release socket
[  737.833439][T11882] vhci_hcd: disconnect device
[  737.838414][T11882] vhci_hcd: stop threads
[  737.838774][T21750] xt_bpf: check failed: parse error
[  737.843055][T11882] vhci_hcd: release socket
[  737.852864][T11882] vhci_hcd: disconnect device
[  737.860086][T21335] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  737.873536][T11882] vhci_hcd: stop threads
[  737.878352][T11882] vhci_hcd: release socket
[  737.882908][T11882] vhci_hcd: disconnect device
[  737.887120][T21750] vhci_hcd: invalid port number 96
[  737.893601][T21750] vhci_hcd: default hub control req: 2000 vfffc i0060 l7
[  737.906330][T21796] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  737.912875][T21796] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  737.921512][T21796] vhci_hcd vhci_hcd.0: Device attached
[  737.932029][T10555] IPVS: stop unused estimator thread 0...
[  737.947953][T21796] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  737.954637][T21796] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  737.962338][T21796] vhci_hcd vhci_hcd.0: Device attached
[  737.968989][T21796] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  737.982516][T21335] 8021q: adding VLAN 0 to HW filter on device bond0
[  737.989722][T21796] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(10)
[  737.996447][T21796] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  738.004210][T21796] vhci_hcd vhci_hcd.0: Device attached
[  738.018173][T21335] 8021q: adding VLAN 0 to HW filter on device team0
[  738.027731][T21796] can0: slcan on ttyS3.
[  738.034320][T10555] bridge0: port 1(bridge_slave_0) entered blocking state
[  738.041597][T10555] bridge0: port 1(bridge_slave_0) entered forwarding state
[  738.057159][T10555] bridge0: port 2(bridge_slave_1) entered blocking state
[  738.064543][T10555] bridge0: port 2(bridge_slave_1) entered forwarding state
[  738.076203][T21796] can0 (unregistered): slcan off ttyS3.
[  738.106103][T16005] vhci_hcd: vhci_device speed not set
[  738.144993][T21335] 8021q: adding VLAN 0 to HW filter on device batadv0
[  738.156605][T21807] vhci_hcd: connection closed
[  738.156824][T21809] vhci_hcd: connection closed
[  738.157385][T21800] vhci_hcd: connection closed
[  738.161830][T11882] vhci_hcd: stop threads
[  738.176126][T11882] vhci_hcd: release socket
[  738.180828][T11882] vhci_hcd: disconnect device
[  738.186464][T16005] usb 11-1: new full-speed USB device number 14 using vhci_hcd
[  738.194245][T21801] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  738.210803][T11882] vhci_hcd: stop threads
[  738.215949][T11882] vhci_hcd: release socket
[  738.221563][T11882] vhci_hcd: disconnect device
[  738.227131][T11882] vhci_hcd: stop threads
[  738.231763][T11882] vhci_hcd: release socket
[  738.236240][T11882] vhci_hcd: disconnect device
[  738.278008][T21335] veth0_vlan: entered promiscuous mode
[  738.286497][T21335] veth1_vlan: entered promiscuous mode
[  738.301693][T21335] veth0_macvtap: entered promiscuous mode
[  738.309386][T21335] veth1_macvtap: entered promiscuous mode
[  738.321222][T21335] batman_adv: batadv0: Interface activated: batadv_slave_0
[  738.334531][T21335] batman_adv: batadv0: Interface activated: batadv_slave_1
[  738.347307][T11899] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  738.359097][T11899] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  738.370281][T11899] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  738.379857][T11882] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  738.520150][T21860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  738.528985][T21860] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  738.850534][T21867] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8ef:a2ff:fef7:3954 error=-28
[  738.886586][T21867] infiniband syz!: set down
[  738.891408][T21867] infiniband syz!: added team_slave_0
[  738.903623][T21867] RDS/IB: syz!: added
[  738.908122][T21867] smc: adding ib device syz! with port count 1
[  738.914738][T21867] smc:    ib device syz! port 1 has no pnetid
[  739.011025][T21874] sd 0:0:1:0: device reset
[  739.186078][T21891] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  739.194928][T21891] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  739.202418][T21891] vhci_hcd vhci_hcd.0: Device attached
[  739.226657][T21891] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  739.233572][T21891] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  739.233869][T21896] __nla_validate_parse: 3 callbacks suppressed
[  739.233894][T21896] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13460'.
[  739.241911][T21891] vhci_hcd vhci_hcd.0: Device attached
[  739.257340][T21891] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  739.285267][T21891] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10)
[  739.292097][T21891] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  739.299745][T21891] vhci_hcd vhci_hcd.0: Device attached
[  739.312286][T21891] can0: slcan on ttyS3.
[  739.352909][T21911] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13462'.
[  739.362457][T21891] can0 (unregistered): slcan off ttyS3.
[  739.382117][T21909] SELinux: failed to load policy
[  739.395743][T16015] vhci_hcd: vhci_device speed not set
[  739.406315][T21899] vhci_hcd: connection closed
[  739.406503][T11899] vhci_hcd: stop threads
[  739.414222][T21893] vhci_hcd: connection closed
[  739.415584][T11899] vhci_hcd: release socket
[  739.416441][T21897] vhci_hcd: connection closed
[  739.420386][T11899] vhci_hcd: disconnect device
[  739.421176][T11899] vhci_hcd: stop threads
[  739.441464][T11899] vhci_hcd: release socket
[  739.446083][T11899] vhci_hcd: disconnect device
[  739.451179][T11899] vhci_hcd: stop threads
[  739.455643][T11899] vhci_hcd: release socket
[  739.460351][T11899] vhci_hcd: disconnect device
[  739.465661][T16015] usb 9-1: new full-speed USB device number 9 using vhci_hcd
[  739.473169][T16015] usb 9-1: enqueue for inactive port 0
[  739.479957][T16015] usb 9-1: enqueue for inactive port 0
[  739.485654][T16015] usb 9-1: enqueue for inactive port 0
[  739.553283][T21927] netlink: 96 bytes leftover after parsing attributes in process `syz.5.13466'.
[  739.567828][T16015] vhci_hcd: vhci_device speed not set
[  739.698648][T21933] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13468'.
[  739.755615][   T23] usb usb6-port1: attempt power cycle
[  739.806240][T21944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13470'.
[  739.890235][T21962] sd 0:0:1:0: device reset
[  739.907985][T21964] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13476'.
[  739.934112][T21966] netlink: 96 bytes leftover after parsing attributes in process `syz.5.13477'.
[  739.994598][T21972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13480'.
[  740.040410][T21977] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13482'.
[  740.229907][T21985] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13485'.
[  740.246414][T21985] team0 (unregistering): Port device team_slave_0 removed
[  740.256839][T21985] team0 (unregistering): Port device team_slave_1 removed
[  740.294470][   T29] kauditd_printk_skb: 384 callbacks suppressed
[  740.294488][   T29] audit: type=1326 audit(4580.312:89099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.13486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  740.328372][   T29] audit: type=1326 audit(4580.312:89100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.13486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  740.353606][   T29] audit: type=1326 audit(4580.312:89101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.13486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  740.379836][   T29] audit: type=1326 audit(4580.312:89102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.13486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  740.404370][   T29] audit: type=1326 audit(4580.312:89103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.13486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  740.428264][   T29] audit: type=1326 audit(4580.312:89104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.13486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  740.451939][   T29] audit: type=1326 audit(4580.312:89105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.13486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  740.475388][   T29] audit: type=1326 audit(4580.312:89106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.13486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  740.498532][   T29] audit: type=1326 audit(4580.312:89107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.13486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  740.523467][   T29] audit: type=1326 audit(4580.312:89108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.13486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20f5bf6c9 code=0x7ffc0000
[  740.585775][T22032] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  740.592358][T22032] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  740.599964][T22032] vhci_hcd vhci_hcd.0: Device attached
[  740.612889][T22032] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  740.619458][T22032] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  740.627717][T22032] vhci_hcd vhci_hcd.0: Device attached
[  740.634187][T22032] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  740.642980][T22032] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(10)
[  740.649625][T22032] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  740.657056][T22032] vhci_hcd vhci_hcd.0: Device attached
[  740.667430][T22032] can0: slcan on ttyS3.
[  740.724875][T22032] can0 (unregistered): slcan off ttyS3.
[  740.755838][   T23] usb 6-1: SetAddress Request (52) to port 0
[  740.761946][   T23] usb 6-1: new SuperSpeed USB device number 52 using vhci_hcd
[  740.775202][T22042] vhci_hcd: connection closed
[  740.775337][T11882] vhci_hcd: stop threads
[  740.775563][T22037] vhci_hcd: connection closed
[  740.780298][T11882] vhci_hcd: release socket
[  740.780319][T11882] vhci_hcd: disconnect device
[  740.785000][T22033] vhci_hcd: connection closed
[  740.792700][T11882] vhci_hcd: stop threads
[  740.812835][T11882] vhci_hcd: release socket
[  740.817599][T11882] vhci_hcd: disconnect device
[  740.823166][T11882] vhci_hcd: stop threads
[  740.827677][T11882] vhci_hcd: release socket
[  740.832829][T11882] vhci_hcd: disconnect device
[  740.873626][T22066] FAULT_INJECTION: forcing a failure.
[  740.873626][T22066] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  740.887538][T22066] CPU: 1 UID: 0 PID: 22066 Comm: syz.4.13495 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  740.887654][T22066] Tainted: [W]=WARN
[  740.887662][T22066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  740.887675][T22066] Call Trace:
[  740.887684][T22066]  <TASK>
[  740.887692][T22066]  __dump_stack+0x1d/0x30
[  740.887718][T22066]  dump_stack_lvl+0xe8/0x140
[  740.887740][T22066]  dump_stack+0x15/0x1b
[  740.887829][T22066]  should_fail_ex+0x265/0x280
[  740.887906][T22066]  should_fail+0xb/0x20
[  740.887936][T22066]  should_fail_usercopy+0x1a/0x20
[  740.888025][T22066]  strncpy_from_user+0x25/0x230
[  740.888108][T22066]  ? kmem_cache_alloc_noprof+0x242/0x480
[  740.888138][T22066]  ? getname_flags+0x80/0x3b0
[  740.888170][T22066]  getname_flags+0xae/0x3b0
[  740.888200][T22066]  __se_sys_quotactl+0x16a/0x670
[  740.888258][T22066]  __x64_sys_quotactl+0x55/0x70
[  740.888302][T22066]  x64_sys_call+0x15d6/0x3000
[  740.888352][T22066]  do_syscall_64+0xd2/0x200
[  740.888374][T22066]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  740.888403][T22066]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  740.888469][T22066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.888494][T22066] RIP: 0033:0x7f493cddf6c9
[  740.888511][T22066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  740.888556][T22066] RSP: 002b:00007f493b83f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  740.888577][T22066] RAX: ffffffffffffffda RBX: 00007f493d035fa0 RCX: 00007f493cddf6c9
[  740.888609][T22066] RDX: ffffffffffffffff RSI: 00002000000002c0 RDI: ffffffff80000201
[  740.888623][T22066] RBP: 00007f493b83f090 R08: 0000000000000000 R09: 0000000000000000
[  740.888713][T22066] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[  740.888727][T22066] R13: 00007f493d036038 R14: 00007f493d035fa0 R15: 00007fff63441e28
[  740.888812][T22066]  </TASK>
[  741.131358][T22068] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  741.252330][T22079] sd 0:0:1:0: device reset
[  741.274896][T22074] syz!: rxe_newlink: already configured on team_slave_0
[  741.485864][T22107] sd 0:0:1:0: device reset
[  741.536904][T22122] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  741.543617][T22122] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  741.551350][T22122] vhci_hcd vhci_hcd.0: Device attached
[  741.586451][T22122] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  741.593666][T22122] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  741.602124][T22122] vhci_hcd vhci_hcd.0: Device attached
[  741.613833][T22112] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  741.640513][T22139] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  741.656334][T22122] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8)
[  741.663152][T22122] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  741.671932][T22122] vhci_hcd vhci_hcd.0: Device attached
[  741.765542][T22132] vhci_hcd: connection closed
[  741.765627][T22141] vhci_hcd: connection closed
[  741.771288][T11882] vhci_hcd: stop threads
[  741.781576][T11882] vhci_hcd: release socket
[  741.786252][T11882] vhci_hcd: disconnect device
[  741.804338][T22123] vhci_hcd: connection closed
[  741.804978][T11882] vhci_hcd: stop threads
[  741.816755][T11882] vhci_hcd: release socket
[  741.821788][T11882] vhci_hcd: disconnect device
[  741.832838][T11882] vhci_hcd: stop threads
[  741.837505][T11882] vhci_hcd: release socket
[  741.845839][T11882] vhci_hcd: disconnect device
[  741.874138][T22164] sd 0:0:1:0: device reset
[  742.022940][T22176] FAULT_INJECTION: forcing a failure.
[  742.022940][T22176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  742.038224][T22176] CPU: 1 UID: 0 PID: 22176 Comm: syz.2.13536 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  742.038317][T22176] Tainted: [W]=WARN
[  742.038323][T22176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  742.038336][T22176] Call Trace:
[  742.038342][T22176]  <TASK>
[  742.038350][T22176]  __dump_stack+0x1d/0x30
[  742.038374][T22176]  dump_stack_lvl+0xe8/0x140
[  742.038394][T22176]  dump_stack+0x15/0x1b
[  742.038411][T22176]  should_fail_ex+0x265/0x280
[  742.038495][T22176]  should_fail+0xb/0x20
[  742.038624][T22176]  should_fail_usercopy+0x1a/0x20
[  742.038647][T22176]  _copy_from_user+0x1c/0xb0
[  742.038703][T22176]  ucma_write+0xd9/0x250
[  742.038750][T22176]  ? __pfx_ucma_write+0x10/0x10
[  742.038800][T22176]  vfs_write+0x269/0x960
[  742.038826][T22176]  ? __rcu_read_unlock+0x4f/0x70
[  742.038934][T22176]  ? __fget_files+0x184/0x1c0
[  742.039079][T22176]  ksys_write+0xda/0x1a0
[  742.039106][T22176]  __x64_sys_write+0x40/0x50
[  742.039168][T22176]  x64_sys_call+0x2802/0x3000
[  742.039191][T22176]  do_syscall_64+0xd2/0x200
[  742.039216][T22176]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  742.039327][T22176]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  742.039429][T22176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.039515][T22176] RIP: 0033:0x7fa20f5bf6c9
[  742.039536][T22176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  742.039553][T22176] RSP: 002b:00007fa20e01f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  742.039574][T22176] RAX: ffffffffffffffda RBX: 00007fa20f815fa0 RCX: 00007fa20f5bf6c9
[  742.039586][T22176] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000006
[  742.039600][T22176] RBP: 00007fa20e01f090 R08: 0000000000000000 R09: 0000000000000000
[  742.039615][T22176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  742.039698][T22176] R13: 00007fa20f816038 R14: 00007fa20f815fa0 R15: 00007ffd55f51a58
[  742.039718][T22176]  </TASK>
[  742.294206][ T3643] usb usb10-port1: attempt power cycle
[  742.837539][T16020] usb 17-1: enqueue for inactive port 0
[  742.853403][T16020] usb 17-1: enqueue for inactive port 0
[  742.946263][T22189] SELinux: failed to load policy
[  742.973736][T16020] vhci_hcd: vhci_device speed not set
[  743.204192][T22208] SELinux: failed to load policy
[  743.233655][T16005] usb 11-1: enqueue for inactive port 0
[  743.243358][T16005] usb 11-1: enqueue for inactive port 0
[  743.316615][T22221] sd 0:0:1:0: device reset
[  743.514676][T22232] syz!: rxe_newlink: already configured on team_slave_0
[  743.579752][T22245] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  743.657236][T16005] vhci_hcd: vhci_device speed not set
[  744.000442][T22276] syz!: rxe_newlink: already configured on team_slave_0
[  744.031466][T22279] siw: device registration error -23
[  744.232217][T22285] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  744.263117][T22287] __nla_validate_parse: 12 callbacks suppressed
[  744.263134][T22287] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13575'.
[  744.322916][T22289] sd 0:0:1:0: device reset
[  744.378484][T22300] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13581'.
[  744.393899][ T3643] usb usb10-port1: unable to enumerate USB device
[  744.407152][T22298] SELinux: failed to load policy
[  744.626142][T22318] SELinux: failed to load policy
[  744.752000][T22335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13593'.
[  744.822383][T22347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13597'.
[  745.054601][T22358] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13601'.
[  745.418511][   T29] kauditd_printk_skb: 659 callbacks suppressed
[  745.418527][   T29] audit: type=1326 audit(4841.443:89768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22373 comm="syz.8.13606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  745.448630][   T29] audit: type=1326 audit(4841.443:89769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22373 comm="syz.8.13606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  745.474210][T22374] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13606'.
[  745.485769][   T29] audit: type=1326 audit(4841.503:89770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22373 comm="syz.8.13606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  745.513024][   T29] audit: type=1326 audit(4841.503:89771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22373 comm="syz.8.13606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  745.537536][   T29] audit: type=1326 audit(4841.503:89772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22373 comm="syz.8.13606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  745.562858][   T29] audit: type=1326 audit(4841.503:89773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22373 comm="syz.8.13606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  745.586708][   T29] audit: type=1326 audit(4841.613:89774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22373 comm="syz.8.13606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  745.610685][   T29] audit: type=1326 audit(4841.613:89775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22373 comm="syz.8.13606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  745.651657][T22376] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13607'.
[  745.660912][T22376] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13607'.
[  745.682653][T16021] usb usb18-port1: attempt power cycle
[  745.760234][   T29] audit: type=1326 audit(4841.783:89776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22379 comm="syz.8.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  745.809017][T22382] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13609'.
[  745.809897][   T29] audit: type=1326 audit(4841.783:89777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22379 comm="syz.8.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7986c7f6c9 code=0x7ffc0000
[  745.882316][   T23] usb 6-1: device descriptor read/8, error -110
[  746.004521][T22390] netlink: 96 bytes leftover after parsing attributes in process `syz.8.13611'.
[  746.016679][   T23] usb 6-1: new SuperSpeed USB device number 52 using vhci_hcd
[  746.044624][T22392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  746.053199][   T23] usb 6-1: enqueue for inactive port 0
[  746.059584][   T23] usb 6-1: enqueue for inactive port 0
[  746.066051][T22392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  746.074493][   T23] usb 6-1: enqueue for inactive port 0
[  746.152624][ T3421] IPVS: starting estimator thread 0...
[  746.212262][ T3647] usb usb12-port1: attempt power cycle
[  746.242475][T22409] IPVS: using max 2928 ests per chain, 146400 per kthread
[  746.331543][T22433] sd 0:0:1:0: device reset
[  746.491295][T22435] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  746.533665][T22453] SELinux: failed to load policy
[  746.693074][T22470] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  746.703821][T22470] SELinux: failed to load policy
[  746.835130][T22479] SELinux: failed to load policy
[  747.091808][   T23] usb usb6-port1: unable to enumerate USB device
[  747.165949][T10537] Bluetooth: hci0: Frame reassembly failed (-84)
[  747.171591][T16004] vhci_hcd: vhci_device speed not set
[  747.244341][T22503] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  747.258256][T22503] SELinux: failed to load policy
[  747.335674][T22512] SELinux: failed to load policy
[  747.439112][T22525] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  747.489959][T22535] sd 0:0:1:0: device reset
[  747.547020][T22539] SELinux: failed to load policy
[  747.552461][T22548] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  747.564488][T16021] usb usb18-port1: unable to enumerate USB device
[  747.572338][T22548] SELinux: failed to load policy
[  747.606712][T22552] siw: device registration error -23
[  747.839945][T22585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  747.848898][T22585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  747.878389][T22593] sd 0:0:1:0: device reset
[  747.945945][T22601] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  747.952677][T22601] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  747.960697][T22601] vhci_hcd vhci_hcd.0: Device attached
[  747.971212][T22601] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  747.977839][T22601] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  747.986119][T22601] vhci_hcd vhci_hcd.0: Device attached
[  747.992198][T22601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  748.000945][T22601] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10)
[  748.007546][T22601] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  748.015064][T22601] vhci_hcd vhci_hcd.0: Device attached
[  748.024867][T22601] can0: slcan on ttyS3.
[  748.061570][ T3647] usb usb12-port1: unable to enumerate USB device
[  748.071282][T22601] can0 (unregistered): slcan off ttyS3.
[  748.093345][T22617] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  748.122287][T22606] vhci_hcd: connection closed
[  748.123251][T22602] vhci_hcd: connection closed
[  748.128186][T22604] vhci_hcd: connection closed
[  748.130012][T10537] vhci_hcd: stop threads
[  748.142397][T10537] vhci_hcd: release socket
[  748.147311][T10537] vhci_hcd: disconnect device
[  748.152234][ T3643] vhci_hcd: vhci_device speed not set
[  748.155517][T10537] vhci_hcd: stop threads
[  748.162277][T10537] vhci_hcd: release socket
[  748.166717][T10537] vhci_hcd: disconnect device
[  748.171637][T10537] vhci_hcd: stop threads
[  748.176042][T10537] vhci_hcd: release socket
[  748.180663][T10537] vhci_hcd: disconnect device
[  748.214312][ T3643] usb 3-1: new full-speed USB device number 21 using vhci_hcd
[  748.222646][ T3643] usb 3-1: enqueue for inactive port 0
[  748.228280][ T3643] usb 3-1: enqueue for inactive port 0
[  748.233925][ T3643] usb 3-1: enqueue for inactive port 0
[  748.301102][ T3643] vhci_hcd: vhci_device speed not set
[  748.409328][T22642] SELinux: failed to load policy
[  748.616460][T22664] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  748.652617][T22670] sd 0:0:1:0: device reset
[  748.824391][T22697] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  748.832274][T22679] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  748.985424][T22705] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  749.230586][ T8590] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  749.230583][T32052] Bluetooth: hci0: command 0x1003 tx timeout
[  749.301001][T22729] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  749.533668][T22750] __nla_validate_parse: 12 callbacks suppressed
[  749.533917][T22750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13742'.
[  749.551123][T16004] IPVS: starting estimator thread 0...
[  749.557247][T22747] syz!: rxe_newlink: already configured on team_slave_0
[  749.601730][T22753] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13743'.
[  749.650443][T22751] IPVS: using max 2832 ests per chain, 141600 per kthread
[  749.667254][T22758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13745'.
[  749.764113][T22768] sel_write_load: 1 callbacks suppressed
[  749.764131][T22768] SELinux: failed to load policy
[  749.798755][T22776] sd 0:0:1:0: device reset
[  749.816460][T22779] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13754'.
[  749.919548][T22788] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  749.926198][T22788] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  749.933720][T22788] vhci_hcd vhci_hcd.0: Device attached
[  749.954194][T22788] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  749.960722][T22788] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  749.968661][T22788] vhci_hcd vhci_hcd.0: Device attached
[  749.975695][T22788] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  749.975905][T22781] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  750.007974][T22788] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(10)
[  750.014964][T22788] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  750.022545][T22788] vhci_hcd vhci_hcd.0: Device attached
[  750.061691][T22788] can0: slcan on ttyS3.
[  750.092142][T22812] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13763'.
[  750.120283][T22788] can0 (unregistered): slcan off ttyS3.
[  750.120308][ T3645] vhci_hcd: vhci_device speed not set
[  750.144290][T22825] sd 0:0:1:0: device reset
[  750.181066][T22789] vhci_hcd: connection closed
[  750.181072][T22791] vhci_hcd: connection closed
[  750.181268][T11882] vhci_hcd: stop threads
[  750.196803][T11882] vhci_hcd: release socket
[  750.200072][ T3645] usb 5-1: new full-speed USB device number 13 using vhci_hcd
[  750.201424][T11882] vhci_hcd: disconnect device
[  750.208915][T22790] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  750.214024][T22794] vhci_hcd: connection closed
[  750.230085][T11882] vhci_hcd: stop threads
[  750.239303][T11882] vhci_hcd: release socket
[  750.244167][T11882] vhci_hcd: disconnect device
[  750.290411][T11882] vhci_hcd: stop threads
[  750.294918][T11882] vhci_hcd: release socket
[  750.299744][T11882] vhci_hcd: disconnect device
[  750.449322][   T29] kauditd_printk_skb: 588 callbacks suppressed
[  750.449336][   T29] audit: type=1326 audit(5870.469:90366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22846 comm="syz.4.13769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493cddf6c9 code=0x7ffc0000
[  750.479475][   T29] audit: type=1326 audit(5870.469:90367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22846 comm="syz.4.13769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493cddf6c9 code=0x7ffc0000
[  750.504858][   T29] audit: type=1326 audit(5870.469:90368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22846 comm="syz.4.13769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f493cddf6c9 code=0x7ffc0000
[  750.529467][   T29] audit: type=1326 audit(5870.469:90369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22846 comm="syz.4.13769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493cddf6c9 code=0x7ffc0000
[  750.553214][   T29] audit: type=1326 audit(5870.469:90370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22846 comm="syz.4.13769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493cddf6c9 code=0x7ffc0000
[  750.576947][   T29] audit: type=1326 audit(5870.479:90371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22846 comm="syz.4.13769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f493cddf6c9 code=0x7ffc0000
[  750.601190][   T29] audit: type=1326 audit(5870.479:90372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22846 comm="syz.4.13769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493cddf6c9 code=0x7ffc0000
[  750.625862][   T29] audit: type=1326 audit(5870.479:90373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22846 comm="syz.4.13769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493cddf6c9 code=0x7ffc0000
[  750.650121][   T29] audit: type=1326 audit(5870.519:90374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22846 comm="syz.4.13769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f493cddf6c9 code=0x7ffc0000
[  750.675507][   T29] audit: type=1326 audit(5870.519:90375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22846 comm="syz.4.13769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493cddf6c9 code=0x7ffc0000
[  750.747305][T22872] netlink: 96 bytes leftover after parsing attributes in process `syz.5.13777'.
[  750.752904][T22870] SELinux: failed to load policy
[  750.781375][T22876] sd 0:0:1:0: device reset
[  750.868238][T22887] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13783'.
[  750.910101][ T3421] usb usb4-port1: attempt power cycle
[  751.141870][T22909] SELinux: failed to load policy
[  751.235892][T22915] SELinux: failed to load policy
[  751.265669][T22918] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  751.354266][T22933] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13802'.
[  751.423860][T22944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  751.432700][T22944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  751.651938][T22966] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13816'.
[  751.923220][T11899] Bluetooth: hci0: Frame reassembly failed (-84)
[  752.163293][T23002] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13830'.
[  752.729201][ T3421] usb usb4-port1: unable to enumerate USB device
[  752.743520][T23028] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[  752.750168][T23028] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  752.757755][T23028] vhci_hcd vhci_hcd.0: Device attached
[  752.788777][T23028] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  752.795338][T23028] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  752.803172][T23028] vhci_hcd vhci_hcd.0: Device attached
[  752.809748][T23028] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  752.820059][T23028] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(10)
[  752.826681][T23028] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  752.834259][T23028] vhci_hcd vhci_hcd.0: Device attached
[  752.853390][T23028] can0: slcan on ttyS3.
[  752.909147][T23028] can0 (unregistered): slcan off ttyS3.
[  752.948744][T16021] vhci_hcd: vhci_device speed not set
[  752.961280][T23035] vhci_hcd: connection closed
[  752.961361][T23031] vhci_hcd: connection closed
[  752.966504][T11890] vhci_hcd: stop threads
[  752.966602][T23029] vhci_hcd: connection closed
[  752.971584][T11890] vhci_hcd: release socket
[  752.971602][T11890] vhci_hcd: disconnect device
[  752.971753][T11890] vhci_hcd: stop threads
[  752.994980][T11890] vhci_hcd: release socket
[  752.999672][T11890] vhci_hcd: disconnect device
[  753.007152][T11890] vhci_hcd: stop threads
[  753.012321][T11890] vhci_hcd: release socket
[  753.017908][T11890] vhci_hcd: disconnect device
[  753.023719][T16021] usb 17-1: new full-speed USB device number 11 using vhci_hcd
[  753.031706][T16021] usb 17-1: enqueue for inactive port 0
[  753.041390][T16021] usb 17-1: enqueue for inactive port 0
[  753.047226][T16021] usb 17-1: enqueue for inactive port 0
[  753.128627][T16021] vhci_hcd: vhci_device speed not set
[  753.129725][T23073] sd 0:0:1:0: device reset
[  753.488271][T23110] sd 0:0:1:0: device reset
[  753.788580][T23149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  753.797463][T23149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  753.948254][ T8590] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  754.259795][T23196] SELinux: failed to load policy
[  754.282848][T23198] ip6t_srh: unknown srh match flags  4000
[  754.550643][T23227] __nla_validate_parse: 9 callbacks suppressed
[  754.550662][T23227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13906'.
[  754.631627][T23232] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13908'.
[  754.703185][T23239] SELinux:  policydb version 65535 does not match my version range 15-35
[  754.712160][T23239] SELinux: failed to load policy
[  754.761041][T23251] netlink: 96 bytes leftover after parsing attributes in process `syz.8.13912'.
[  754.819715][T23257] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13916'.
[  754.970167][T23268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13920'.
[  755.071356][T23277] sd 0:0:1:0: device reset
[  755.133080][T23281] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  755.184383][T23289] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13928'.
[  755.227548][ T3645] usb 5-1: enqueue for inactive port 0
[  755.233625][ T3645] usb 5-1: enqueue for inactive port 0
[  755.282070][T23300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13932'.
[  755.307741][ T3645] vhci_hcd: vhci_device speed not set
[  755.331954][T23306] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13934'.
[  755.397742][T23311] syz!: rxe_newlink: already configured on team_slave_0
[  755.433959][T23315] sd 0:0:1:0: device reset
[  755.674347][T23325] SELinux: failed to load policy
[  755.771641][T23333] SELinux: failed to load policy
[  755.802897][T23337] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[  755.809590][T23337] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  755.817546][T23337] vhci_hcd vhci_hcd.0: Device attached
[  755.828195][T23337] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  755.834718][T23337] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  755.842533][T23337] vhci_hcd vhci_hcd.0: Device attached
[  755.848546][T23337] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  755.857872][T23337] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(10)
[  755.864536][T23337] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  755.872069][T23337] vhci_hcd vhci_hcd.0: Device attached
[  755.882612][T23337] can0: slcan on ttyS3.
[  755.937433][T23337] can0 (unregistered): slcan off ttyS3.
[  756.007988][T23338] vhci_hcd: connection closed
[  756.008002][T23342] vhci_hcd: connection closed
[  756.008074][T23340] vhci_hcd: connection closed
[  756.017887][T10555] vhci_hcd: stop threads
[  756.027222][T10555] vhci_hcd: release socket
[  756.031842][T10555] vhci_hcd: disconnect device
[  756.036952][T10555] vhci_hcd: stop threads
[  756.041261][T10555] vhci_hcd: release socket
[  756.045725][T10555] vhci_hcd: disconnect device
[  756.052765][T10555] vhci_hcd: stop threads
[  756.057485][T10555] vhci_hcd: release socket
[  756.062010][T10555] vhci_hcd: disconnect device
[  756.087170][T16004] usb 18-1: enqueue for inactive port 0
[  756.297018][T16004] usb 18-1: enqueue for inactive port 0
[  756.438383][T23369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13953'.
[  756.473424][   T29] kauditd_printk_skb: 692 callbacks suppressed
[  756.473437][   T29] audit: type=1326 audit(7156.504:91068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23372 comm="syz.5.13955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  756.503340][   T29] audit: type=1326 audit(7156.504:91069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23372 comm="syz.5.13955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  756.526953][   T29] audit: type=1326 audit(7156.504:91070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23372 comm="syz.5.13955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  756.550668][   T29] audit: type=1326 audit(7156.504:91071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23372 comm="syz.5.13955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  756.573948][   T29] audit: type=1326 audit(7156.504:91072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23372 comm="syz.5.13955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  756.597423][   T29] audit: type=1326 audit(7156.504:91073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23372 comm="syz.5.13955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  756.621190][   T29] audit: type=1326 audit(7156.504:91074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23372 comm="syz.5.13955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  756.644930][   T29] audit: type=1326 audit(7156.504:91075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23372 comm="syz.5.13955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  756.668299][   T29] audit: type=1326 audit(7156.504:91076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23372 comm="syz.5.13955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  756.692396][   T29] audit: type=1326 audit(7156.504:91077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23372 comm="syz.5.13955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7cb5f6c9 code=0x7ffc0000
[  756.716800][T16004] usb usb18-port1: attempt power cycle
[  756.743723][T23393] FAULT_INJECTION: forcing a failure.
[  756.743723][T23393] name failslab, interval 1, probability 0, space 0, times 0
[  756.757046][T23393] CPU: 0 UID: 0 PID: 23393 Comm: syz.5.13960 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  756.757081][T23393] Tainted: [W]=WARN
[  756.757114][T23393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  756.757127][T23393] Call Trace:
[  756.757133][T23393]  <TASK>
[  756.757143][T23393]  __dump_stack+0x1d/0x30
[  756.757168][T23393]  dump_stack_lvl+0xe8/0x140
[  756.757188][T23393]  dump_stack+0x15/0x1b
[  756.757230][T23393]  should_fail_ex+0x265/0x280
[  756.757262][T23393]  should_failslab+0x8c/0xb0
[  756.757288][T23393]  kmem_cache_alloc_noprof+0x50/0x480
[  756.757374][T23393]  ? getname_flags+0x80/0x3b0
[  756.757405][T23393]  getname_flags+0x80/0x3b0
[  756.757437][T23393]  do_sys_openat2+0x60/0x110
[  756.757521][T23393]  __x64_sys_openat+0xf2/0x120
[  756.757545][T23393]  x64_sys_call+0x2eab/0x3000
[  756.757571][T23393]  do_syscall_64+0xd2/0x200
[  756.757591][T23393]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  756.757667][T23393]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  756.757770][T23393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.757820][T23393] RIP: 0033:0x7f8b7cb5f6c9
[  756.757834][T23393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  756.757854][T23393] RSP: 002b:00007f8b7b5bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  756.757875][T23393] RAX: ffffffffffffffda RBX: 00007f8b7cdb5fa0 RCX: 00007f8b7cb5f6c9
[  756.757938][T23393] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c
[  756.757950][T23393] RBP: 00007f8b7b5bf090 R08: 0000000000000000 R09: 0000000000000000
[  756.757963][T23393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  756.757977][T23393] R13: 00007f8b7cdb6038 R14: 00007f8b7cdb5fa0 R15: 00007ffd34a07ad8
[  756.758006][T23393]  </TASK>
[  756.952654][T16015] vhci_hcd: vhci_device speed not set
[  756.988667][T23404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  756.997749][T23404] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.040691][T23411] SELinux: failed to load policy
[  757.060785][T23414] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  757.061807][T23413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13967'.
[  757.294379][T23432] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  757.512800][T23448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.522760][T23448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.827658][T23461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.844688][T23461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.931574][T23475] SELinux: failed to load policy
[  758.016464][T23486] sd 0:0:1:0: device reset
[  758.190049][T23500] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  758.266320][ T3643] usb usb6-port1: attempt power cycle
[  758.406786][T23511] SELinux: failed to load policy
[  758.463483][T23518] sd 0:0:1:0: device reset
[  758.888228][T23551] sd 0:0:1:0: device reset
[  759.039414][T23580] sd 0:0:1:0: device reset
[  759.067659][T23585] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  759.078371][T23585] SELinux: failed to load policy
[  759.226635][T23614] xt_TPROXY: Can be used only with -p tcp or -p udp
[  759.535737][T16004] usb usb18-port1: unable to enumerate USB device
[  759.766492][T23640] sd 0:0:1:0: device reset
[  759.911790][T23652] __nla_validate_parse: 9 callbacks suppressed
[  759.911807][T23652] netlink: 96 bytes leftover after parsing attributes in process `syz.8.14051'.
[  759.968156][T23661] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14055'.
[  760.012247][T23664] SELinux: failed to load policy
[  760.075152][    C1] ==================================================================
[  760.083251][    C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick
[  760.090451][    C1] 
[  760.092759][    C1] read-write to 0xffff8881000734b8 of 8 bytes by interrupt on cpu 0:
[  760.100806][    C1]  wq_worker_tick+0x60/0x230
[  760.105398][    C1]  sched_tick+0x11a/0x270
[  760.109716][    C1]  update_process_times+0x15f/0x190
[  760.114898][    C1]  tick_nohz_handler+0x249/0x2d0
[  760.119836][    C1]  __hrtimer_run_queues+0x20f/0x5a0
[  760.125066][    C1]  hrtimer_interrupt+0x21a/0x460
[  760.129999][    C1]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[  760.135890][    C1]  sysvec_apic_timer_interrupt+0x6f/0x80
[  760.141522][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  760.147576][    C1]  _raw_spin_unlock_irq+0x2f/0x50
[  760.152978][    C1]  process_scheduled_works+0x486/0x9d0
[  760.158532][    C1]  worker_thread+0x582/0x770
[  760.163109][    C1]  kthread+0x489/0x510
[  760.167172][    C1]  ret_from_fork+0x122/0x1b0
[  760.171746][    C1]  ret_from_fork_asm+0x1a/0x30
[  760.176507][    C1] 
[  760.178819][    C1] read-write to 0xffff8881000734b8 of 8 bytes by interrupt on cpu 1:
[  760.187218][    C1]  wq_worker_tick+0x60/0x230
[  760.191801][    C1]  sched_tick+0x11a/0x270
[  760.196163][    C1]  update_process_times+0x15f/0x190
[  760.201348][    C1]  tick_nohz_handler+0x249/0x2d0
[  760.206367][    C1]  __hrtimer_run_queues+0x20f/0x5a0
[  760.211563][    C1]  hrtimer_interrupt+0x21a/0x460
[  760.216499][    C1]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[  760.222431][    C1]  sysvec_apic_timer_interrupt+0x6f/0x80
[  760.228145][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  760.234138][    C1]  mutex_lock+0x0/0x30
[  760.238201][    C1]  n_tty_receive_buf_common+0x8c2/0xbe0
[  760.243758][    C1]  n_tty_receive_buf2+0x33/0x40
[  760.248866][    C1]  tty_ldisc_receive_buf+0x66/0xf0
[  760.254061][    C1]  tty_port_default_receive_buf+0x59/0x90
[  760.259873][    C1]  flush_to_ldisc+0x148/0x340
[  760.264553][    C1]  process_scheduled_works+0x4ce/0x9d0
[  760.270030][    C1]  worker_thread+0x582/0x770
[  760.274721][    C1]  kthread+0x489/0x510
[  760.278795][    C1]  ret_from_fork+0x122/0x1b0
[  760.283473][    C1]  ret_from_fork_asm+0x1a/0x30
[  760.288230][    C1] 
[  760.290536][    C1] value changed: 0x0000000000480580 -> 0x0000000000482c90
[  760.297622][    C1] 
[  760.299927][    C1] Reported by Kernel Concurrency Sanitizer on:
[  760.306103][    C1] CPU: 1 UID: 0 PID: 10549 Comm: kworker/u8:19 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  760.318325][    C1] Tainted: [W]=WARN
[  760.322306][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  760.332469][    C1] Workqueue: events_unbound flush_to_ldisc
[  760.338453][    C1] ==================================================================
[  760.555071][ T3643] usb usb6-port1: unable to enumerate USB device