last executing test programs:

3m5.890575992s ago: executing program 32 (id=1552):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r0}, 0x18)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000580)={'erspan0\x00', <r2=>0x0, 0x80, 0x1, 0xff, 0x9, {{0x29, 0x4, 0x2, 0x4, 0xa4, 0x66, 0x0, 0x62, 0x29, 0x0, @empty, @remote, {[@cipso={0x86, 0x45, 0x3, [{0x1, 0x8, "768b7bf32b3a"}, {0x2, 0xb, "1d5210b03b249e7787"}, {0x1, 0x9, "19ccd1a66d0334"}, {0x7, 0x11, "ae6641cea382b8bc8b85d78cbdfbe6"}, {0x6, 0x5, "34bd9e"}, {0x1, 0x9, "2c9e7946f0a845"}, {0x2, 0x4, "9626"}]}, @lsrr={0x83, 0x17, 0xd, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote]}, @end, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x1ff, 0x71, 0x3]}, @timestamp_addr={0x44, 0x14, 0xa7, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x541}, {@broadcast, 0xdd06}]}, @rr={0x7, 0xb, 0xdb, [@empty, @private=0xa010102]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000006c0)={@mcast1, 0xa, r2})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$netlink(0x10, 0x3, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r4, 0x4b3a, 0x0)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000180)={r5}, 0x5)
close(r6)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
syz_open_procfs$namespace(r7, &(0x7f0000000700)='ns/time\x00')
execveat(r6, &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', &(0x7f0000000240)='.\x00', &(0x7f00000002c0)='&,.,$\x00', &(0x7f0000000340)='\x00']}, &(0x7f0000000540)={[&(0x7f00000003c0)='-.^9\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='^\x00', &(0x7f00000004c0)='kfree\x00', &(0x7f0000000500)='/dev/bus/usb/00#/00#\x00']}, 0x1700)
r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x402)
dup(r8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0xa, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=<r9=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r11}, 0x10)
unshare(0x6a040000)
fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)

2m45.691425996s ago: executing program 33 (id=1871):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50)
r3 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000e97090abc83ba023b00bf7a1a8152d4ceecde92700ae97ec15fd940deb56ff7d5796a902d0747511193312077c0ad3224c48593aab27844b1b68e6cb1d2bb902a72d5b6a2ce3974eba8a1a9985aa84d96049d4950f2c71b4188b76271f430be3f7ae26f4e5a2f042b5c72364cf75e7f2145f9f9f4648b39cfbf39a", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
lseek(r0, 0x3, 0x0)
getdents(r0, 0x0, 0x40)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x5, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2)
r5 = socket$kcm(0xa, 0x1, 0x106)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0})
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf25030000000900010073797a310000070000000000003000000000000000000005000400010000000900010073797a32000000000504040001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$kcm(r5, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
close(r5)

2m3.401219523s ago: executing program 5 (id=3053):
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x5}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='qgroup_meta_free_all_pertrans\x00', r1, 0x0, 0xf5af0cf}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$netlink(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r3}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="07931dd1e12ac705276f4acedd925f86e7e7c0cfaf20e665aca4107b5b507df036c2835e4f520440963d2cc7b07528d679d48e5dcf30f8d0cd5c3f20f30d2a77454e877523955881b22c12dc6d9094026da211e783b07f6646a9126f5467a4ef576d910174777605abdf42ad3cc3831b8bacc29c5b7e2c4c1f3be9002a5fdbb773462e48680b040a11875f317726644204c0a3ca3f90a6f0367e141bc3c7fc64f868d3d1a67300c7f17fe3c25b75204941f531c479009de97d89c50c"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x20}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0xfffffffffffffd60, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
add_key(0x0, &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)="a67a", 0x2, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2m2.405863559s ago: executing program 5 (id=3069):
syz_io_uring_setup(0x6442, &(0x7f0000000080)={0x0, 0x2000000, 0x10100, 0x0, 0x171}, &(0x7f0000000040), &(0x7f0000000140))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x25, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008801}, 0xa1fea75a361396f3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000a8a100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009582379a4a26fc03bb73dbf78c37195eea5bd9f88ae5084087a398903254eceaac40a79c39d8156743e8ecf33040b8a8a74f5e1f2eda5c2b1e6424f845c6ce2192342ca6c8d598a2f8ca4c8ec6cd20776b8fd7b403504a8d794928e27523b15cae2d0f42d1c89806a510fdee679d3e5e70e3fd9ae60140ed44ade6a056b62e789d7f2017530a9c34"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r6}, 0x18)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
r9 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000140)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)
r10 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r10, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$kcm(r10, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f0000e0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0xfffd}], 0x1}, 0x40)

2m1.828364678s ago: executing program 5 (id=3076):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x2, 0x0, 0x1, 0x44})
io_uring_enter(r5, 0x47b9, 0x3e7f, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r11 = dup(r10)
ioctl$PIO_UNIMAPCLR(r11, 0x4b68, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', <r12=>0x0, 0x29, 0x2, 0x3, 0x8, 0x40, @rand_addr=' \x01\x00', @local, 0x40, 0x30, 0x8, 0xf40}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl0\x00', r12, 0x3b, 0x8d, 0x7, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x8000, 0x7800, 0x11db, 0x4}})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000055f50000000000001811000034cd2cce29759d4d0f26f16135ef2b36239d3bb3df884186653e08c3d226e2cc58f8d511baf61954154e0f36ba75ad5df159d7c1786a30dc94af640cab9990ba9aefdb60895ee84084ed4e1ed813eac5558c07547a522a31d77c7c1b37a49ab0f5d98b", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r14}, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0)
socket$unix(0x1, 0x2, 0x0)
syz_emit_ethernet(0xc7, &(0x7f0000000740)={@remote, @empty, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@generic={0x2, "2f6ee29fbc51102710ebd06ff51a46d65f56da6b26c94f4e71482a03bca6d9e4719f0fa75a2049ea1d0c7d2fa844d68abbbaefa8edfd1ce86521ba79552cb7417b64a34caee74612039bb4f07ef2ba4cff7f1a39c9efa4348d8d2d71b2fc1b3033cd3730f0e2fb9797f82ba33c02655eacc5b9545ced2ef43acfd77512b60409eafca66ebf7156468ea99acd4c18d7c37417fa0450297415f333db1d20b1e4227126128ebd702b95fe45cecde48050502e"}}}, &(0x7f0000000100)={0x1, 0x3, [0x3f, 0x6eb, 0xe37, 0xe26]})

2m1.753064219s ago: executing program 5 (id=3080):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
pread64(r2, &(0x7f0000000580)=""/150, 0x8f, 0x4c00)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast2, 0x80800}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x40c0)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000800))
socket$tipc(0x1e, 0x2, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)

2m1.72080364s ago: executing program 5 (id=3082):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd700006dbdf0504"], 0x14}}, 0x0)

2m1.70854978s ago: executing program 5 (id=3083):
r0 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f00000002c0)={0x7, 0xfffc, 0x19, 0x6, 0x16, "c5036a7d0cff6900"})
bind$rds(r1, 0x0, 0x0)
sendmsg$rds(r1, 0x0, 0x220600c1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f0000000a40)={0x0, 0x0})
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
socket$isdn_base(0x22, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, 0x0)
r6 = syz_io_uring_setup(0x88f, &(0x7f0000000240)={0x0, 0xaee2, 0x80, 0x1, 0x1d5}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000300)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x15, 0x0, r6, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xcd2}, 0x18)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})

2m1.654979411s ago: executing program 1 (id=3086):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)

2m0.764084885s ago: executing program 1 (id=3110):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r3 = creat(0x0, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

2m0.723057196s ago: executing program 1 (id=3113):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x1000000, 0x0, 0x2, 0x9, 0x0, 0x4, 0x5}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00')
pread64(r2, &(0x7f0000000580)=""/150, 0x8f, 0x4c00)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast2, 0x80800}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000039cb000000000029000000320000006c0000000000"], 0x18}, 0x40c0)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES32=r0], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18)
r6 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x1, 0x3}, 0x10)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000000800))
r9 = socket$tipc(0x1e, 0x2, 0x0)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2)
writev(r11, &(0x7f0000000280)=[{&(0x7f0000000040)="ffdf1709476c651a87aa903900f8ffffffffffffff0900ff05c8d5c2", 0x1c}, {&(0x7f0000000100)="bec17c82550a7b88b176c5f1902bb259df87ac4d9deea9be7146461d", 0x1c}], 0x2)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)

2m0.671329986s ago: executing program 1 (id=3115):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

2m0.651327207s ago: executing program 1 (id=3117):
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x40001)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1242, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0)='THAWED\x00', 0x7)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114dc, 0x0, 0x1, 0x89}, 0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x1)

2m0.608466527s ago: executing program 1 (id=3120):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xc8465d319ffccd6e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10)
r6 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r6, &(0x7f0000000340)={0x2, 0xfffb, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
setsockopt$inet_tcp_int(r6, 0x6, 0x2e, &(0x7f00000000c0)=0x100000001, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x3, 0x7ffc9fff}]})
r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r8 = fcntl$dupfd(r7, 0x0, r7)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e22, 0x5, @local, 0xfffffffa}, {0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xca}, 0xffffffffffffffff, {[0x7, 0xd, 0x1, 0x870, 0xba85, 0x7, 0x8000]}}, 0x5c)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, 0x0)
r9 = openat(r8, &(0x7f0000000080)='./file0\x00', 0x40, 0x106)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0xfffffffe, 0x1, 0x0, 0x6, 0x2, 0x6}, 0x20)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32)
r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000540), 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r11}, 0x18)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

1m46.363208416s ago: executing program 34 (id=3083):
r0 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f00000002c0)={0x7, 0xfffc, 0x19, 0x6, 0x16, "c5036a7d0cff6900"})
bind$rds(r1, 0x0, 0x0)
sendmsg$rds(r1, 0x0, 0x220600c1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f0000000a40)={0x0, 0x0})
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
socket$isdn_base(0x22, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, 0x0)
r6 = syz_io_uring_setup(0x88f, &(0x7f0000000240)={0x0, 0xaee2, 0x80, 0x1, 0x1d5}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000300)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x15, 0x0, r6, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xcd2}, 0x18)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})

1m45.49027863s ago: executing program 35 (id=3120):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xc8465d319ffccd6e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10)
r6 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r6, &(0x7f0000000340)={0x2, 0xfffb, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
setsockopt$inet_tcp_int(r6, 0x6, 0x2e, &(0x7f00000000c0)=0x100000001, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x3, 0x7ffc9fff}]})
r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r8 = fcntl$dupfd(r7, 0x0, r7)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e22, 0x5, @local, 0xfffffffa}, {0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xca}, 0xffffffffffffffff, {[0x7, 0xd, 0x1, 0x870, 0xba85, 0x7, 0x8000]}}, 0x5c)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, 0x0)
r9 = openat(r8, &(0x7f0000000080)='./file0\x00', 0x40, 0x106)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0xfffffffe, 0x1, 0x0, 0x6, 0x2, 0x6}, 0x20)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32)
r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000540), 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r11}, 0x18)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

1m33.064564558s ago: executing program 0 (id=3598):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x2, 0x0, 0x1, 0x44})
io_uring_enter(r5, 0x47b9, 0x3e7f, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000010000000c000000"], 0x50)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r11 = dup(r10)
ioctl$PIO_UNIMAPCLR(r11, 0x4b68, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', <r12=>0x0, 0x29, 0x2, 0x3, 0x8, 0x40, @rand_addr=' \x01\x00', @local, 0x40, 0x30, 0x8, 0xf40}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl0\x00', r12, 0x3b, 0x8d, 0x7, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x8000, 0x7800, 0x11db, 0x4}})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000055f50000000000001811000034cd2cce29759d4d0f26f16135ef2b36239d3bb3df884186653e08c3d226e2cc58f8d511baf61954154e0f36ba75ad5df159d7c1786a30dc94af640cab9990ba9aefdb60895ee84084ed4e1ed813eac5558c07547a522a31d77c7c1b37a49ab0f5d98b", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r14}, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0)
socket$unix(0x1, 0x2, 0x0)
syz_emit_ethernet(0xc7, &(0x7f0000000740)={@remote, @empty, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@generic={0x2, "2f6ee29fbc51102710ebd06ff51a46d65f56da6b26c94f4e71482a03bca6d9e4719f0fa75a2049ea1d0c7d2fa844d68abbbaefa8edfd1ce86521ba79552cb7417b64a34caee74612039bb4f07ef2ba4cff7f1a39c9efa4348d8d2d71b2fc1b3033cd3730f0e2fb9797f82ba33c02655eacc5b9545ced2ef43acfd77512b60409eafca66ebf7156468ea99acd4c18d7c37417fa0450297415f333db1d20b1e4227126128ebd702b95fe45cecde48050502e"}}}, &(0x7f0000000100)={0x1, 0x3, [0x3f, 0x6eb, 0xe37, 0xe26]})

1m33.018487729s ago: executing program 0 (id=3599):
pipe2(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r2, 0x0, r1, 0x0, 0x6, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), 0x0}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
readv(r0, &(0x7f0000000680)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1)
dup3(r2, r1, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)

1m32.559909027s ago: executing program 0 (id=3601):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r1 = accept4(r0, &(0x7f00000003c0)=@un=@abs, &(0x7f0000000440)=0x80, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x140, 0x18c, 0x203, 0x0, 0x19030000, 0x258, 0x2e0, 0x2e0, 0x258, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"b3ef", 0x1}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'geneve1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x8886}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r2)
keyctl$instantiate(0xc, r2, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES64=r0], 0x27, 0xfffffffffffffffb)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x5)
mount$bpf(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0)
syz_emit_ethernet(0x9a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000500)=0x2)
syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000580))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$eJzs3c9vG0sdAPDvOnGTtHk4Dzg8nsSjgofSCmonDW0jDiVICE6VKOXCKYTEiaI4cRQ7bRNVKBV/ABLil+DEiQsSZ4SE+icgpEpwRwiBKmjLgQNgtM6ahtRJnNc4buPPR5ru7M7ufmfqeOzZWXkD6FsXI2ImIgYi4nJEFLLtuSzFzm5K93v29MF8mpJoDN35WxJJtq11riRbXsgOG46Ir30l4lvJy3FrW9src5VKeSNbL9VX10u1re0ry6tzS+Wl8trM1OT16RvT16YnTqytN7/05x9+9+dfvvmbz9774+xfL307rdZoVra3HZ3Y6XC/3abnm/8XLYMRsXGcYK+xgaw9+V5XBACAjqTf8T8cEZ+MiOc/6XVtAAAAgG5ofGE0/pVENAAAAIAzK9e8BzbJFbN7AUYjlysWd+/h/Wicz1WqtfpnFqubawu798qORT63uFwpT2T3Co9FPknXJ5v5F+tX961PRcTbEfH9wkhzvThfrSz0+uIHAAAA9IkL+8b//yjsjv8BAACAM2as1xUAAAAAus74HwAAAM6+A8f/yeDpVgQAAADohq/eupWmRuv51wt3tzZXqnevLJRrK8XVzfnifHVjvbhUrS41f7Nv9ajzVarV9c/F2ub9Ur1cq5dqW9uzq9XNtfps87nes+VG4VSaBQAAAOzx9ice/SGJiJ3PjzRT6lxWlj/68Jnu1g7optzxdk+6VQ/g9A30ugJAz7jBF/pXB2N84Iw7YmD/g33rx7xsAAAAvA7GP/ZK8//mA+ENZiAP/cv8P/Qv8//Qv8z/Q58bOnqX4YMKfnvCdQEAALpmtJmSXDGbCxyNXK5YjHir+ViAfLK4XClPRMSHIuL3hfxQuj7Z60oDAAAAAAAAAAAAAAAAAAAAAAAAwBum0UiiAQAAAJxpEbm/JNmD/McL74/uvz5wLvlnobmMiHs/vfOj+3P1+sZkuv3v/9te/3G2/WprS+obp3wlAwAAAGhpjdNb43gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnPnj6Yb6XTjPvkixEx1i7+YAw3l8O/KkTE+edJDO45LomIgROIv/MwIt5pFz9JqxVjWS32x89FxEiP4184gfjQzx6l/c9M+v7L73v/5eJic9n+/TeYpVf15OJB/V+u1f81+7l2/d9bh596uJV59/EvSy+VFrL4DyPeHWzf/7TiJ+3in+u8jd/8+vb2QWWNn0WMH/H5k8Yv1VfXS7Wt7SvLq3NL5aXy2tTU5PXpG9PXpidKi8uVcvZv2xjf+/iv/3NQ/LT959vG3+1/D2x/RLzfYfv//fj+048cEv/Sp9q//u8cEj/9m/h09jmQlo+38ju7+b3e+8Xv3jus/QsHtP/Q1z8iLnXY/su3v/OnDncFAE5BbWt7Za5SKW90JTPStTPLpJnq2lH7pN8TP3CI/Kn8kch0M3M7ew2PfXgPOyUAAKArXnzp319yjAkeAAAAAAAAAAAAAAAAAAAA4JV0/UfIhv7/lwWGe9dUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBD/TcAAP//V7HNuw==")
chmod(&(0x7f0000000340)='./file1\x00', 0x0)

1m32.534054867s ago: executing program 0 (id=3602):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d)

1m32.491793328s ago: executing program 0 (id=3603):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x113, 0x113, 0x5, [@struct={0xc, 0x3, 0x0, 0x4, 0x0, 0x10001, [{0x4, 0x0, 0x9}, {0x8, 0x3, 0x7}, {0x4, 0x2, 0x5}]}, @const={0xd, 0x0, 0x0, 0xa, 0x2}, @enum64={0x10, 0x4, 0x0, 0x13, 0x0, 0x8, [{0x2, 0xf, 0x1}, {0x5, 0x0, 0x7}, {0x6, 0xfac, 0x4}, {0xe, 0x9, 0xfffffff6}]}, @datasec={0x3, 0x8, 0x0, 0xf, 0x3, [{0x5, 0x200, 0x8}, {0x1, 0x401, 0x12a40}, {0x2, 0x8, 0x8}, {0x3, 0xaa39}, {0x2, 0x4, 0x9}, {0x2, 0x8, 0xe01}, {0x2, 0x55, 0x2}, {0x5, 0x100, 0xc}], "17ad4f"}, @enum={0x8, 0x4, 0x0, 0x6, 0x4, [{0x9, 0xb0000000}, {0x6, 0x5}, {0x10, 0x3}, {0xb, 0x5}]}]}, {0x0, [0x2e, 0x2e, 0x30]}}, &(0x7f00000000c0)=""/110, 0x131, 0x6e, 0x0, 0x800}, 0x28)

1m32.431435529s ago: executing program 0 (id=3604):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e00000008303ac712801d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002000000ac1414000000000000000010c5023ed79b75f5caf514cc0c89542712b86ba3c0387ee4f1e63e320fad347c14e1a9064a5c3c9f6fe94656f12c0fc06191d385defbd2c4a4207bd968811660791e26fc99a18223c508fa92c8252bb4af2756cef3ba8094546dd7"], 0x78}, 0x1, 0x7}, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(r4, 0x0, 0x0)
shutdown(r3, 0x2)
r6 = signalfd(r3, &(0x7f0000000180)={[0x8000000000000000]}, 0x8)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r6, &(0x7f00000004c0)="bc6ae582ca25c44bff8a4ad3f66abb42b533210ee6a8dd1efc810ba576b5d3a6b9c000753c909e96cd3a769a534de3a4152ca2b427d7fb0471812535df65347352548f3c9425160deac30b04629a4defcb0702e7ee900c0e97758ab7e3933213ec665d8668401b3593b550722e1ab94e1f44ebababbfd7162d25547094437d78a314f571052f2125e352", &(0x7f0000000580)=""/216, 0x4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00'}, 0x10)
lchown(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0)
add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)="00000102", 0x4, r2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x14)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r7)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x97fb44837f1df86d}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x14, r8, 0x4, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xd}, 0x20000001)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)

1m17.34208782s ago: executing program 36 (id=3604):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e00000008303ac712801d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002000000ac1414000000000000000010c5023ed79b75f5caf514cc0c89542712b86ba3c0387ee4f1e63e320fad347c14e1a9064a5c3c9f6fe94656f12c0fc06191d385defbd2c4a4207bd968811660791e26fc99a18223c508fa92c8252bb4af2756cef3ba8094546dd7"], 0x78}, 0x1, 0x7}, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(r4, 0x0, 0x0)
shutdown(r3, 0x2)
r6 = signalfd(r3, &(0x7f0000000180)={[0x8000000000000000]}, 0x8)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r6, &(0x7f00000004c0)="bc6ae582ca25c44bff8a4ad3f66abb42b533210ee6a8dd1efc810ba576b5d3a6b9c000753c909e96cd3a769a534de3a4152ca2b427d7fb0471812535df65347352548f3c9425160deac30b04629a4defcb0702e7ee900c0e97758ab7e3933213ec665d8668401b3593b550722e1ab94e1f44ebababbfd7162d25547094437d78a314f571052f2125e352", &(0x7f0000000580)=""/216, 0x4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00'}, 0x10)
lchown(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0)
add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)="00000102", 0x4, r2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x14)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r7)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x97fb44837f1df86d}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x14, r8, 0x4, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xd}, 0x20000001)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)

52.331488091s ago: executing program 7 (id=4291):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f0000000500)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
pipe2(&(0x7f00000006c0)={<r2=>0xffffffffffffffff}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
close_range(r2, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@cred={{0x18}}], 0x18, 0x40804}}], 0x1, 0x14008004)
chdir(&(0x7f00000001c0)='./bus\x00')
pipe2(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4000)
recvmsg$can_bcm(r5, &(0x7f0000000280)={&(0x7f0000000340)=@phonet, 0x80, &(0x7f0000000040)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/141, 0x8d}, {&(0x7f0000000b40)=""/251, 0xfb}], 0x3}, 0x40002080)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r9}, 0x18)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0)
mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

52.086356925s ago: executing program 7 (id=4296):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef)
ppoll(&(0x7f0000000b00)=[{r0, 0x6502}], 0x1, &(0x7f0000000b40)={0x0, 0x989680}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x9, 0x7f, 0x5, 0x9, 0x100, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x17, 0x0, 0x0, &(0x7f0000000240)=[@rights], 0x18}, 0x21)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x341840, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)

51.872020128s ago: executing program 7 (id=4303):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffedd, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setresuid(0x0, 0x0, 0x0)

51.830274009s ago: executing program 7 (id=4304):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0)

51.818904319s ago: executing program 7 (id=4305):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x10, r0}, 0x18)
r6 = signalfd4(r0, &(0x7f0000000500)={[0xfffffffffffffff8]}, 0x8, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x8, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x0, 0x4, 0x6, 0x0, 0x2, 0xfffffffffffffffc}, @ldst={0x0, 0x2, 0x4, 0x8, 0x3, 0x50, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xe4, &(0x7f0000000400)=""/228, 0xe2880, 0xa, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x9, 0xfffff75e, 0x4}, 0x10, 0x6fd, 0xffffffffffffffff, 0x4, &(0x7f00000005c0)=[r0, r0, r0, r0, r0, r5, r0, r6], &(0x7f0000000600)=[{0x4, 0x4, 0xf, 0x9}, {0x5, 0x4, 0x7, 0x4}, {0x3, 0x4, 0xd, 0xb}, {0x0, 0x3, 0x0, 0x1}], 0x10, 0x2}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delchain={0x34, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
r8 = socket(0x11, 0xa, 0x0)
bind$can_raw(r8, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r9=>0x0)
io_submit(r9, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002100390d8000000000000000ac141400000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff00000000000000000000000020010000000000000000000000000000ac141400000000000000000000000000000200000300000000000200ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10)
r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r13, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'hsr0\x00'})
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r14}, 0x10)

51.674184441s ago: executing program 7 (id=4309):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000002400128009000100626f6e64000000001400028004001f"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r3 = syz_open_dev$usbfs(0x0, 0x205, 0x88401)
r4 = fcntl$dupfd(r3, 0x406, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x4, 0x66, 0x7, 0xb8}, {0x8, 0xfd, 0x6, 0xbf}, {0xcac3, 0xb5, 0x8, 0x1536ec76}, {0xa, 0xfe, 0x2, 0x3}, {0x6, 0x8, 0x8, 0x5}, {0x31, 0x4, 0x0, 0xffffffff}, {0x800, 0x7, 0x98, 0x8}, {0x5, 0x5, 0x9, 0x3}]})
signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8)

47.789434343s ago: executing program 3 (id=4402):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010)

47.527643717s ago: executing program 3 (id=4403):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000000000d0425bd7000ffdbff2500000000", @ANYBLOB="1000000000000000240012800b00010062726964676500001400028005000700060000000500"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4814)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd30, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000c1, 0x0)

46.675706401s ago: executing program 3 (id=4421):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x2, 0x0, 0x1, 0x44})
io_uring_enter(r5, 0x47b9, 0x3e7f, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r11 = dup(r10)
ioctl$PIO_UNIMAPCLR(r11, 0x4b68, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', <r12=>0x0, 0x29, 0x2, 0x3, 0x8, 0x40, @rand_addr=' \x01\x00', @local, 0x40, 0x30, 0x8, 0xf40}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl0\x00', r12, 0x3b, 0x8d, 0x7, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x8000, 0x7800, 0x11db, 0x4}})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000055f50000000000001811000034cd2cce29759d4d0f26f16135ef2b36239d3bb3df884186653e08c3d226e2cc58f8d511baf61954154e0f36ba75ad5df159d7c1786a30dc94af640cab9990ba9aefdb60895e", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r14}, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0)
socket$unix(0x1, 0x2, 0x0)
syz_emit_ethernet(0xc7, &(0x7f0000000740)={@remote, @empty, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@generic={0x2, "2f6ee29fbc51102710ebd06ff51a46d65f56da6b26c94f4e71482a03bca6d9e4719f0fa75a2049ea1d0c7d2fa844d68abbbaefa8edfd1ce86521ba79552cb7417b64a34caee74612039bb4f07ef2ba4cff7f1a39c9efa4348d8d2d71b2fc1b3033cd3730f0e2fb9797f82ba33c02655eacc5b9545ced2ef43acfd77512b60409eafca66ebf7156468ea99acd4c18d7c37417fa0450297415f333db1d20b1e4227126128ebd702b95fe45cecde48050502e"}}}, &(0x7f0000000100)={0x1, 0x3, [0x3f, 0x6eb, 0xe37, 0xe26]})

46.475688395s ago: executing program 3 (id=4424):
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
fcntl$setstatus(r0, 0x4, 0x7c00)
dup3(r1, r0, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)

46.247885668s ago: executing program 3 (id=4431):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000000000d0425bd7000ffdbff2500000000", @ANYBLOB="1000000000000000240012800b00010062726964676500001400028005000700060000000500"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4814)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd30, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000c1, 0x0)

45.370828232s ago: executing program 3 (id=4453):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001114010025bd7080fbdbdf33080001000000000008004b0028000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040084}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
r5 = socket$tipc(0x1e, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xf7}, 0x18)
lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r8, 0x110, 0x3)
bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)

36.497356004s ago: executing program 37 (id=4309):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000002400128009000100626f6e64000000001400028004001f"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r3 = syz_open_dev$usbfs(0x0, 0x205, 0x88401)
r4 = fcntl$dupfd(r3, 0x406, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x4, 0x66, 0x7, 0xb8}, {0x8, 0xfd, 0x6, 0xbf}, {0xcac3, 0xb5, 0x8, 0x1536ec76}, {0xa, 0xfe, 0x2, 0x3}, {0x6, 0x8, 0x8, 0x5}, {0x31, 0x4, 0x0, 0xffffffff}, {0x800, 0x7, 0x98, 0x8}, {0x5, 0x5, 0x9, 0x3}]})
signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8)

30.322702863s ago: executing program 38 (id=4453):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001114010025bd7080fbdbdf33080001000000000008004b0028000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040084}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
r5 = socket$tipc(0x1e, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xf7}, 0x18)
lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r8, 0x110, 0x3)
bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)

6.772682662s ago: executing program 2 (id=5090):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003e00000826bd7000d7c0e13896476dfddbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000080000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$eJzs3c9rJFkdAPBvdbpjMpPZZNWDLriu7kJm0OlONu5u8LCOIHpaUNf7GJNOCOmkQ7qzOwmLm8E/QBBRwZNevAj+AYIsePG4CAt6VlQU0VkFPejUUt3VmZlMd6cz0/kxyecDlXqvXlV93+tQ1fW6HlUBXFjPRcSNiLibpum1iJjMlxfyKfbaU7be+3feWsymJNL09X8kkeTLOvtK8vnlfLOxiPj6VyK+lTwct7Gzu7ZQq1W38nylub5ZaezsXl9dX1iprlQ35uZmX55/Zf6l+ZmhtPNKRLz6pb/84Ls/+/Krv/rsm3+8+ber386qNZGX39+OIyr2K2w3vXTj4AZbjxjsLMraU+pkxrutMfLQktvHXCcAALrLrvE/HBGfjohrMRkj/S9nAQAAgCdQ+oWJ+F8SkXY32mM5AAAA8AQptMbAFqOcjwWYiEKhXG6P4f1oXCrU6o3mZ5br2xtL7bGyU1EqLK/WqjP5WOGpKCVZfraVvpd/8UB+LiKejojvT4638uXFem3ptH/8AAAAgAvicqvPnxQ6/f9/T7b7/wAAAMA5M3WEdf9zjPUAAAAAjs9R+v8AAADAk0n/HwAAAM61r772WjalnfdfL72xs71Wf+P6UrWxVl7fXiwv1rc2yyv1+krrmX3rh+2vVq9vfi42tm9VmtVGs9LY2b25Xt/eaN5cbb0OHAAAADgFT3/ynd8nEbH3+fHWlBkdbNMBVwPOquJ+KsnnXQ7rPzzVnv/5hCoFnIiRvqWlE6sHcPKKp10B4NT4hgeSQ8p7Dt55N59/arj1AQAAhm/6473v/xf6brnXvxg48xzEcHH1v/8PnGet+/+DjuR1sQDnSskVAFx4g9//P3AR8O6gEdL0yJUCAACGaqI1JYVyfmU/EYVCuRxxpfVagFKyvFqrzkTEUxHxu8nSh7L8bGvL5NA+AwAAAAAAAAAAAAAAAAAAAAAAAADQlqZJpAAAAMC5FlH4a/Lr9rP8pydfmDj4+8Bo8t/JyF8R+uaPX//hrYVmc2s2W/7P/eXNH+XLXzyNXzAAAADgQjjSC/w7/fROPx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhun9O28tdqaTjPv3L0bE1IH4SVZSjLGI0YixKEXEpX8lUbxvu0JEjAwh/nj252Pd2p9k1doPeTB+0tn2Me3d7hs/prJPoUf8y0OIDxfZO9n550a3468Qz7Xm3Y+/YsQD+UfV9fyXG8v/jvQ4/q8MGOOZ935R6Rn/dsQzxe7nn078pEf85weM/81v7O72Kkt/EjHd9fsneSBWpbm+WWns7F5fXV9Yqa5UN+bmZl+ef2X+pfmZyvJqrZr/7Rrje5/45d1+7b/UI/7UIe1/YcD2//+9W3c+0k6WusW/+nyX+L/5ab7Gw/Hz77707TydlU930nvt9P2e/flvn+3X/qUe7T/s/391wPZf+9p3/jTgqgDACWjs7K4t1GrVrWEnCse25yMmsl76GajGWftYJKpbjbeHusM0TdPsmHqM/SRxFj6WVuK0z0wAAMCw3bvoP+2aAAAAAAAAAAAAAAAAAAAAwMV1Eo8TOxhzbz+VDOMR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/FBAAAA///ROdsN")
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@ipv6_newroute={0x38, 0x18, 0x100, 0x70bd27, 0x25dfdbfd, {0xa, 0x20, 0x14, 0x0, 0x0, 0x1, 0xff, 0x1}, [@RTA_PRIORITY={0x8, 0x6, 0xf}, @RTA_MULTIPATH={0xc, 0x9, {0x627, 0x8}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0xf}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x3}, @in, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0xc}, {0xb79, 0x3, 0x0, 0xffffffeffffffffd}, {0x800, 0x2, 0x6, 0x20000000}, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3c0}}, 0xe8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050)
close(0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x0)

6.692390763s ago: executing program 2 (id=5093):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file1', [{0x20, '\x00'}], 0xa, "04c2b02d87d92c7158c3b28fc2807fe16640e445e5890d0c26db82592166b11ae2717fdc9867a94215302c525610d6b872ba9e031183eaec17aff51b"}, 0x49)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

6.691646123s ago: executing program 2 (id=5095):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000002000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x72, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c0020010000000000000000000000000000ff0200000000000000000000000000010004"], 0x0)

6.646604784s ago: executing program 2 (id=5097):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004300)="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", 0x620}], 0x1}}], 0x1, 0x4)

6.107717662s ago: executing program 2 (id=5104):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
socket$kcm(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

1.579629955s ago: executing program 4 (id=5203):
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x12081, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x3, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0)

1.215231611s ago: executing program 4 (id=5208):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1.190074371s ago: executing program 4 (id=5209):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
fcntl$setsig(r0, 0xa, 0x13)
fcntl$setlease(r0, 0x400, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1a0000230000f9ff000000000021ea00da885811c8ad34e7923eea27b2d2a57494f7c249f5eb5800b754999c289bafaa72afb7f994e70270658eb54d5235314e3bd4bb1f70a4da10c5431a45efe8e46f6c15618648fd53b5dcf5cc14c80cd1793d4a9ab2239b19db6ae413494a691e53c06236e03bea1a3354f153affabf312b853be95df197d69c3c1a06b5b715e9f69eea1c0fa966c8ed9453c475375e493271e7c5282a937b2e04c588c2a5c42bf88f6dd260d0c434efcb997e9633a8d0b7f0aa17e9f518c0b770", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=0x0], 0x50)
close(r6)

1.064012513s ago: executing program 8 (id=5210):
r0 = memfd_create(&(0x7f0000000a80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04\xc1\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xe7&\x97\xbb\xdaB\xdc\xa0\xc7\x84>\b\xb4\xc8\\\xc5\xa7\x19{\xb3\x8ew\x02\xab3Q\xe4\xe3\x9c\xde\x1e\xe5\xc5;%JV\x936\xdc\x009\xeeH\xa8\xbfB>\xae\xa3.\x03\x94\xb7\xf6\xcf\xea\xc9-\xed5\xcdZ\xbe\"\x06\xc3\xf7%\x99pzX\xcf\x16B2;TS\x8e\xc5g\xb6\xed\x82\x86\xc7\xc1\xe4\x7f\xa2\xea\xecc5D\xf7\xf3\x8f\x80\xe8\xd5N\xb3\x0e\xff\xa8\x01\x82Q\x92?\xa9`\xd5.WH^\x9c\x04\xb9aP\xd6-P<\xdc2g\xa0Ln4\xa9\f\x1b\xdf:\xf5\xfc\xdc\xc7\xe9E5\xa0\x7f;\x0e\xefE\xee\xa4\xe3\xec=\x93\xe3\x95\x81\xfc\xd2\xd8\x8bz', 0x6)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
pipe2$9p(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = dup(r2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000067480014fa229b690d517588c59e040000000400000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00), &(0x7f0000001c40)=r5}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x408c8, 0xe)
close_range(r6, 0xffffffffffffffff, 0x0)
capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)={0x0, 0x3})
setrlimit(0x40000000000008, &(0x7f0000000000))
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8)
sendto$inet6(r7, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000280)={0x0, 0xfffffffffffffe10, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r7], 0x128}, 0x1, 0x0, 0x0, 0x20004001}, 0x22004805)
openat$ppp(0xffffffffffffff9c, 0x0, 0x161002, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x118)

1.033695794s ago: executing program 8 (id=5211):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0xf4)

1.004969804s ago: executing program 9 (id=5213):
r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x38260cfcbce27f0d, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f0000000c40)=ANY=[@ANYRES32=r1, @ANYRESDEC=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18)
r5 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000680)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r9=>0x0})
bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f0134dddcdc18"], 0xdd12}, {&(0x7f0000000980)=ANY=[], 0x78}], 0x2}, 0x20040051)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0xc0, &(0x7f0000000c00)=0x1, 0x0, 0x4)
io_uring_enter(r5, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x121000e, &(0x7f0000000780)={[{@abort}, {@data_err_abort}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@dioread_nolock}, {@oldalloc}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@acl}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'min_batch_time'}}, {@seclabel}, {@hash}, {@uid_gt={'uid>', 0xee01}}]}, 0x1, 0x542, &(0x7f0000000140)="$eJzs3c1vI2cZAPBnnHhJuinZAodSqWVFi3YrWGfT0Dbi0HYF4lYBWu5LlHijKE68ip12bVVVKg4ckRCilThx4oLEH4CE+iegSpXoHQECVbCFAwdgqhmP98MdZxOtHUfO7ydN/M47H8/z2rH9zodnAjizLkbEaxExExHPR8RiUV8phjjoDdl8n9x5az0bsinX/5FEUtRF5MW7zheLzfUeSrU63e21RqO+V4wvtXduLbU63StbO2ub9c367srK8kurL6++uHp1JO3M2vXKd/76i5/++ruv/P4bb/7pxt8vv50l/e1ietGOkfso/1vNnou7ZiNibxzBJmCmaE910okAAHAkWR//CxHx1bz/vxgzeW8uN9ilmzv57AAAAIBRSF9diP8mEWna37xPAQAAgCnzakQsRFKpFecCLESlUqv1zuH9UjxWaTRb7a/fbO7vbmTT8jM9Kze3GvWrxTm1F6KaZOPLefne+AsD4ysR8URE/HxxPh+vrTcbGxPe9wEAAABnxfmB7f9/H/S2/wEAAIApc2HSCQAAAABjV2z/zwzWJxPIBQAAABgPx/8BAABgqn3/9dezIe3f/3rjjc7+dvONKxv11nZtZ3+9tt7cu1XbbDY382v27TxsfY1m89Y3Y3f/9lK73movtTrdGzvN/d32jS33DwQAAIBJeeIr73+URMTBt+bzIXMuyn4MUHCuAEyNynFm/sv48gBO3rCveWD6zU46AWByDo6/yMVx5AFMzAOX+ijpFNx/8s4D+wz+ML6cAACA0br05fLj//md/iedHDBWxzr+D0wVx//h7Drm8f8PxpUHcPKqegBw5j3sVh+lF++YH3L8/1zZzGl66LoAAICxW8iHpFIrjgUuRKVSq0U8nv/Uv5rc3GrUr0bE5yPij4vVz2Xjy/mSidsDAgAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAADDVIip/S4r7f11afG5hcP/AueQ/i1Hc0uvNX15/9/biXHtvOav/59369nvX37291m7vvTCJPRgAAADAoP52ev64POlsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJg2n9x5a70/nGTcj6/F9+JCWfzZmMsf56IaEY/9K4nZ+5ZLImJmBPEP3omIJ8viJ1lacaHIYjB+JSLmRx+/em/K3fhPp2laGv/8COLDWfb+tYh4rez9X4mL+WP5+3+2GB7Vx9fyN3lp/P7n38yQz7/HjxjjqQ9/uzQ0/jsRT82Wf/714ydD4j9btsKSJ+VHP+x2P1PZW3mkv4q4VPr9kzwQa6m9c2up1ele2dpZ26xv1ndXVpZfWn159cXVq0s3txr14m9pG3/29O/+P1D1v7Qnb398Nv5PoveyHNr+57LCfZ/YkQ6GKYJ9ePvOF3vF6sAq8viXny1//Z88JH72P/G14nsgm36pXz7ole/3zG8+eKY0sSL+xpDn/2Gv/+VhKx3w/A9+/OcjzgoAnIBWp7u91mjU945UmD/OzJ3udppG9GveS9P0mIsrnGCh37sbW4i509LSU1DI+tanII1hhVHs2QIAAE6be53+Iy/y9lgTAgAAAAAAAAAAAAAAAAAAgDOo1YnK4dcDS9OIR7uc2GDMg8k0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgUJ8GAAD//4gf0qc=")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES8=r1, @ANYBLOB="0000000000000000128009000100626f6e64000000001400028008001300010000000800140000"], 0x44}}, 0x4080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x88000)
ioctl$TUNSETIFF(r11, 0x400454da, &(0x7f0000000140)={'bond0\x00'})
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})

1.004616164s ago: executing program 8 (id=5214):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
syz_io_uring_setup(0x495, &(0x7f0000000200)={0x0, 0x10079bc, 0x400, 0x7, 0x1d5}, 0x0, &(0x7f0000000400)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x50, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)

764.756148ms ago: executing program 2 (id=5215):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xf7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f6e756d74696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f63686172736572746e616d650000000065642c757466383d312c004845160000000000dc36932fc742d15c3e26fd473922f5149d005c4436617ef86ada07f1c81f9761f2138fafbab601f510ee039edc8b2ddf0f6d6986872108cef5c68f15e6fe743c00800000983b25dc5400"/162, @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1)
mlockall(0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000011b00ee060012feffffff000500", @ANYRES32=r5, @ANYRES8=r1], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x80000000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0xe, &(0x7f00000008c0)=""/59, &(0x7f0000000900)=0x3b)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@gettclass={0x24, 0x2a, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3, 0x9}, {0xa, 0xf}, {0x1, 0xfff3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40040004}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYRES16=r6], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0f0000000000000d0000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000000)={r7, 0x0, &(0x7f0000000240)=""/206}, 0x20)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x4, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)

618.742091ms ago: executing program 8 (id=5216):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) (fail_nth: 8)

511.657552ms ago: executing program 9 (id=5217):
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
fcntl$setstatus(r0, 0x4, 0x7c00)
dup3(r1, r0, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)

379.597794ms ago: executing program 9 (id=5218):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r0, 0x0, 0x0)

351.635815ms ago: executing program 9 (id=5219):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x2, 0x0, 0x1, 0x44})
io_uring_enter(r5, 0x47b9, 0x3e7f, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r11 = dup(r10)
ioctl$PIO_UNIMAPCLR(r11, 0x4b68, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', <r12=>0x0, 0x29, 0x2, 0x3, 0x8, 0x40, @rand_addr=' \x01\x00', @local, 0x40, 0x30, 0x8, 0xf40}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl0\x00', r12, 0x3b, 0x8d, 0x7, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x8000, 0x7800, 0x11db, 0x4}})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000055f50000000000001811000034cd2cce29759d4d0f26f16135ef2b36239d3bb3df884186653e08c3d226e2cc58f8d511baf61954154e0f36ba75ad5df159d7c1786a30dc94af640cab9990ba9aefdb60895ee84084ed4e1ed813eac5558c07547a522a31d77c7c1b37a49ab0f5d98b", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r14}, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xe4}}, 0x0)
socket$unix(0x1, 0x2, 0x0)
syz_emit_ethernet(0xc7, &(0x7f0000000740)={@remote, @empty, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@generic={0x2, "2f6ee29fbc51102710ebd06ff51a46d65f56da6b26c94f4e71482a03bca6d9e4719f0fa75a2049ea1d0c7d2fa844d68abbbaefa8edfd1ce86521ba79552cb7417b64a34caee74612039bb4f07ef2ba4cff7f1a39c9efa4348d8d2d71b2fc1b3033cd3730f0e2fb9797f82ba33c02655eacc5b9545ced2ef43acfd77512b60409eafca66ebf7156468ea99acd4c18d7c37417fa0450297415f333db1d20b1e4227126128ebd702b95fe45cecde48050502e"}}}, &(0x7f0000000100)={0x1, 0x3, [0x3f, 0x6eb, 0xe37, 0xe26]})

281.908866ms ago: executing program 9 (id=5220):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

281.348136ms ago: executing program 4 (id=5221):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='unloc'], 0xe)

220.610817ms ago: executing program 4 (id=5222):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef)
ppoll(&(0x7f0000000b00)=[{0xffffffffffffffff, 0x6502}], 0x1, &(0x7f0000000b40)={0x0, 0x989680}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x9, 0x7f, 0x5, 0x9, 0x100, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

220.315327ms ago: executing program 8 (id=5223):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1e5, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x90, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x50)

219.081767ms ago: executing program 9 (id=5224):
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
fcntl$setstatus(r0, 0x4, 0x7c00)
dup3(r1, r0, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)

180.716128ms ago: executing program 6 (id=5225):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000200f100850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = memfd_secret(0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r4], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc9b, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000007c0)='signal_generate\x00', r7}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

180.169117ms ago: executing program 8 (id=5226):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000096000a0c0000af1465ccf6afbc6940dd4b06801dbcda0c6ad107a2ba257b5f37b1b33f39d35386b9ca73c2615985cd5390a4471d872d9ffa1743f4cf6a5a27b9cbcc7f840a9bd4ff2859e7cf1035fdebddd481e1ea3f2775d3bd025a051148633c174d856dd7cd283b2af920a6b95c"], 0x28}}, 0x0)
write$binfmt_aout(r0, &(0x7f0000000b80)=ANY=[@ANYRESOCT=r1, @ANYBLOB="20f4564b23efec3eb9b57f83975ae91918900847dc363a88729abdc53503490db0404fe72263c31b13cb1883d9dc48668e6913fc89084ab29a4814cd423b455d4959af6ce54da36bd64dd12dd5b7554661508bd9d1038bff759c451af8d9ff64bb195835b019c521fa2f49d9878a90da314b6c28d0032c311361aca58a4976fa908056dec20387980d8a1d352621e3615d69238a00d9fdf515c10293c93adb13cedc", @ANYBLOB="9569a2234417ad952275fe0064d2a486dd5bb2e80a06f206c70b4e5498ee948299df0fd3ccbd46b7c368a94dac4217f5246f8cda16490e0c8dc9190d4eb228730b68f037b692b30d3ffa8f8763901fdd00bf11d4a2f1df5870422f2d4e1a0577cb31eb2eb87c76a57ff9675e4615e5e0fc70e24ce6460706027cc84b732bfbec3eed6f9643d9eb42422c2e225dd8105b9914644a7b9f2c2ce5954c5e3482a973d0b85e18673fc48aac7b23a850d9cd28bf5a0d3ddeef8b5250168cf81590c4ac248a44cae95ea6737ea752f45f6175bcdeb8bf383d231944e1b149a6fdcbf0336bd72b596c497cb5", @ANYRESOCT=r1], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000100)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffdb92300bdb92e6b2000e08004bba004000650000020690780a010102ac1414bb070b05e0000001ac1e0001440c0501ac1414aa00000000004e244e23", @ANYRES32=r5, @ANYRESHEX=r3, @ANYRES16], 0x0)
r7 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xfffffffb, 0x3, 0x4, 0xc676, 0x8, "dc6e5a2ea0f750e267f882e7818580523fcbc9", 0x3ff, 0x4})
dup3(r7, r0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000009c0000000b", @ANYRESOCT=r5], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000000000bbbbbbbbbb1109d8e1e7b48c66cccf6a4ea4d9d72e7e121bdd590fe2be8db10c66c599a84538c0c9c1a5b7599f2ac51c9d1e1eedb7f9b8035377abc7c458cca46c95a3d86becc789133a6e177b8d4436a7ffe2560b39c1e7b088c82d7a94d041253837b93837ed0e5e8ad8888ed34f527f0e298dabb38eac10e0e47f1fc96597e18246fdcfffd2a78421b56a833313debc94a766"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
statfs(&(0x7f0000000200)='./file0\x00', 0x0)

179.652237ms ago: executing program 6 (id=5227):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd44}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0x12, &(0x7f0000000280)=""/18, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r2], 0x0, 0x10, 0x8}, 0x94)
write$cgroup_int(r2, 0x0, 0x2)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
socket$xdp(0x2c, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket(0x10, 0x3, 0x9)
accept4$packet(r5, 0x0, &(0x7f00000002c0), 0x80800)
creat(&(0x7f00000000c0)='./file0\x00', 0xf4)

125.915848ms ago: executing program 6 (id=5228):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x72, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c0020010000000000000000000000000000ff0200000000000000000000000000010004"], 0x0)

93.078149ms ago: executing program 6 (id=5229):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r0, 0x0, 0x0)

66.02535ms ago: executing program 4 (id=5230):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000096000a0c0000af1465ccf6afbc6940dd4b06801dbcda0c6ad107a2ba257b5f37b1b33f39d35386b9ca73c2615985cd5390a4471d872d9ffa1743f4cf6a5a27b9cbcc7f840a9bd4ff2859e7cf1035fdebddd481e1ea3f2775d3bd025a051148633c174d856dd7cd283b2af920a6b95c"], 0x28}}, 0x0)
write$binfmt_aout(r0, &(0x7f0000000b80)=ANY=[@ANYRESOCT=r1, @ANYBLOB="20f4564b23efec3eb9b57f83975ae91918900847dc363a88729abdc53503490db0404fe72263c31b13cb1883d9dc48668e6913fc89084ab29a4814cd423b455d4959af6ce54da36bd64dd12dd5b7554661508bd9d1038bff759c451af8d9ff64bb195835b019c521fa2f49d9878a90da314b6c28d0032c311361aca58a4976fa908056dec20387980d8a1d352621e3615d69238a00d9fdf515c10293c93adb13cedc", @ANYBLOB="9569a2234417ad952275fe0064d2a486dd5bb2e80a06f206c70b4e5498ee948299df0fd3ccbd46b7c368a94dac4217f5246f8cda16490e0c8dc9190d4eb228730b68f037b692b30d3ffa8f8763901fdd00bf11d4a2f1df5870422f2d4e1a0577cb31eb2eb87c76a57ff9675e4615e5e0fc70e24ce6460706027cc84b732bfbec3eed6f9643d9eb42422c2e225dd8105b9914644a7b9f2c2ce5954c5e3482a973d0b85e18673fc48aac7b23a850d9cd28bf5a0d3ddeef8b5250168cf81590c4ac248a44cae95ea6737ea752f45f6175bcdeb8bf383d231944e1b149a6fdcbf0336bd72b596c497cb5", @ANYRESOCT=r1], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000100)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffdb92300bdb92e6b2000e08004bba004000650000020690780a010102ac1414bb070b05e0000001ac1e0001440c0501ac1414aa00000000004e244e23", @ANYRES32=r5, @ANYRESHEX=r3, @ANYRES16], 0x0)
r7 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xfffffffb, 0x3, 0x4, 0xc676, 0x8, "dc6e5a2ea0f750e267f882e7818580523fcbc9", 0x3ff, 0x4})
dup3(r7, r0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000009c0000000b", @ANYRESOCT=r5], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000000000bbbbbbbbbb1109d8e1e7b48c66cccf6a4ea4d9d72e7e121bdd590fe2be8db10c66c599a84538c0c9c1a5b7599f2ac51c9d1e1eedb7f9b8035377abc7c458cca46c95a3d86becc789133a6e177b8d4436a7ffe2560b39c1e7b088c82d7a94d041253837b93837ed0e5e8ad8888ed34f527f0e298dabb38eac10e0e47f1fc96597e18246fdcfffd2a78421b56a833313debc94a766"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
statfs(&(0x7f0000000200)='./file0\x00', 0x0)

15.54967ms ago: executing program 6 (id=5231):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x2, 0x0, 0x1, 0x44})
io_uring_enter(r5, 0x47b9, 0x3e7f, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r11 = dup(r10)
ioctl$PIO_UNIMAPCLR(r11, 0x4b68, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', <r12=>0x0, 0x29, 0x2, 0x3, 0x8, 0x40, @rand_addr=' \x01\x00', @local, 0x40, 0x30, 0x8, 0xf40}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl0\x00', r12, 0x3b, 0x8d, 0x7, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x8000, 0x7800, 0x11db, 0x4}})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000055f50000000000001811000034cd2cce29759d4d0f26f16135ef2b36239d3bb3df884186653e08c3d226e2cc58f8d511baf61954154e0f36ba75ad5df159d7c1786a30dc94af640cab9990ba9aefdb60895ee84084ed4e1ed813eac5558c07547a522a31d77c7c1b37a49ab0f5d98b", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r14}, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xe4}}, 0x0)
socket$unix(0x1, 0x2, 0x0)
syz_emit_ethernet(0xc7, &(0x7f0000000740)={@remote, @empty, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@generic={0x2, "2f6ee29fbc51102710ebd06ff51a46d65f56da6b26c94f4e71482a03bca6d9e4719f0fa75a2049ea1d0c7d2fa844d68abbbaefa8edfd1ce86521ba79552cb7417b64a34caee74612039bb4f07ef2ba4cff7f1a39c9efa4348d8d2d71b2fc1b3033cd3730f0e2fb9797f82ba33c02655eacc5b9545ced2ef43acfd77512b60409eafca66ebf7156468ea99acd4c18d7c37417fa0450297415f333db1d20b1e4227126128ebd702b95fe45cecde48050502e"}}}, &(0x7f0000000100)={0x1, 0x3, [0x3f, 0x6eb, 0xe37, 0xe26]})

0s ago: executing program 6 (id=5232):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='unloc'], 0xe)

kernel console output (not intermixed with test programs):

]  __x64_sys_ppoll+0x67/0x80
[  297.746378][T16489]  x64_sys_call+0x2de5/0x2fb0
[  297.746468][T16489]  do_syscall_64+0xd2/0x200
[  297.746488][T16489]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  297.746515][T16489]  ? clear_bhb_loop+0x40/0x90
[  297.746556][T16489]  ? clear_bhb_loop+0x40/0x90
[  297.746577][T16489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.746599][T16489] RIP: 0033:0x7f63bb40e9a9
[  297.746615][T16489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  297.746714][T16489] RSP: 002b:00007f63b9a77038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  297.746732][T16489] RAX: ffffffffffffffda RBX: 00007f63bb635fa0 RCX: 00007f63bb40e9a9
[  297.746745][T16489] RDX: 0000000000000000 RSI: 2000000000000073 RDI: 0000200000000080
[  297.746758][T16489] RBP: 00007f63b9a77090 R08: ffffffffffffff3a R09: 0000000000000000
[  297.746770][T16489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  297.746829][T16489] R13: 0000000000000000 R14: 00007f63bb635fa0 R15: 00007ffc4c015918
[  297.746847][T16489]  </TASK>
[  297.774037][T16468] chnl_net:caif_netlink_parms(): no params data found
[  297.977601][T16493] lo speed is unknown, defaulting to 1000
[  297.992257][T16468] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.999417][T16468] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.006757][T16468] bridge_slave_0: entered allmulticast mode
[  298.013436][T16468] bridge_slave_0: entered promiscuous mode
[  298.022674][T16468] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.029837][T16468] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.037172][T16468] bridge_slave_1: entered allmulticast mode
[  298.043993][T16468] bridge_slave_1: entered promiscuous mode
[  298.072255][T16468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.098103][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4590'.
[  298.124178][T16468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.173289][T16468] team0: Port device team_slave_0 added
[  298.190701][T16468] team0: Port device team_slave_1 added
[  298.232886][T16468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.239909][T16468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.266044][T16468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.369800][T16468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.376769][T16468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.402820][T16468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  298.464462][T16468] hsr_slave_0: entered promiscuous mode
[  298.473433][T16468] hsr_slave_1: entered promiscuous mode
[  298.486424][T16468] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  298.532353][T16468] Cannot create hsr debugfs directory
[  298.806731][T16468] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.816687][T16468] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.890781][T16468] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.900641][T16468] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.945299][T16518] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53264 sclass=netlink_audit_socket pid=16518 comm=syz.8.4593
[  298.961432][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4593'.
[  298.971524][T16468] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.981587][T16468] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.020650][T16468] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.030675][T16468] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.080510][T16523] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4595'.
[  299.101895][T16468] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  299.125266][   T29] kauditd_printk_skb: 281 callbacks suppressed
[  299.125295][   T29] audit: type=1326 audit(1753592330.865:12366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16524 comm="syz.8.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  299.155169][   T29] audit: type=1326 audit(1753592330.865:12367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16524 comm="syz.8.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  299.178839][   T29] audit: type=1326 audit(1753592330.865:12368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16524 comm="syz.8.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  299.202670][   T29] audit: type=1326 audit(1753592330.865:12369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16524 comm="syz.8.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  299.226402][   T29] audit: type=1326 audit(1753592330.865:12370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16524 comm="syz.8.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  299.249999][   T29] audit: type=1326 audit(1753592330.865:12371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16524 comm="syz.8.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  299.273687][   T29] audit: type=1326 audit(1753592330.865:12372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16524 comm="syz.8.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  299.277810][T16468] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  299.297243][   T29] audit: type=1326 audit(1753592330.865:12373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16524 comm="syz.8.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  299.297295][   T29] audit: type=1326 audit(1753592330.865:12374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16524 comm="syz.8.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  299.337982][T16529] FAULT_INJECTION: forcing a failure.
[  299.337982][T16529] name failslab, interval 1, probability 0, space 0, times 0
[  299.351068][   T29] audit: type=1326 audit(1753592330.865:12375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16524 comm="syz.8.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  299.387454][T16529] CPU: 0 UID: 0 PID: 16529 Comm: syz.9.4598 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  299.387480][T16529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  299.387557][T16529] Call Trace:
[  299.387564][T16529]  <TASK>
[  299.387571][T16529]  __dump_stack+0x1d/0x30
[  299.387592][T16529]  dump_stack_lvl+0xe8/0x140
[  299.387628][T16529]  dump_stack+0x15/0x1b
[  299.387647][T16529]  should_fail_ex+0x265/0x280
[  299.387681][T16529]  should_failslab+0x8c/0xb0
[  299.387706][T16529]  kmem_cache_alloc_node_noprof+0x57/0x320
[  299.387783][T16529]  ? __alloc_skb+0x101/0x320
[  299.387817][T16529]  __alloc_skb+0x101/0x320
[  299.387910][T16529]  pfkey_sendmsg+0xd7/0x900
[  299.387946][T16529]  ? avc_has_perm+0xd3/0x150
[  299.387982][T16529]  ? selinux_socket_sendmsg+0x175/0x1b0
[  299.388014][T16529]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  299.388048][T16529]  __sock_sendmsg+0x142/0x180
[  299.388148][T16529]  ____sys_sendmsg+0x31e/0x4e0
[  299.388168][T16529]  ___sys_sendmsg+0x17b/0x1d0
[  299.388200][T16529]  __x64_sys_sendmsg+0xd4/0x160
[  299.388227][T16529]  x64_sys_call+0x2999/0x2fb0
[  299.388250][T16529]  do_syscall_64+0xd2/0x200
[  299.388308][T16529]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  299.388337][T16529]  ? clear_bhb_loop+0x40/0x90
[  299.388376][T16529]  ? clear_bhb_loop+0x40/0x90
[  299.388479][T16529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.388502][T16529] RIP: 0033:0x7f63bb40e9a9
[  299.388519][T16529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.388537][T16529] RSP: 002b:00007f63b9a77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  299.388558][T16529] RAX: ffffffffffffffda RBX: 00007f63bb635fa0 RCX: 00007f63bb40e9a9
[  299.388572][T16529] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  299.388674][T16529] RBP: 00007f63b9a77090 R08: 0000000000000000 R09: 0000000000000000
[  299.388685][T16529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.388696][T16529] R13: 0000000000000000 R14: 00007f63bb635fa0 R15: 00007ffc4c015918
[  299.388715][T16529]  </TASK>
[  299.726085][T16468] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  299.739646][T16468] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  299.799498][T16468] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.812610][T16468] 8021q: adding VLAN 0 to HW filter on device team0
[  299.823346][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.830491][ T3701] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.844658][ T3765] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.851769][ T3765] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.852209][T16544] loop6: detected capacity change from 0 to 512
[  299.869955][T16545] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4599'.
[  299.881773][T16544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.885517][T16468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  299.904261][T16468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  299.985409][T16468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.067622][T16553] siw: device registration error -23
[  300.077529][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4602'.
[  300.112576][T16553] lo speed is unknown, defaulting to 1000
[  300.189281][T16570] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  300.195935][T16570] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  300.203666][T16570] vhci_hcd vhci_hcd.0: Device attached
[  300.255729][T16582] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4605'.
[  300.266671][T16468] veth0_vlan: entered promiscuous mode
[  300.275381][T16468] veth1_vlan: entered promiscuous mode
[  300.301064][T16468] veth0_macvtap: entered promiscuous mode
[  300.311377][T16468] veth1_macvtap: entered promiscuous mode
[  300.322704][T16468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  300.332174][T16468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  300.341167][T16468] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.349939][T16468] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  300.358721][T16468] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  300.367484][T16468] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.394088][T16587] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4606'.
[  300.572372][T16606] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  300.578918][T16606] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  300.586686][T16606] vhci_hcd vhci_hcd.0: Device attached
[  300.639604][T16619] FAULT_INJECTION: forcing a failure.
[  300.639604][T16619] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.652726][T16619] CPU: 0 UID: 0 PID: 16619 Comm: syz.9.4609 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  300.652758][T16619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  300.652771][T16619] Call Trace:
[  300.652844][T16619]  <TASK>
[  300.652851][T16619]  __dump_stack+0x1d/0x30
[  300.652871][T16619]  dump_stack_lvl+0xe8/0x140
[  300.652889][T16619]  dump_stack+0x15/0x1b
[  300.652903][T16619]  should_fail_ex+0x265/0x280
[  300.652948][T16619]  should_fail+0xb/0x20
[  300.652973][T16619]  should_fail_usercopy+0x1a/0x20
[  300.653002][T16619]  _copy_to_user+0x20/0xa0
[  300.653051][T16619]  simple_read_from_buffer+0xb5/0x130
[  300.653082][T16619]  proc_fail_nth_read+0x100/0x140
[  300.653147][T16619]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  300.653254][T16619]  vfs_read+0x1a0/0x6f0
[  300.653281][T16619]  ? __rcu_read_unlock+0x4f/0x70
[  300.653301][T16619]  ? __fget_files+0x184/0x1c0
[  300.653323][T16619]  ksys_read+0xda/0x1a0
[  300.653381][T16619]  __x64_sys_read+0x40/0x50
[  300.653420][T16619]  x64_sys_call+0x2d77/0x2fb0
[  300.653444][T16619]  do_syscall_64+0xd2/0x200
[  300.653519][T16619]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  300.653545][T16619]  ? clear_bhb_loop+0x40/0x90
[  300.653567][T16619]  ? clear_bhb_loop+0x40/0x90
[  300.653657][T16619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.653676][T16619] RIP: 0033:0x7f63bb40d3bc
[  300.653726][T16619] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  300.653746][T16619] RSP: 002b:00007f63b9a77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  300.653765][T16619] RAX: ffffffffffffffda RBX: 00007f63bb635fa0 RCX: 00007f63bb40d3bc
[  300.653779][T16619] RDX: 000000000000000f RSI: 00007f63b9a770a0 RDI: 0000000000000004
[  300.653792][T16619] RBP: 00007f63b9a77090 R08: 0000000000000000 R09: 0000000000000000
[  300.653806][T16619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.653817][T16619] R13: 0000000000000000 R14: 00007f63bb635fa0 R15: 00007ffc4c015918
[  300.653834][T16619]  </TASK>
[  300.882080][ T9708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.929069][ T8872] usb 10-1: SetAddress Request (2) to port 0
[  300.938015][ T8872] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd
[  300.997496][T16649] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4610'.
[  301.131391][T16609] vhci_hcd: connection reset by peer
[  301.136951][ T3728] vhci_hcd: stop threads
[  301.141335][ T3728] vhci_hcd: release socket
[  301.145748][ T3728] vhci_hcd: disconnect device
[  301.179773][T16681] FAULT_INJECTION: forcing a failure.
[  301.179773][T16681] name failslab, interval 1, probability 0, space 0, times 0
[  301.192547][T16681] CPU: 0 UID: 0 PID: 16681 Comm: syz.4.4617 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  301.192590][T16681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  301.192604][T16681] Call Trace:
[  301.192663][T16681]  <TASK>
[  301.192671][T16681]  __dump_stack+0x1d/0x30
[  301.192693][T16681]  dump_stack_lvl+0xe8/0x140
[  301.192710][T16681]  dump_stack+0x15/0x1b
[  301.192725][T16681]  should_fail_ex+0x265/0x280
[  301.192817][T16681]  should_failslab+0x8c/0xb0
[  301.192838][T16681]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  301.192903][T16681]  ? hugetlbfs_alloc_inode+0xbc/0x100
[  301.192936][T16681]  hugetlbfs_alloc_inode+0xbc/0x100
[  301.193013][T16681]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  301.193125][T16681]  alloc_inode+0x40/0x170
[  301.193159][T16681]  new_inode+0x1d/0xe0
[  301.193176][T16681]  hugetlbfs_get_inode+0x7b/0x370
[  301.193270][T16681]  hugetlb_file_setup+0x192/0x3d0
[  301.193296][T16681]  ksys_mmap_pgoff+0x157/0x310
[  301.193333][T16681]  x64_sys_call+0x1602/0x2fb0
[  301.193355][T16681]  do_syscall_64+0xd2/0x200
[  301.193446][T16681]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  301.193532][T16681]  ? clear_bhb_loop+0x40/0x90
[  301.193551][T16681]  ? clear_bhb_loop+0x40/0x90
[  301.193605][T16681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.193626][T16681] RIP: 0033:0x7f274f53e9a9
[  301.193640][T16681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.193728][T16681] RSP: 002b:00007f274dba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  301.193745][T16681] RAX: ffffffffffffffda RBX: 00007f274f765fa0 RCX: 00007f274f53e9a9
[  301.193756][T16681] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000
[  301.193769][T16681] RBP: 00007f274dba7090 R08: ffffffffffffffff R09: 00000000fffff000
[  301.193782][T16681] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001
[  301.193824][T16681] R13: 0000000000000000 R14: 00007f274f765fa0 R15: 00007ffff6807728
[  301.193909][T16681]  </TASK>
[  301.666042][T16713] lo speed is unknown, defaulting to 1000
[  301.675071][T16715] lo speed is unknown, defaulting to 1000
[  302.043638][T16735] FAULT_INJECTION: forcing a failure.
[  302.043638][T16735] name failslab, interval 1, probability 0, space 0, times 0
[  302.056286][T16735] CPU: 1 UID: 0 PID: 16735 Comm: syz.9.4621 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  302.056314][T16735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  302.056401][T16735] Call Trace:
[  302.056407][T16735]  <TASK>
[  302.056415][T16735]  __dump_stack+0x1d/0x30
[  302.056435][T16735]  dump_stack_lvl+0xe8/0x140
[  302.056453][T16735]  dump_stack+0x15/0x1b
[  302.056494][T16735]  should_fail_ex+0x265/0x280
[  302.056634][T16735]  should_failslab+0x8c/0xb0
[  302.056658][T16735]  __kmalloc_noprof+0xa5/0x3e0
[  302.056736][T16735]  ? unregister_netdevice_many_notify+0x4cf/0x1690
[  302.056758][T16735]  ? unlist_netdevice+0x2cc/0x320
[  302.056778][T16735]  unregister_netdevice_many_notify+0x4cf/0x1690
[  302.056864][T16735]  ? queue_delayed_work_on+0x106/0x170
[  302.056886][T16735]  unregister_netdevice_queue+0x1f5/0x220
[  302.056924][T16735]  __tun_detach+0x7db/0xad0
[  302.056953][T16735]  ? __pfx_tun_chr_close+0x10/0x10
[  302.057040][T16735]  tun_chr_close+0x5a/0x100
[  302.057064][T16735]  __fput+0x298/0x650
[  302.057090][T16735]  fput_close_sync+0x6e/0x120
[  302.057114][T16735]  __x64_sys_close+0x56/0xf0
[  302.057200][T16735]  x64_sys_call+0x2747/0x2fb0
[  302.057292][T16735]  do_syscall_64+0xd2/0x200
[  302.057311][T16735]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  302.057337][T16735]  ? clear_bhb_loop+0x40/0x90
[  302.057360][T16735]  ? clear_bhb_loop+0x40/0x90
[  302.057453][T16735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.057475][T16735] RIP: 0033:0x7f63bb40e9a9
[  302.057491][T16735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.057509][T16735] RSP: 002b:00007f63b9a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  302.057552][T16735] RAX: ffffffffffffffda RBX: 00007f63bb635fa0 RCX: 00007f63bb40e9a9
[  302.057566][T16735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  302.057579][T16735] RBP: 00007f63b9a77090 R08: 0000000000000000 R09: 0000000000000000
[  302.057596][T16735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.057657][T16735] R13: 0000000000000000 R14: 00007f63bb635fa0 R15: 00007ffc4c015918
[  302.057676][T16735]  </TASK>
[  302.356963][T16750] FAULT_INJECTION: forcing a failure.
[  302.356963][T16750] name failslab, interval 1, probability 0, space 0, times 0
[  302.369677][T16750] CPU: 1 UID: 0 PID: 16750 Comm: syz.9.4624 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  302.369703][T16750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  302.369727][T16750] Call Trace:
[  302.369732][T16750]  <TASK>
[  302.369739][T16750]  __dump_stack+0x1d/0x30
[  302.369762][T16750]  dump_stack_lvl+0xe8/0x140
[  302.369832][T16750]  dump_stack+0x15/0x1b
[  302.369850][T16750]  should_fail_ex+0x265/0x280
[  302.369882][T16750]  ? __hw_addr_add_ex+0x162/0x440
[  302.369937][T16750]  should_failslab+0x8c/0xb0
[  302.370022][T16750]  __kmalloc_cache_noprof+0x4c/0x320
[  302.370055][T16750]  __hw_addr_add_ex+0x162/0x440
[  302.370137][T16750]  dev_addr_init+0xb1/0x120
[  302.370165][T16750]  alloc_netdev_mqs+0x212/0xab0
[  302.370189][T16750]  ? __pfx_macvtap_setup+0x10/0x10
[  302.370213][T16750]  rtnl_create_link+0x239/0x710
[  302.370290][T16750]  rtnl_newlink_create+0x14c/0x620
[  302.370316][T16750]  ? security_capable+0x83/0x90
[  302.370372][T16750]  ? netlink_ns_capable+0x86/0xa0
[  302.370401][T16750]  rtnl_newlink+0xf29/0x12d0
[  302.370428][T16750]  ? bpf_trace_run3+0x12c/0x1d0
[  302.370505][T16750]  ? __memcg_slab_free_hook+0x135/0x230
[  302.370535][T16750]  ? __kfree_skb+0x109/0x150
[  302.370563][T16750]  ? __rcu_read_unlock+0x4f/0x70
[  302.370662][T16750]  ? avc_has_perm_noaudit+0x1b1/0x200
[  302.370690][T16750]  ? selinux_capable+0x1f9/0x270
[  302.370723][T16750]  ? security_capable+0x83/0x90
[  302.370804][T16750]  ? ns_capable+0x7d/0xb0
[  302.370824][T16750]  ? __pfx_rtnl_newlink+0x10/0x10
[  302.370926][T16750]  rtnetlink_rcv_msg+0x5fb/0x6d0
[  302.370953][T16750]  netlink_rcv_skb+0x123/0x220
[  302.370983][T16750]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  302.371015][T16750]  rtnetlink_rcv+0x1c/0x30
[  302.371070][T16750]  netlink_unicast+0x5a8/0x680
[  302.371102][T16750]  netlink_sendmsg+0x58b/0x6b0
[  302.371125][T16750]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.371144][T16750]  __sock_sendmsg+0x142/0x180
[  302.371228][T16750]  ____sys_sendmsg+0x31e/0x4e0
[  302.371314][T16750]  ___sys_sendmsg+0x17b/0x1d0
[  302.371416][T16750]  __x64_sys_sendmsg+0xd4/0x160
[  302.371437][T16750]  x64_sys_call+0x2999/0x2fb0
[  302.371458][T16750]  do_syscall_64+0xd2/0x200
[  302.371476][T16750]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  302.371575][T16750]  ? clear_bhb_loop+0x40/0x90
[  302.371597][T16750]  ? clear_bhb_loop+0x40/0x90
[  302.371619][T16750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.371638][T16750] RIP: 0033:0x7f63bb40e9a9
[  302.371653][T16750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.371672][T16750] RSP: 002b:00007f63b9a77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  302.371775][T16750] RAX: ffffffffffffffda RBX: 00007f63bb635fa0 RCX: 00007f63bb40e9a9
[  302.371856][T16750] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  302.371941][T16750] RBP: 00007f63b9a77090 R08: 0000000000000000 R09: 0000000000000000
[  302.371954][T16750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.371982][T16750] R13: 0000000000000000 R14: 00007f63bb635fa0 R15: 00007ffc4c015918
[  302.372001][T16750]  </TASK>
[  302.691564][T16768] __nla_validate_parse: 4 callbacks suppressed
[  302.691581][T16768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4625'.
[  302.751526][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4626'.
[  302.870746][T16784] FAULT_INJECTION: forcing a failure.
[  302.870746][T16784] name failslab, interval 1, probability 0, space 0, times 0
[  302.872542][T16782] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  302.883420][T16784] CPU: 1 UID: 0 PID: 16784 Comm: syz.4.4632 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  302.883521][T16784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  302.883586][T16784] Call Trace:
[  302.883593][T16784]  <TASK>
[  302.883601][T16784]  __dump_stack+0x1d/0x30
[  302.883624][T16784]  dump_stack_lvl+0xe8/0x140
[  302.883646][T16784]  dump_stack+0x15/0x1b
[  302.883663][T16784]  should_fail_ex+0x265/0x280
[  302.883694][T16784]  ? __pfx_cpu_map_kthread_run+0x10/0x10
[  302.883726][T16784]  ? __kthread_create_on_node+0x76/0x230
[  302.883824][T16784]  should_failslab+0x8c/0xb0
[  302.883847][T16784]  __kmalloc_cache_noprof+0x4c/0x320
[  302.883876][T16784]  ? __pfx_cpu_map_kthread_run+0x10/0x10
[  302.883954][T16784]  __kthread_create_on_node+0x76/0x230
[  302.883994][T16784]  ? __pfx_cpu_map_kthread_run+0x10/0x10
[  302.884100][T16784]  kthread_create_on_node+0x89/0xc0
[  302.884191][T16784]  ? should_failslab+0x8c/0xb0
[  302.884288][T16784]  cpu_map_update_elem+0x685/0x800
[  302.884391][T16784]  bpf_map_update_value+0x199/0x3a0
[  302.884419][T16784]  map_update_elem+0x41a/0x520
[  302.884505][T16784]  __sys_bpf+0x5d7/0x790
[  302.884541][T16784]  __x64_sys_bpf+0x41/0x50
[  302.884568][T16784]  x64_sys_call+0x2478/0x2fb0
[  302.884609][T16784]  do_syscall_64+0xd2/0x200
[  302.884628][T16784]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  302.884655][T16784]  ? clear_bhb_loop+0x40/0x90
[  302.884677][T16784]  ? clear_bhb_loop+0x40/0x90
[  302.884780][T16784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.884802][T16784] RIP: 0033:0x7f274f53e9a9
[  302.884819][T16784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.884837][T16784] RSP: 002b:00007f274dba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  302.884857][T16784] RAX: ffffffffffffffda RBX: 00007f274f765fa0 RCX: 00007f274f53e9a9
[  302.884871][T16784] RDX: 0000000000000020 RSI: 0000200000000a80 RDI: 0000000000000002
[  302.884884][T16784] RBP: 00007f274dba7090 R08: 0000000000000000 R09: 0000000000000000
[  302.884911][T16784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.884923][T16784] R13: 0000000000000000 R14: 00007f274f765fa0 R15: 00007ffff6807728
[  302.884943][T16784]  </TASK>
[  303.113812][T16782] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  303.121732][T16782] vhci_hcd vhci_hcd.0: Device attached
[  303.505754][T16800] netlink: zone id is out of range
[  303.511262][T16800] netlink: zone id is out of range
[  303.516435][T16800] netlink: zone id is out of range
[  303.521587][T16800] netlink: zone id is out of range
[  303.526758][T16800] netlink: zone id is out of range
[  303.531959][T16800] netlink: zone id is out of range
[  303.537078][T16800] netlink: zone id is out of range
[  303.542483][T16800] netlink: zone id is out of range
[  303.547626][T16800] netlink: zone id is out of range
[  303.552845][T16800] netlink: zone id is out of range
[  303.728666][T10030] vhci_hcd: connection reset by peer
[  303.738780][ T3729] vhci_hcd: stop threads
[  303.743103][ T3729] vhci_hcd: release socket
[  303.747600][ T3729] vhci_hcd: disconnect device
[  303.754339][T16833] netlink: 'syz.9.4637': attribute type 10 has an invalid length.
[  303.774825][T16833] team0: Port device dummy0 added
[  303.788373][T16833] netlink: 'syz.9.4637': attribute type 10 has an invalid length.
[  303.811532][T16833] team0: Port device dummy0 removed
[  303.819134][    T9] vhci_hcd: vhci_device speed not set
[  303.834783][T16833] dummy0: entered promiscuous mode
[  303.840662][T16833] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link
[  303.926490][T16838] lo speed is unknown, defaulting to 1000
[  303.990423][T16878] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4638'.
[  304.036670][T16838] chnl_net:caif_netlink_parms(): no params data found
[  304.129841][   T29] kauditd_printk_skb: 212 callbacks suppressed
[  304.129856][   T29] audit: type=1326 audit(1753592335.875:12588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16885 comm="syz.9.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb40e9a9 code=0x7ffc0000
[  304.159709][   T29] audit: type=1326 audit(1753592335.875:12589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16885 comm="syz.9.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb40e9a9 code=0x7ffc0000
[  304.186637][   T29] audit: type=1326 audit(1753592335.935:12590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16885 comm="syz.9.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f63bb40e9a9 code=0x7ffc0000
[  304.210165][   T29] audit: type=1326 audit(1753592335.935:12591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16885 comm="syz.9.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb40e9a9 code=0x7ffc0000
[  304.233930][   T29] audit: type=1326 audit(1753592335.935:12592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16885 comm="syz.9.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb40e9a9 code=0x7ffc0000
[  304.257606][   T29] audit: type=1326 audit(1753592335.935:12593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16885 comm="syz.9.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f63bb40e9a9 code=0x7ffc0000
[  304.283407][T16838] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.290522][T16838] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.305785][T16838] bridge_slave_0: entered allmulticast mode
[  304.326665][T16838] bridge_slave_0: entered promiscuous mode
[  304.344011][T16838] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.351175][T16838] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.374539][T16838] bridge_slave_1: entered allmulticast mode
[  304.390135][T16838] bridge_slave_1: entered promiscuous mode
[  304.426278][T16838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.446091][T16838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.496908][T16838] team0: Port device team_slave_0 added
[  304.513873][T16838] team0: Port device team_slave_1 added
[  304.557416][T16838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.564505][T16838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.590696][T16838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.641742][T16838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.648816][T16838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.674879][T16838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.848214][T16838] hsr_slave_0: entered promiscuous mode
[  304.857146][T16575] vhci_hcd: connection closed
[  304.857429][ T3719] vhci_hcd: stop threads
[  304.866426][ T3719] vhci_hcd: release socket
[  304.871571][ T3719] vhci_hcd: disconnect device
[  304.876343][   T29] audit: type=1326 audit(1753592336.605:12594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16781 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad83dde9a9 code=0x7ffc0000
[  304.876419][   T29] audit: type=1326 audit(1753592336.605:12595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16781 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad83dde9a9 code=0x7ffc0000
[  304.929699][T16838] hsr_slave_1: entered promiscuous mode
[  304.940712][T16838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  304.948536][T16838] Cannot create hsr debugfs directory
[  304.985715][T13784] bridge0: port 4(syz_tun) entered disabled state
[  305.012566][T13784] syz_tun (unregistering): left allmulticast mode
[  305.019110][T13784] syz_tun (unregistering): left promiscuous mode
[  305.025473][T13784] bridge0: port 4(syz_tun) entered disabled state
[  305.036101][T16952] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4640'.
[  305.112546][ T3728] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.163332][T16958] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4643'.
[  305.184987][ T3728] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.250863][T16112] bridge0: port 3(syz_tun) entered disabled state
[  305.262857][T16112] syz_tun (unregistering): left allmulticast mode
[  305.269412][T16112] syz_tun (unregistering): left promiscuous mode
[  305.275853][T16112] bridge0: port 3(syz_tun) entered disabled state
[  305.326739][ T3728] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.372344][T16785] vhci_hcd: connection closed
[  305.381309][ T3747] vhci_hcd: stop threads
[  305.390513][ T3747] vhci_hcd: release socket
[  305.394942][ T3747] vhci_hcd: disconnect device
[  305.399469][T16969] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  305.410380][T16838] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.420204][T16838] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.443514][ T3728] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.480791][T16838] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.490787][T16838] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.501901][T16978] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4648'.
[  305.557431][   T29] audit: type=1326 audit(1753592337.305:12596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16981 comm="syz.4.4653" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f274f53e9a9 code=0x0
[  305.622137][   T29] audit: type=1326 audit(1753592337.375:12597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16989 comm="syz.9.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bb40e9a9 code=0x7ffc0000
[  305.668637][T16993] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4651'.
[  305.758821][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4655'.
[  305.787666][ T3728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  305.801332][ T3728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  305.813636][ T3728] bond0 (unregistering): Released all slaves
[  305.824576][T16838] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.834905][T16838] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.921723][T16838] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.931610][T16838] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.990663][ T8872] usb 10-1: device descriptor read/8, error -110
[  306.002649][ T3728] hsr_slave_0: left promiscuous mode
[  306.032852][ T3728] hsr_slave_1: left promiscuous mode
[  306.051234][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.112363][ T8872] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd
[  306.139560][ T8872] usb 10-1: enqueue for inactive port 0
[  306.145206][ T8872] usb 10-1: enqueue for inactive port 0
[  306.153963][ T8872] usb 10-1: enqueue for inactive port 0
[  306.159790][ T3728] team0 (unregistering): Port device team_slave_1 removed
[  306.169991][ T3728] team0 (unregistering): Port device team_slave_0 removed
[  306.254714][T17003] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4658'.
[  306.263781][ T1068] lo speed is unknown, defaulting to 1000
[  306.269544][ T1068] syz0: Port: 1 Link DOWN
[  306.308895][T16838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  306.336890][T16838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  306.370914][T16838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  306.401027][T16838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  306.523785][ T3728] IPVS: stop unused estimator thread 0...
[  306.544454][ T3728] ------------[ cut here ]------------
[  306.550110][ T3728] WARNING: CPU: 1 PID: 3728 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0
[  306.559778][ T3728] Modules linked in:
[  306.563783][ T3728] CPU: 1 UID: 0 PID: 3728 Comm: kworker/u8:36 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  306.576609][ T3728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  306.586826][ T3728] Workqueue: netns cleanup_net
[  306.591752][ T3728] RIP: 0010:xfrm_state_fini+0x17c/0x1f0
[  306.597323][ T3728] Code: 48 8d bb 70 0e 00 00 e8 92 5e c1 fc 48 8b bb 70 0e 00 00 e8 36 c3 cd fc 5b 41 5e 41 5f 5d e9 0b 94 b3 00 cc e8 05 4f a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 f7 4e a7 fc 90 0f 0b 90 4c 89 f7 e8 5b
[  306.600033][T16838] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.616971][ T3728] RSP: 0018:ffffc9000f53bc60 EFLAGS: 00010293
[  306.629809][ T3728] RAX: ffffffff84b0551b RBX: ffff88810a5b5000 RCX: ffff88811aa51040
[  306.637868][ T3728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a5b5e40
[  306.645905][ T3728] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000
[  306.653902][ T3728] R10: ffffc9000f53bbe8 R11: 0001c9000f53bbe8 R12: ffffffff86c82480
[  306.661926][ T3728] R13: ffff88810a5b5028 R14: ffff88810a5b5e40 R15: ffff88810a5b5000
[  306.670067][ T3728] FS:  0000000000000000(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000
[  306.676420][T16838] 8021q: adding VLAN 0 to HW filter on device team0
[  306.679248][ T3728] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  306.692732][ T3728] CR2: 0000001b32a0bff8 CR3: 000000010c652000 CR4: 00000000003506f0
[  306.701076][ T3728] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  306.709121][ T3728] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  306.717247][ T3728] Call Trace:
[  306.718407][ T3729] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.720583][ T3728]  <TASK>
[  306.727611][ T3729] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.730506][ T3728]  xfrm_net_exit+0x2d/0x60
[  306.742150][ T3728]  ops_undo_list+0x27b/0x410
[  306.746764][ T3728]  cleanup_net+0x2de/0x4d0
[  306.751311][ T3728]  process_scheduled_works+0x4cb/0x9d0
[  306.755380][ T3729] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.756787][ T3728]  worker_thread+0x582/0x770
[  306.763866][ T3729] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.775779][ T3728]  kthread+0x486/0x510
[  306.779889][ T3728]  ? finish_task_switch+0xad/0x2b0
[  306.785065][ T3728]  ? __pfx_worker_thread+0x10/0x10
[  306.790242][ T3728]  ? __pfx_kthread+0x10/0x10
[  306.794839][ T3728]  ret_from_fork+0xda/0x150
[  306.799424][ T3728]  ? __pfx_kthread+0x10/0x10
[  306.804031][ T3728]  ret_from_fork_asm+0x1a/0x30
[  306.804513][T16838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  306.808856][ T3728]  </TASK>
[  306.808877][ T3728] ---[ end trace 0000000000000000 ]---
[  306.819259][T16838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  306.883007][ T3765] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  306.892859][ T3765] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.925642][T17035] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  306.935997][T17035] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.964412][ T3765] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  306.974320][ T3765] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.978439][T17041] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  307.003669][T17035] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.014047][T17035] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.041898][T16838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.060927][ T3765] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.070794][ T3765] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.101718][T17035] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.112120][T17035] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.125428][T17043] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  307.142485][ T3765] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.152428][ T3765] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.176982][T17050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4669'.
[  307.204282][T17035] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.214729][T17035] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.241726][T16838] veth0_vlan: entered promiscuous mode
[  307.299437][ T3765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.326889][T16838] veth1_vlan: entered promiscuous mode
[  307.375964][T16838] veth0_macvtap: entered promiscuous mode
[  307.394957][T17068] FAULT_INJECTION: forcing a failure.
[  307.394957][T17068] name failslab, interval 1, probability 0, space 0, times 0
[  307.407732][T17068] CPU: 1 UID: 0 PID: 17068 Comm: syz.4.4675 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  307.407879][T17068] Tainted: [W]=WARN
[  307.407885][T17068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  307.407897][T17068] Call Trace:
[  307.407903][T17068]  <TASK>
[  307.407911][T17068]  __dump_stack+0x1d/0x30
[  307.408071][T17068]  dump_stack_lvl+0xe8/0x140
[  307.408088][T17068]  dump_stack+0x15/0x1b
[  307.408131][T17068]  should_fail_ex+0x265/0x280
[  307.408164][T17068]  should_failslab+0x8c/0xb0
[  307.408188][T17068]  kmem_cache_alloc_node_noprof+0x57/0x320
[  307.408221][T17068]  ? __alloc_skb+0x101/0x320
[  307.408253][T17068]  __alloc_skb+0x101/0x320
[  307.408283][T17068]  netlink_alloc_large_skb+0xba/0xf0
[  307.408317][T17068]  netlink_sendmsg+0x3cf/0x6b0
[  307.408427][T17068]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.408445][T17068]  __sock_sendmsg+0x142/0x180
[  307.408503][T17068]  ____sys_sendmsg+0x31e/0x4e0
[  307.408633][T17068]  ___sys_sendmsg+0x17b/0x1d0
[  307.408671][T17068]  __x64_sys_sendmsg+0xd4/0x160
[  307.408695][T17068]  x64_sys_call+0x2999/0x2fb0
[  307.408716][T17068]  do_syscall_64+0xd2/0x200
[  307.408745][T17068]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  307.408772][T17068]  ? clear_bhb_loop+0x40/0x90
[  307.408792][T17068]  ? clear_bhb_loop+0x40/0x90
[  307.408811][T17068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.408907][T17068] RIP: 0033:0x7f274f53e9a9
[  307.408924][T17068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.408942][T17068] RSP: 002b:00007f274dba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  307.408959][T17068] RAX: ffffffffffffffda RBX: 00007f274f765fa0 RCX: 00007f274f53e9a9
[  307.408970][T17068] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  307.409009][T17068] RBP: 00007f274dba7090 R08: 0000000000000000 R09: 0000000000000000
[  307.409019][T17068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  307.409030][T17068] R13: 0000000000000000 R14: 00007f274f765fa0 R15: 00007ffff6807728
[  307.409046][T17068]  </TASK>
[  307.622691][ T8872] usb usb10-port1: attempt power cycle
[  307.666630][T17073] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  307.698926][ T3765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.728339][T17075] loop6: detected capacity change from 0 to 2048
[  307.790051][T17035] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  307.798302][T17035] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.837077][T17075]  loop6: unable to read partition table
[  307.840569][T16838] veth1_macvtap: entered promiscuous mode
[  307.849697][T17075] loop6: partition table beyond EOD, truncated
[  307.855886][T17075] loop_reread_partitions: partition scan of loop6 () failed (rc=-5)
[  307.866234][ T3765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.883520][T17035] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  307.892030][T17035] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.903968][T17075] wg1: entered promiscuous mode
[  307.908844][T17075] wg1: entered allmulticast mode
[  307.920971][T17035] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  307.929324][T17035] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.947716][ T3765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.966151][T17035] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  307.974439][T17035] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.014763][T16838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.028853][T16838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.044850][T16838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.053626][T16838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.062374][T16838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.071147][T16838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.103450][T17086] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4683'.
[  308.283427][ T3765] bond1: left promiscuous mode
[  308.288397][ T3765] bridge0: port 4(bond1) entered disabled state
[  308.326330][ T3765] bridge_slave_1: left allmulticast mode
[  308.332191][ T3765] bridge_slave_1: left promiscuous mode
[  308.337935][ T3765] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.405763][ T3765] bridge_slave_0: left allmulticast mode
[  308.411498][ T3765] bridge_slave_0: left promiscuous mode
[  308.417159][ T3765] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.487560][T17100] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4686'.
[  308.507711][ T3765] bridge_slave_1: left allmulticast mode
[  308.513528][ T3765] bridge_slave_1: left promiscuous mode
[  308.519231][ T3765] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.594428][ T3765] bridge_slave_0: left allmulticast mode
[  308.600183][ T3765] bridge_slave_0: left promiscuous mode
[  308.605946][ T3765] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.623477][T17101] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4686'.
[  308.751596][ T3765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.779400][ T3765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.793365][ T3765] bond0 (unregistering): Released all slaves
[  308.813774][ T3765] bond1 (unregistering): Released all slaves
[  308.847729][T17111] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4688'.
[  308.891515][ T3765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.901624][ T3765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.911533][ T3765] bond0 (unregistering): Released all slaves
[  308.919837][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4684'.
[  308.928749][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4684'.
[  309.005465][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4689'.
[  309.014494][T17112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4689'.
[  309.046005][T17116] loop6: detected capacity change from 0 to 1024
[  309.054448][T17116] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  309.065453][T17116] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  309.125387][T17116] JBD2: no valid journal superblock found
[  309.131339][T17116] EXT4-fs (loop6): Could not load journal inode
[  309.146449][ T3765] hsr_slave_0: left promiscuous mode
[  309.153745][ T3765] hsr_slave_1: left promiscuous mode
[  309.173803][T17116] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  309.186263][ T3765] hsr_slave_0: left promiscuous mode
[  309.196718][ T3765] hsr_slave_1: left promiscuous mode
[  309.214669][ T3765] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.222312][ T3765] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.252473][ T3765] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.260002][ T3765] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.282394][ T3765] veth1_macvtap: left promiscuous mode
[  309.287995][ T3765] veth0_macvtap: left promiscuous mode
[  309.293950][ T3765] veth1_vlan: left promiscuous mode
[  309.299529][ T3765] veth0_vlan: left promiscuous mode
[  309.306394][ T3765] veth1_macvtap: left promiscuous mode
[  309.306738][   T29] kauditd_printk_skb: 74 callbacks suppressed
[  309.306750][   T29] audit: type=1400 audit(1753592341.055:12672): avc:  denied  { shutdown } for  pid=17128 comm="syz.9.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  309.318310][ T3765] veth0_macvtap: left promiscuous mode
[  309.343770][   T29] audit: type=1400 audit(1753592341.095:12673): avc:  denied  { read } for  pid=17128 comm="syz.9.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  309.373936][ T3765] veth1_vlan: left promiscuous mode
[  309.384996][   T29] audit: type=1400 audit(1753592341.135:12674): avc:  denied  { create } for  pid=17128 comm="syz.9.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  309.388895][ T3765] veth0_vlan: left promiscuous mode
[  309.486394][   T29] audit: type=1326 audit(1753592341.235:12675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.8.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  309.510192][   T29] audit: type=1326 audit(1753592341.235:12676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.8.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  309.538740][   T29] audit: type=1326 audit(1753592341.285:12677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.8.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  309.562420][   T29] audit: type=1326 audit(1753592341.285:12678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.8.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f5965c1e9a9 code=0x7ffc0000
[  309.586257][ T8872] usb usb10-port1: unable to enumerate USB device
[  309.614364][ T3765] team0 (unregistering): Port device team_slave_1 removed
[  309.625214][ T3765] team0 (unregistering): Port device team_slave_0 removed
[  309.642773][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4699'.
[  309.683197][ T3765] team0 (unregistering): Port device team_slave_1 removed
[  309.692653][ T3765] team0 (unregistering): Port device team_slave_0 removed
[  309.727294][T17131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4695'.
[  309.736617][T17145] smc: net device bond0 applied user defined pnetid RYZ2
[  310.212839][T17169] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  310.344301][ T3765] IPVS: stop unused estimator thread 0...
[  310.350696][ T3765] IPVS: stop unused estimator thread 0...
[  310.360207][ T3765] ------------[ cut here ]------------
[  310.365697][ T3765] WARNING: CPU: 1 PID: 3765 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0
[  310.375412][ T3765] Modules linked in:
[  310.379372][ T3765] CPU: 1 UID: 0 PID: 3765 Comm: kworker/u8:67 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  310.393704][ T3765] Tainted: [W]=WARN
[  310.397251][   T29] audit: type=1400 audit(1753592342.145:12679): avc:  denied  { open } for  pid=17176 comm="syz.8.4710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  310.397501][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  310.397515][ T3765] Workqueue: netns cleanup_net
[  310.416971][   T29] audit: type=1400 audit(1753592342.145:12680): avc:  denied  { perfmon } for  pid=17176 comm="syz.8.4710" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  310.426963][ T3765] 
[  310.426969][ T3765] RIP: 0010:xfrm_state_fini+0x17c/0x1f0
[  310.431759][   T29] audit: type=1400 audit(1753592342.145:12681): avc:  denied  { kernel } for  pid=17176 comm="syz.8.4710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  310.452876][ T3765] Code: 48 8d bb 70 0e 00 00 e8 92 5e c1 fc 48 8b bb 70 0e 00 00 e8 36 c3 cd fc 5b 41 5e 41 5f 5d e9 0b 94 b3 00 cc e8 05 4f a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 f7 4e a7 fc 90 0f 0b 90 4c 89 f7 e8 5b
[  310.500164][ T3765] RSP: 0018:ffffc9000f65fc60 EFLAGS: 00010293
[  310.506241][ T3765] RAX: ffffffff84b0551b RBX: ffff88810c73bc00 RCX: ffff88811ea02080
[  310.514236][ T3765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810c73ca40
[  310.522240][ T3765] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000
[  310.530252][ T3765] R10: ffffc9000f65fbe8 R11: 0001c9000f65fbe8 R12: ffffffff86c82480
[  310.538237][ T3765] R13: ffff88810c73bc28 R14: ffff88810c73ca40 R15: ffff88810c73bc00
[  310.546361][ T3765] FS:  0000000000000000(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000
[  310.555353][ T3765] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  310.562010][ T3765] CR2: 00007f596427f9c8 CR3: 000000010a600000 CR4: 00000000003506f0
[  310.570076][ T3765] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  310.578038][ T3765] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  310.586047][ T3765] Call Trace:
[  310.589366][ T3765]  <TASK>
[  310.592355][ T3765]  xfrm_net_exit+0x2d/0x60
[  310.596811][ T3765]  ops_undo_list+0x27b/0x410
[  310.601553][ T3765]  cleanup_net+0x2de/0x4d0
[  310.605984][ T3765]  process_scheduled_works+0x4cb/0x9d0
[  310.611531][ T3765]  worker_thread+0x582/0x770
[  310.616243][ T3765]  ? schedule+0x5f/0xd0
[  310.620449][ T3765]  kthread+0x486/0x510
[  310.624587][ T3765]  ? finish_task_switch+0xad/0x2b0
[  310.629790][ T3765]  ? __pfx_worker_thread+0x10/0x10
[  310.634998][ T3765]  ? __pfx_kthread+0x10/0x10
[  310.639655][ T3765]  ret_from_fork+0xda/0x150
[  310.644160][ T3765]  ? __pfx_kthread+0x10/0x10
[  310.648738][ T3765]  ret_from_fork_asm+0x1a/0x30
[  310.653529][ T3765]  </TASK>
[  310.656621][ T3765] ---[ end trace 0000000000000000 ]---
[  310.718441][ T3765] ------------[ cut here ]------------
[  310.724190][ T3765] WARNING: CPU: 1 PID: 3765 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0
[  310.735344][ T3765] Modules linked in:
[  310.739333][ T3765] CPU: 1 UID: 0 PID: 3765 Comm: kworker/u8:67 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  310.753717][ T3765] Tainted: [W]=WARN
[  310.757524][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  310.767723][ T3765] Workqueue: netns cleanup_net
[  310.772707][ T3765] RIP: 0010:xfrm_state_fini+0x17c/0x1f0
[  310.778485][ T3765] Code: 48 8d bb 70 0e 00 00 e8 92 5e c1 fc 48 8b bb 70 0e 00 00 e8 36 c3 cd fc 5b 41 5e 41 5f 5d e9 0b 94 b3 00 cc e8 05 4f a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 f7 4e a7 fc 90 0f 0b 90 4c 89 f7 e8 5b
[  310.798296][ T3765] RSP: 0018:ffffc9000f65fc60 EFLAGS: 00010293
[  310.804433][ T3765] RAX: ffffffff84b0551b RBX: ffff88810c73e400 RCX: ffff88811ea02080
[  310.812507][ T3765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810c73f240
[  310.820605][ T3765] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000
[  310.828609][ T3765] R10: ffffc9000f65fbe8 R11: 0001c9000f65fbe8 R12: ffffffff86c82480
[  310.836645][ T3765] R13: ffff88810c73e428 R14: ffff88810c73f240 R15: ffff88810c73e400
[  310.844673][ T3765] FS:  0000000000000000(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000
[  310.853638][ T3765] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  310.860313][ T3765] CR2: 00007f596427f9c8 CR3: 000000011940e000 CR4: 00000000003506f0
[  310.868304][ T3765] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  310.876314][ T3765] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  310.884330][ T3765] Call Trace:
[  310.887621][ T3765]  <TASK>
[  310.888283][T17190] block device autoloading is deprecated and will be removed.
[  310.890635][ T3765]  xfrm_net_exit+0x2d/0x60
[  310.902589][ T3765]  ops_undo_list+0x27b/0x410
[  310.907215][ T3765]  cleanup_net+0x2de/0x4d0
[  310.911748][ T3765]  process_scheduled_works+0x4cb/0x9d0
[  310.917256][ T3765]  worker_thread+0x582/0x770
[  310.921954][ T3765]  ? schedule+0x5f/0xd0
[  310.926178][ T3765]  kthread+0x486/0x510
[  310.930310][ T3765]  ? finish_task_switch+0xad/0x2b0
[  310.935436][ T3765]  ? __pfx_worker_thread+0x10/0x10
[  310.940659][ T3765]  ? __pfx_kthread+0x10/0x10
[  310.945334][ T3765]  ret_from_fork+0xda/0x150
[  310.949963][ T3765]  ? __pfx_kthread+0x10/0x10
[  310.954671][ T3765]  ret_from_fork_asm+0x1a/0x30
[  310.959548][ T3765]  </TASK>
[  310.962650][ T3765] ---[ end trace 0000000000000000 ]---
[  311.185044][T17217] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17217 comm=syz.6.4725
[  311.494892][T17239] SELinux:  Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped).
[  311.689738][T17250] x_tables: duplicate underflow at hook 1
[  312.322280][T17329] FAULT_INJECTION: forcing a failure.
[  312.322280][T17329] name failslab, interval 1, probability 0, space 0, times 0
[  312.334955][T17329] CPU: 1 UID: 0 PID: 17329 Comm: syz.2.4766 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  312.334986][T17329] Tainted: [W]=WARN
[  312.334992][T17329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  312.335004][T17329] Call Trace:
[  312.335011][T17329]  <TASK>
[  312.335020][T17329]  __dump_stack+0x1d/0x30
[  312.335119][T17329]  dump_stack_lvl+0xe8/0x140
[  312.335140][T17329]  dump_stack+0x15/0x1b
[  312.335159][T17329]  should_fail_ex+0x265/0x280
[  312.335241][T17329]  ? sel_netport_sid_slow+0x11b/0x330
[  312.335277][T17329]  should_failslab+0x8c/0xb0
[  312.335298][T17329]  __kmalloc_cache_noprof+0x4c/0x320
[  312.335324][T17329]  sel_netport_sid_slow+0x11b/0x330
[  312.335417][T17329]  sel_netport_sid+0xe9/0x140
[  312.335453][T17329]  selinux_socket_connect_helper+0x36b/0x470
[  312.335485][T17329]  selinux_sctp_bind_connect+0x178/0x250
[  312.335524][T17329]  security_sctp_bind_connect+0x50/0x90
[  312.335548][T17329]  sctp_getsockopt_connectx3+0x1b6/0x300
[  312.335579][T17329]  sctp_getsockopt+0x910/0xaa0
[  312.335609][T17329]  sock_common_getsockopt+0x60/0x70
[  312.335701][T17329]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  312.335732][T17329]  do_sock_getsockopt+0x200/0x240
[  312.335765][T17329]  __x64_sys_getsockopt+0x11e/0x1a0
[  312.335802][T17329]  x64_sys_call+0x12aa/0x2fb0
[  312.335871][T17329]  do_syscall_64+0xd2/0x200
[  312.335892][T17329]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  312.335918][T17329]  ? clear_bhb_loop+0x40/0x90
[  312.336084][T17329]  ? clear_bhb_loop+0x40/0x90
[  312.336105][T17329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.336129][T17329] RIP: 0033:0x7fde06f9e9a9
[  312.336145][T17329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.336164][T17329] RSP: 002b:00007fde05607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  312.336181][T17329] RAX: ffffffffffffffda RBX: 00007fde071c5fa0 RCX: 00007fde06f9e9a9
[  312.336231][T17329] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003
[  312.336246][T17329] RBP: 00007fde05607090 R08: 0000200000000140 R09: 0000000000000000
[  312.336260][T17329] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  312.336273][T17329] R13: 0000000000000000 R14: 00007fde071c5fa0 R15: 00007ffe11a56de8
[  312.336289][T17329]  </TASK>
[  312.602634][T17336] loop6: detected capacity change from 0 to 128
[  312.671146][T17350] netlink: 'syz.6.4770': attribute type 21 has an invalid length.
[  312.680832][T17350] netlink: 'syz.6.4770': attribute type 1 has an invalid length.
[  312.947589][T17374] FAULT_INJECTION: forcing a failure.
[  312.947589][T17374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  312.960832][T17374] CPU: 1 UID: 0 PID: 17374 Comm: syz.2.4784 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  312.960902][T17374] Tainted: [W]=WARN
[  312.960909][T17374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  312.960920][T17374] Call Trace:
[  312.960926][T17374]  <TASK>
[  312.960933][T17374]  __dump_stack+0x1d/0x30
[  312.961011][T17374]  dump_stack_lvl+0xe8/0x140
[  312.961093][T17374]  dump_stack+0x15/0x1b
[  312.961108][T17374]  should_fail_ex+0x265/0x280
[  312.961136][T17374]  should_fail+0xb/0x20
[  312.961207][T17374]  should_fail_usercopy+0x1a/0x20
[  312.961236][T17374]  _copy_from_user+0x1c/0xb0
[  312.961254][T17374]  __ia32_sys_rt_sigreturn+0x128/0x350
[  312.961300][T17374]  x64_sys_call+0x2e8a/0x2fb0
[  312.961387][T17374]  do_syscall_64+0xd2/0x200
[  312.961405][T17374]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  312.961428][T17374]  ? clear_bhb_loop+0x40/0x90
[  312.961447][T17374]  ? clear_bhb_loop+0x40/0x90
[  312.961466][T17374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.961494][T17374] RIP: 0033:0x7fde06f3ab89
[  312.961508][T17374] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  312.961524][T17374] RSP: 002b:00007fde05606a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[  312.961541][T17374] RAX: ffffffffffffffda RBX: 00007fde071c5fa0 RCX: 00007fde06f3ab89
[  312.961552][T17374] RDX: 00007fde05606a80 RSI: 00007fde05606bb0 RDI: 0000000000000021
[  312.961563][T17374] RBP: 00007fde05607090 R08: 0000000000000006 R09: 0000000000000000
[  312.961574][T17374] R10: 0000200000000340 R11: 0000000000000202 R12: 0000000000000001
[  312.961685][T17374] R13: 0000000000000000 R14: 00007fde071c5fa0 R15: 00007ffe11a56de8
[  312.961701][T17374]  </TASK>
[  313.012102][T17382] loop6: detected capacity change from 0 to 512
[  313.163587][T17382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.215407][T17392] __nla_validate_parse: 25 callbacks suppressed
[  313.215441][T17392] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4791'.
[  313.311353][T17390] program syz.4.4790 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  313.336660][T17390] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  313.356715][T17403] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4789'.
[  313.613474][T17430] tmpfs: Bad value for 'mpol'
[  313.668983][T17434] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  313.702071][T17436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.716898][T17440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4799'.
[  313.722418][T17436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.764599][T17446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4811'.
[  313.807734][T17447] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4807'.
[  313.837458][T17451] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4813'.
[  313.859222][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4815'.
[  314.024496][T17471] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  314.088404][T17478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4823'.
[  314.169053][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4828'.
[  314.333868][   T29] kauditd_printk_skb: 290 callbacks suppressed
[  314.333882][   T29] audit: type=1400 audit(1753592346.085:12968): avc:  denied  { map_create } for  pid=17483 comm="syz.9.4826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  314.359668][   T29] audit: type=1400 audit(1753592346.085:12969): avc:  denied  { prog_load } for  pid=17483 comm="syz.9.4826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  314.379227][   T29] audit: type=1400 audit(1753592346.085:12970): avc:  denied  { bpf } for  pid=17483 comm="syz.9.4826" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  314.380324][T17502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4827'.
[  314.448788][   T29] audit: type=1326 audit(1753592346.115:12971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17381 comm="syz.6.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad83dde9a9 code=0x7ffc0000
[  314.472535][   T29] audit: type=1326 audit(1753592346.115:12972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17381 comm="syz.6.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad83dde9a9 code=0x7ffc0000
[  314.496555][   T29] audit: type=1400 audit(1753592346.135:12973): avc:  denied  { write } for  pid=17485 comm="syz.4.4827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  314.517368][   T29] audit: type=1400 audit(1753592346.195:12974): avc:  denied  { allowed } for  pid=17503 comm="syz.8.4831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  314.536922][   T29] audit: type=1400 audit(1753592346.195:12975): avc:  denied  { create } for  pid=17503 comm="syz.8.4831" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  314.558589][   T29] audit: type=1400 audit(1753592346.195:12976): avc:  denied  { map } for  pid=17503 comm="syz.8.4831" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  314.583332][   T29] audit: type=1400 audit(1753592346.195:12977): avc:  denied  { read write } for  pid=17503 comm="syz.8.4831" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  314.626421][T17509] $Hÿ: renamed from bond0 (while UP)
[  314.641423][T17509] $Hÿ: entered promiscuous mode
[  314.646565][T17509] bond_slave_0: entered promiscuous mode
[  314.652473][T17509] bond_slave_1: entered promiscuous mode
[  314.943710][T17535] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  314.954521][T17535] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.962017][T17535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.971789][T17535] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.979367][T17535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.053146][T17537] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  315.061937][T17537] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  315.070652][T17537] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  315.079448][T17537] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  316.091387][ T9708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.134675][T17611] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  317.657347][T17657] $Hÿ: renamed from bond0 (while UP)
[  317.675636][T17657] $Hÿ: entered promiscuous mode
[  317.680774][T17657] bond_slave_0: entered promiscuous mode
[  317.686614][T17657] bond_slave_1: entered promiscuous mode
[  318.582185][T17668] __nla_validate_parse: 23 callbacks suppressed
[  318.582205][T17668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4891'.
[  318.597342][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4891'.
[  318.608738][T17668] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  318.617478][T17668] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  318.626244][T17668] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  318.635036][T17668] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  318.720561][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4889'.
[  318.953090][T17684] 9pnet_fd: Insufficient options for proto=fd
[  318.968274][T17688] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  318.997746][T17692] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4900'.
[  319.166800][T17704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4899'.
[  319.229883][T17696] pim6reg1: entered promiscuous mode
[  319.236284][T17696] pim6reg1: entered allmulticast mode
[  319.400653][   T29] kauditd_printk_skb: 176 callbacks suppressed
[  319.400668][   T29] audit: type=1326 audit(1753592351.155:13154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17678 comm="syz.4.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274f53e9a9 code=0x7ffc0000
[  319.433687][   T29] audit: type=1326 audit(1753592351.155:13155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17678 comm="syz.4.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274f53e9a9 code=0x7ffc0000
[  319.526758][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4907'.
[  319.535722][T17712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4907'.
[  319.572413][T17714] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  319.597779][T17716] loop6: detected capacity change from 0 to 512
[  319.605154][T17716] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  319.617776][T17716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.629983][   T29] audit: type=1400 audit(1753592351.365:13156): avc:  denied  { read write } for  pid=17721 comm="syz.9.4911" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  319.654831][   T29] audit: type=1400 audit(1753592351.365:13157): avc:  denied  { open } for  pid=17721 comm="syz.9.4911" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  319.679458][   T29] audit: type=1400 audit(1753592351.365:13158): avc:  denied  { read write } for  pid=17721 comm="syz.9.4911" name="mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  319.703696][   T29] audit: type=1400 audit(1753592351.365:13159): avc:  denied  { open } for  pid=17721 comm="syz.9.4911" path="/dev/mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  319.727593][   T29] audit: type=1400 audit(1753592351.365:13160): avc:  denied  { ioctl } for  pid=17721 comm="syz.9.4911" path="/dev/mISDNtimer" dev="devtmpfs" ino=248 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  319.753134][T17716] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  319.753816][   T29] audit: type=1400 audit(1753592351.435:13161): avc:  denied  { mount } for  pid=17715 comm="syz.6.4909" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  319.783486][   T29] audit: type=1400 audit(1753592351.435:13162): avc:  denied  { remount } for  pid=17715 comm="syz.6.4909" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  319.803145][   T29] audit: type=1400 audit(1753592351.435:13163): avc:  denied  { create } for  pid=17721 comm="syz.9.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  320.094700][T17746] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4917'.
[  320.152585][T17748] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4919'.
[  320.239737][T17751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4919'.
[  320.259943][T17750] pim6reg1: entered promiscuous mode
[  320.265384][T17750] pim6reg1: entered allmulticast mode
[  320.300746][T17754] FAULT_INJECTION: forcing a failure.
[  320.300746][T17754] name failslab, interval 1, probability 0, space 0, times 0
[  320.313554][T17754] CPU: 1 UID: 0 PID: 17754 Comm: syz.8.4921 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  320.313588][T17754] Tainted: [W]=WARN
[  320.313595][T17754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  320.313607][T17754] Call Trace:
[  320.313612][T17754]  <TASK>
[  320.313655][T17754]  __dump_stack+0x1d/0x30
[  320.313675][T17754]  dump_stack_lvl+0xe8/0x140
[  320.313710][T17754]  dump_stack+0x15/0x1b
[  320.313757][T17754]  should_fail_ex+0x265/0x280
[  320.313787][T17754]  should_failslab+0x8c/0xb0
[  320.313868][T17754]  kmem_cache_alloc_noprof+0x50/0x310
[  320.313893][T17754]  ? skb_clone+0x151/0x1f0
[  320.313914][T17754]  skb_clone+0x151/0x1f0
[  320.313958][T17754]  genlmsg_multicast_allns+0x99/0x230
[  320.313982][T17754]  l2tp_nl_cmd_tunnel_delete+0xdb/0x130
[  320.314014][T17754]  genl_family_rcv_msg_doit+0x143/0x1b0
[  320.314100][T17754]  genl_rcv_msg+0x422/0x460
[  320.314125][T17754]  ? __pfx_l2tp_nl_cmd_tunnel_delete+0x10/0x10
[  320.314150][T17754]  netlink_rcv_skb+0x123/0x220
[  320.314186][T17754]  ? __pfx_genl_rcv_msg+0x10/0x10
[  320.314217][T17754]  genl_rcv+0x28/0x40
[  320.314238][T17754]  netlink_unicast+0x5a8/0x680
[  320.314337][T17754]  netlink_sendmsg+0x58b/0x6b0
[  320.314369][T17754]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.314387][T17754]  __sock_sendmsg+0x142/0x180
[  320.314411][T17754]  ____sys_sendmsg+0x31e/0x4e0
[  320.314447][T17754]  ___sys_sendmsg+0x17b/0x1d0
[  320.314495][T17754]  __x64_sys_sendmsg+0xd4/0x160
[  320.314519][T17754]  x64_sys_call+0x2999/0x2fb0
[  320.314544][T17754]  do_syscall_64+0xd2/0x200
[  320.314564][T17754]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  320.314667][T17754]  ? clear_bhb_loop+0x40/0x90
[  320.314690][T17754]  ? clear_bhb_loop+0x40/0x90
[  320.314771][T17754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.314790][T17754] RIP: 0033:0x7f5965c1e9a9
[  320.314804][T17754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.314821][T17754] RSP: 002b:00007f596427f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  320.314903][T17754] RAX: ffffffffffffffda RBX: 00007f5965e45fa0 RCX: 00007f5965c1e9a9
[  320.314916][T17754] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 0000000000000008
[  320.314929][T17754] RBP: 00007f596427f090 R08: 0000000000000000 R09: 0000000000000000
[  320.314942][T17754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  320.314956][T17754] R13: 0000000000000000 R14: 00007f5965e45fa0 R15: 00007fffa16a75b8
[  320.314975][T17754]  </TASK>
[  320.625659][T17756] 9pnet: Could not find request transport: f
[  320.632168][T17759] 9pnet: Could not find request transport: f
[  320.755189][ T9708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.910306][T17796] FAULT_INJECTION: forcing a failure.
[  320.910306][T17796] name failslab, interval 1, probability 0, space 0, times 0
[  320.923003][T17796] CPU: 0 UID: 0 PID: 17796 Comm: syz.4.4936 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  320.923037][T17796] Tainted: [W]=WARN
[  320.923044][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  320.923057][T17796] Call Trace:
[  320.923065][T17796]  <TASK>
[  320.923074][T17796]  __dump_stack+0x1d/0x30
[  320.923098][T17796]  dump_stack_lvl+0xe8/0x140
[  320.923153][T17796]  dump_stack+0x15/0x1b
[  320.923171][T17796]  should_fail_ex+0x265/0x280
[  320.923205][T17796]  should_failslab+0x8c/0xb0
[  320.923235][T17796]  kmem_cache_alloc_noprof+0x50/0x310
[  320.923263][T17796]  ? security_inode_alloc+0x37/0x100
[  320.923328][T17796]  security_inode_alloc+0x37/0x100
[  320.923391][T17796]  inode_init_always_gfp+0x4b7/0x500
[  320.923435][T17796]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  320.923482][T17796]  alloc_inode+0x58/0x170
[  320.923571][T17796]  new_inode+0x1d/0xe0
[  320.923597][T17796]  shmem_get_inode+0x244/0x750
[  320.923640][T17796]  shmem_mknod+0x46/0x180
[  320.923728][T17796]  shmem_create+0x34/0x50
[  320.923749][T17796]  vfs_create+0x194/0x2b0
[  320.923779][T17796]  do_mknodat+0x2af/0x610
[  320.923803][T17796]  __x64_sys_mknod+0x51/0x60
[  320.923895][T17796]  x64_sys_call+0x181c/0x2fb0
[  320.923915][T17796]  do_syscall_64+0xd2/0x200
[  320.924045][T17796]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  320.924069][T17796]  ? clear_bhb_loop+0x40/0x90
[  320.924089][T17796]  ? clear_bhb_loop+0x40/0x90
[  320.924184][T17796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.924208][T17796] RIP: 0033:0x7f274f53e9a9
[  320.924229][T17796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.924248][T17796] RSP: 002b:00007f274dba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  320.924268][T17796] RAX: ffffffffffffffda RBX: 00007f274f765fa0 RCX: 00007f274f53e9a9
[  320.924290][T17796] RDX: 0000000000000709 RSI: 0000000000000000 RDI: 0000200000001b80
[  320.924301][T17796] RBP: 00007f274dba7090 R08: 0000000000000000 R09: 0000000000000000
[  320.924312][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  320.924323][T17796] R13: 0000000000000000 R14: 00007f274f765fa0 R15: 00007ffff6807728
[  320.924339][T17796]  </TASK>
[  321.161101][T17797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17797 comm=syz.6.4933
[  321.538040][T17841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=17841 comm=syz.2.4953
[  321.558715][T17844] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53264 sclass=netlink_audit_socket pid=17844 comm=syz.4.4954
[  321.680628][T17861] wg2: entered promiscuous mode
[  321.685627][T17861] wg2: entered allmulticast mode
[  321.706732][T17861] FAULT_INJECTION: forcing a failure.
[  321.706732][T17861] name failslab, interval 1, probability 0, space 0, times 0
[  321.719499][T17861] CPU: 1 UID: 0 PID: 17861 Comm: syz.2.4961 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  321.719535][T17861] Tainted: [W]=WARN
[  321.719543][T17861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  321.719556][T17861] Call Trace:
[  321.719563][T17861]  <TASK>
[  321.719570][T17861]  __dump_stack+0x1d/0x30
[  321.719598][T17861]  dump_stack_lvl+0xe8/0x140
[  321.719617][T17861]  dump_stack+0x15/0x1b
[  321.719633][T17861]  should_fail_ex+0x265/0x280
[  321.719667][T17861]  should_failslab+0x8c/0xb0
[  321.719746][T17861]  __kmalloc_noprof+0xa5/0x3e0
[  321.719769][T17861]  ? process_vm_rw+0x27c/0x950
[  321.719811][T17861]  ? process_vm_rw+0x1be/0x950
[  321.719837][T17861]  process_vm_rw+0x27c/0x950
[  321.719863][T17861]  ? __traceiter_kmem_cache_free+0x38/0x60
[  321.719884][T17861]  ? kmem_cache_free+0xdf/0x300
[  321.719961][T17861]  ? audit_log_end+0x1d7/0x1f0
[  321.720030][T17861]  __x64_sys_process_vm_writev+0x78/0x90
[  321.720055][T17861]  x64_sys_call+0xe80/0x2fb0
[  321.720079][T17861]  do_syscall_64+0xd2/0x200
[  321.720158][T17861]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  321.720186][T17861]  ? clear_bhb_loop+0x40/0x90
[  321.720207][T17861]  ? clear_bhb_loop+0x40/0x90
[  321.720240][T17861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.720301][T17861] RIP: 0033:0x7fde06f9e9a9
[  321.720315][T17861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  321.720331][T17861] RSP: 002b:00007fde05607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  321.720349][T17861] RAX: ffffffffffffffda RBX: 00007fde071c5fa0 RCX: 00007fde06f9e9a9
[  321.720361][T17861] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000009b
[  321.720410][T17861] RBP: 00007fde05607090 R08: 000000000000023a R09: 0000000000000000
[  321.720421][T17861] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001
[  321.720440][T17861] R13: 0000000000000000 R14: 00007fde071c5fa0 R15: 00007ffe11a56de8
[  321.720456][T17861]  </TASK>
[  322.458675][T17914] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  322.622699][T17923] vhci_hcd vhci_hcd.0: port 0 already used
[  322.763671][T17929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17929 comm=syz.6.4983
[  323.135044][T17909] syz.8.4979 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  323.149277][T17909] CPU: 1 UID: 0 PID: 17909 Comm: syz.8.4979 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  323.149317][T17909] Tainted: [W]=WARN
[  323.149324][T17909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  323.149336][T17909] Call Trace:
[  323.149341][T17909]  <TASK>
[  323.149395][T17909]  __dump_stack+0x1d/0x30
[  323.149419][T17909]  dump_stack_lvl+0xe8/0x140
[  323.149440][T17909]  dump_stack+0x15/0x1b
[  323.149459][T17909]  dump_header+0x81/0x220
[  323.149568][T17909]  oom_kill_process+0x334/0x3f0
[  323.149628][T17909]  out_of_memory+0x979/0xb80
[  323.149656][T17909]  try_charge_memcg+0x5e6/0x9e0
[  323.149694][T17909]  obj_cgroup_charge_pages+0xa6/0x150
[  323.149729][T17909]  __memcg_kmem_charge_page+0x9f/0x170
[  323.149791][T17909]  __alloc_frozen_pages_noprof+0x188/0x360
[  323.149833][T17909]  alloc_pages_mpol+0xb3/0x250
[  323.149865][T17909]  alloc_pages_noprof+0x90/0x130
[  323.149931][T17909]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  323.149976][T17909]  __kvmalloc_node_noprof+0x30f/0x4e0
[  323.150007][T17909]  ? ip_set_alloc+0x1f/0x30
[  323.150040][T17909]  ? ip_set_alloc+0x1f/0x30
[  323.150076][T17909]  ? __kmalloc_cache_noprof+0x189/0x320
[  323.150107][T17909]  ip_set_alloc+0x1f/0x30
[  323.150177][T17909]  hash_netiface_create+0x282/0x740
[  323.150210][T17909]  ? __pfx_hash_netiface_create+0x10/0x10
[  323.150249][T17909]  ip_set_create+0x3c9/0x960
[  323.150322][T17909]  ? __nla_parse+0x40/0x60
[  323.150395][T17909]  nfnetlink_rcv_msg+0x4c6/0x590
[  323.150562][T17909]  ? selinux_capable+0x1f9/0x270
[  323.150591][T17909]  netlink_rcv_skb+0x123/0x220
[  323.150633][T17909]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  323.150670][T17909]  nfnetlink_rcv+0x16b/0x1690
[  323.150696][T17909]  ? __kfree_skb+0x109/0x150
[  323.150730][T17909]  ? nlmon_xmit+0x4f/0x60
[  323.150802][T17909]  ? consume_skb+0x49/0x150
[  323.150887][T17909]  ? nlmon_xmit+0x4f/0x60
[  323.150928][T17909]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  323.150971][T17909]  ? __dev_queue_xmit+0x11c0/0x1fb0
[  323.151000][T17909]  ? __dev_queue_xmit+0x182/0x1fb0
[  323.151018][T17909]  ? ref_tracker_free+0x37d/0x3e0
[  323.151105][T17909]  ? __netlink_deliver_tap+0x4dc/0x500
[  323.151167][T17909]  netlink_unicast+0x5a8/0x680
[  323.151263][T17909]  netlink_sendmsg+0x58b/0x6b0
[  323.151287][T17909]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.151305][T17909]  __sock_sendmsg+0x142/0x180
[  323.151335][T17909]  ____sys_sendmsg+0x31e/0x4e0
[  323.151395][T17909]  ___sys_sendmsg+0x17b/0x1d0
[  323.151482][T17909]  __x64_sys_sendmsg+0xd4/0x160
[  323.151535][T17909]  x64_sys_call+0x2999/0x2fb0
[  323.151561][T17909]  do_syscall_64+0xd2/0x200
[  323.151583][T17909]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  323.151663][T17909]  ? clear_bhb_loop+0x40/0x90
[  323.151686][T17909]  ? clear_bhb_loop+0x40/0x90
[  323.151712][T17909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.151780][T17909] RIP: 0033:0x7f5965c1e9a9
[  323.151797][T17909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  323.151881][T17909] RSP: 002b:00007f596427f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  323.151898][T17909] RAX: ffffffffffffffda RBX: 00007f5965e45fa0 RCX: 00007f5965c1e9a9
[  323.151909][T17909] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 000000000000000e
[  323.151923][T17909] RBP: 00007f5965ca0d69 R08: 0000000000000000 R09: 0000000000000000
[  323.151934][T17909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.151945][T17909] R13: 0000000000000000 R14: 00007f5965e45fa0 R15: 00007fffa16a75b8
[  323.152002][T17909]  </TASK>
[  323.152022][T17909] memory: usage 307200kB, limit 307200kB, failcnt 157
[  323.286494][T17957] Invalid ELF header magic: != ELF
[  323.290464][T17909] memory+swap: usage 308020kB, limit 9007199254740988kB, failcnt 0
[  323.290482][T17909] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  323.290493][T17909] Memory cgroup stats for /syz8:
[  323.329271][T17909] cache 0
[  323.539670][T17909] rss 0
[  323.542416][T17909] shmem 0
[  323.545346][T17909] mapped_file 0
[  323.548794][T17909] dirty 0
[  323.551729][T17909] writeback 0
[  323.555078][T17909] workingset_refault_anon 2047
[  323.559839][T17909] workingset_refault_file 0
[  323.564397][T17909] swap 839680
[  323.567660][T17909] swapcached 0
[  323.571032][T17909] pgpgin 142287
[  323.574469][T17909] pgpgout 142287
[  323.578073][T17909] pgfault 148096
[  323.581616][T17909] pgmajfault 275
[  323.585141][T17909] inactive_anon 0
[  323.588789][T17909] active_anon 0
[  323.592340][T17909] inactive_file 0
[  323.595964][T17909] active_file 0
[  323.599430][T17909] unevictable 0
[  323.602870][T17909] hierarchical_memory_limit 314572800
[  323.608223][T17909] hierarchical_memsw_limit 9223372036854771712
[  323.614387][T17909] total_cache 0
[  323.617832][T17909] total_rss 0
[  323.621145][T17909] total_shmem 0
[  323.624584][T17909] total_mapped_file 0
[  323.628621][T17909] total_dirty 0
[  323.632117][T17909] total_writeback 0
[  323.635923][T17909] total_workingset_refault_anon 2047
[  323.641211][T17909] total_workingset_refault_file 0
[  323.646265][T17909] total_swap 839680
[  323.650123][T17909] total_swapcached 0
[  323.654025][T17909] total_pgpgin 142287
[  323.657986][T17909] total_pgpgout 142287
[  323.662080][T17909] total_pgfault 148096
[  323.666232][T17909] total_pgmajfault 275
[  323.670312][T17909] total_inactive_anon 0
[  323.674498][T17909] total_active_anon 0
[  323.678456][T17909] total_inactive_file 0
[  323.682634][T17909] total_active_file 0
[  323.686614][T17909] total_unevictable 0
[  323.690613][T17909] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4979,pid=17907,uid=0
[  323.705502][T17909] Memory cgroup out of memory: Killed process 17907 (syz.8.4979) total-vm:93760kB, anon-rss:916kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  323.889317][T17907] syz.8.4979 (17907) used greatest stack depth: 8664 bytes left
[  324.044660][T17969] __nla_validate_parse: 16 callbacks suppressed
[  324.044677][T17969] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5001'.
[  324.099726][T17909] syz.8.4979 (17909) used greatest stack depth: 6040 bytes left
[  324.137609][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5000'.
[  324.266261][T17982] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  324.293175][T17982] netlink: 'syz.8.5004': attribute type 10 has an invalid length.
[  324.301168][T17982] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5004'.
[  324.350680][T17984] vhci_hcd vhci_hcd.0: port 0 already used
[  324.365657][T17982] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.374153][T17982] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.382605][T17982] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.391065][T17982] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.485321][T17982] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.493604][T17982] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.501859][T17982] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.510059][T17982] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.554913][T17982] team0: Port device geneve1 added
[  324.715995][T18000] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  324.781228][   T29] kauditd_printk_skb: 139 callbacks suppressed
[  324.781242][   T29] audit: type=1400 audit(1753592356.535:13303): avc:  denied  { bind } for  pid=18001 comm="syz.4.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  324.839082][   T29] audit: type=1400 audit(1753592356.565:13304): avc:  denied  { setopt } for  pid=18001 comm="syz.4.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  324.886152][T18006] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5014'.
[  324.889111][   T29] audit: type=1400 audit(1753592356.635:13305): avc:  denied  { mounton } for  pid=18005 comm="syz.4.5014" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  324.920410][   T29] audit: type=1400 audit(1753592356.635:13306): avc:  denied  { nlmsg_read } for  pid=18005 comm="syz.4.5014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  324.944134][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5016'.
[  325.002209][   T29] audit: type=1400 audit(1753592356.655:13307): avc:  denied  { getopt } for  pid=18005 comm="syz.4.5014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  325.022026][   T29] audit: type=1400 audit(1753592356.725:13308): avc:  denied  { watch } for  pid=18009 comm="syz.2.5016" path="/78" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  325.025131][T18012] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  325.044066][   T29] audit: type=1400 audit(1753592356.725:13309): avc:  denied  { watch_reads } for  pid=18009 comm="syz.2.5016" path="/newroot/78" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  325.099104][   T29] audit: type=1400 audit(1753592356.845:13310): avc:  denied  { write } for  pid=18015 comm="syz.9.5019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  325.127226][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5020'.
[  325.136239][   T29] audit: type=1400 audit(1753592356.855:13311): avc:  denied  { execute } for  pid=18015 comm="syz.9.5019" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=63563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  325.137656][T18016] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5019'.
[  325.430769][   T29] audit: type=1400 audit(1753592357.155:13312): avc:  denied  { mount } for  pid=18021 comm="syz.2.5022" name="/" dev="rpc_pipefs" ino=63232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  325.677709][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5027'.
[  326.232878][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5034'.
[  326.287858][T18055] wg1: entered promiscuous mode
[  326.292937][T18055] wg1: entered allmulticast mode
[  326.325032][T18065] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53264 sclass=netlink_audit_socket pid=18065 comm=syz.2.5037
[  326.350477][T18060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18060 comm=syz.6.5029
[  326.379000][T18067] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5038'.
[  326.446411][T18075] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  326.498150][T18084] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53264 sclass=netlink_audit_socket pid=18084 comm=syz.9.5046
[  326.594415][T18097] netlink: 'syz.4.5052': attribute type 1 has an invalid length.
[  326.641533][T18102] hub 6-0:1.0: USB hub found
[  326.652075][T18102] hub 6-0:1.0: 8 ports detected
[  326.703671][T18112] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  326.716205][T18119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53264 sclass=netlink_audit_socket pid=18119 comm=syz.6.5061
[  326.915199][T18135] loop6: detected capacity change from 0 to 8192
[  326.925244][T18142] netlink: 'syz.9.5072': attribute type 1 has an invalid length.
[  326.933269][T18142] netlink: 'syz.9.5072': attribute type 4 has an invalid length.
[  326.963519][T18147] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  327.007997][T18153] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53264 sclass=netlink_audit_socket pid=18153 comm=syz.8.5076
[  327.357613][T18200] loop6: detected capacity change from 0 to 512
[  327.373825][T18200] EXT4-fs: Ignoring removed nomblk_io_submit option
[  327.390157][T18202] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.400620][T18202] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.416559][T18200] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  327.439426][T18200] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[  327.503355][T18202] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.514210][T18202] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.572035][T18202] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.582410][T18202] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.653868][T18202] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.664219][T18202] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.739344][T18202] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  327.747594][T18202] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.761928][T18202] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  327.770193][T18202] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.785132][T18202] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  327.793531][T18202] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.806945][T18202] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  327.815315][T18202] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.950457][T18221] pim6reg1: entered promiscuous mode
[  327.955792][T18221] pim6reg1: entered allmulticast mode
[  328.562266][ T3765] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.569127][T12357] vhci_hcd: connection reset by peer
[  328.572662][ T3765] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.590262][ T3749] vhci_hcd: stop threads
[  328.594519][ T3749] vhci_hcd: release socket
[  328.599000][ T3749] vhci_hcd: disconnect device
[  328.661693][T18297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18297 comm=syz.9.5138
[  328.669074][ T3402] vhci_hcd: vhci_device speed not set
[  328.705522][ T3765] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.715928][ T3765] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.742379][T18304] syzkaller1: entered promiscuous mode
[  328.747969][T18304] syzkaller1: entered allmulticast mode
[  328.762886][T18308] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  328.792078][ T3765] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.802552][ T3765] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.922997][ T3765] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.933487][ T3765] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.006146][ T3765] bond1: left promiscuous mode
[  329.011231][ T3765] bridge0: port 3(bond1) entered disabled state
[  329.021738][ T3765] bridge_slave_1: left allmulticast mode
[  329.027450][ T3765] bridge_slave_1: left promiscuous mode
[  329.033350][ T3765] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.061208][ T3765] bridge_slave_0: left allmulticast mode
[  329.066892][ T3765] bridge_slave_0: left promiscuous mode
[  329.072700][ T3765] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.080738][T18322] __nla_validate_parse: 23 callbacks suppressed
[  329.080755][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5146'.
[  329.096324][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5146'.
[  329.105328][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5146'.
[  329.110545][T18340] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  329.179093][ T3765] erspan0 (unregistering): left allmulticast mode
[  329.301700][ T3765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  329.312106][ T3765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  329.321845][ T3765] bond0 (unregistering): Released all slaves
[  329.330296][ T3765] bond1 (unregistering): Released all slaves
[  329.344282][T18298] chnl_net:caif_netlink_parms(): no params data found
[  329.377226][T18361] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5161'.
[  329.407764][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5156'.
[  329.531955][ T3765] hsr_slave_1: left promiscuous mode
[  329.546851][ T3765] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.554404][ T3765] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.569070][ T3765] veth1_macvtap: left promiscuous mode
[  329.574855][ T3765] veth0_macvtap: left promiscuous mode
[  329.582605][ T3765] veth1_vlan: left promiscuous mode
[  329.587910][ T3765] veth0_vlan: left promiscuous mode
[  329.653065][ T3765] team0 (unregistering): Port device team_slave_1 removed
[  329.665550][ T3765] team0 (unregistering): Port device team_slave_0 removed
[  329.674152][ T3747] smc: removing ib device syz!
[  329.714287][T18368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18368 comm=syz.4.5162
[  329.741790][T18374] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5163'.
[  329.755258][T18298] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.762430][T18298] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.781471][T18298] bridge_slave_0: entered allmulticast mode
[  329.794855][T18298] bridge_slave_0: entered promiscuous mode
[  329.812975][T18298] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.820187][T18298] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.918516][T18298] bridge_slave_1: entered allmulticast mode
[  329.928387][T18298] bridge_slave_1: entered promiscuous mode
[  329.952877][T18298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.965986][T18298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.977584][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5164'.
[  330.013562][T18298] team0: Port device team_slave_0 added
[  330.029985][T18298] team0: Port device team_slave_1 added
[  330.058003][T18298] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.065013][T18298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.091141][T18298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.106960][T18298] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.114160][T18298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.140385][T18298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.151833][ T3765] ------------[ cut here ]------------
[  330.157380][ T3765] WARNING: CPU: 1 PID: 3765 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x94/0x100
[  330.167680][ T3765] Modules linked in:
[  330.171698][ T3765] CPU: 1 UID: 0 PID: 3765 Comm: kworker/u8:67 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  330.172024][T18383] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5167'.
[  330.186176][ T3765] Tainted: [W]=WARN
[  330.198855][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  330.208959][ T3765] Workqueue: netns cleanup_net
[  330.213927][ T3765] RIP: 0010:xfrm6_tunnel_net_exit+0x94/0x100
[  330.219987][ T3765] Code: a2 d3 af fc 4b 83 3c 3e 00 75 19 e8 76 b0 95 fc 49 81 ff f8 07 00 00 74 1d e8 68 b0 95 fc 49 83 c7 08 eb d7 e8 5d b0 95 fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49
[  330.239608][ T3765] RSP: 0018:ffffc9000f65fc78 EFLAGS: 00010293
[  330.245713][ T3765] RAX: ffffffff84c1f3c3 RBX: ffff888135da6400 RCX: ffff88811ea02080
[  330.253792][ T3765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888108fd2000
[  330.261841][ T3765] RBP: ffffffff86c8a6a0 R08: 0001ffff86848aff R09: 0000000000000000
[  330.269823][ T3765] R10: ffffc90003033b88 R11: 0001c90003033b88 R12: ffffffff86c8a6c0
[  330.277793][ T3765] R13: ffff888135da6428 R14: ffff888108fd2000 R15: 0000000000000000
[  330.285891][ T3765] FS:  0000000000000000(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000
[  330.294867][ T3765] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  330.301543][ T3765] CR2: 00005555817244a8 CR3: 0000000118ed0000 CR4: 00000000003506f0
[  330.309622][ T3765] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  330.317611][ T3765] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  330.325727][ T3765] Call Trace:
[  330.329032][ T3765]  <TASK>
[  330.332030][ T3765]  ops_undo_list+0x27b/0x410
[  330.336742][ T3765]  cleanup_net+0x2de/0x4d0
[  330.341208][ T3765]  process_scheduled_works+0x4cb/0x9d0
[  330.346729][ T3765]  worker_thread+0x582/0x770
[  330.351350][ T3765]  ? schedule+0x5f/0xd0
[  330.355509][ T3765]  kthread+0x486/0x510
[  330.359600][ T3765]  ? finish_task_switch+0xad/0x2b0
[  330.364727][ T3765]  ? __pfx_worker_thread+0x10/0x10
[  330.369942][ T3765]  ? __pfx_kthread+0x10/0x10
[  330.374629][ T3765]  ret_from_fork+0xda/0x150
[  330.379185][ T3765]  ? __pfx_kthread+0x10/0x10
[  330.383781][ T3765]  ret_from_fork_asm+0x1a/0x30
[  330.388535][ T3765]  </TASK>
[  330.391581][ T3765] ---[ end trace 0000000000000000 ]---
[  330.397696][ T3765] ------------[ cut here ]------------
[  330.403159][ T3765] WARNING: CPU: 1 PID: 3765 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd8/0x100
[  330.413374][ T3765] Modules linked in:
[  330.417270][ T3765] CPU: 1 UID: 0 PID: 3765 Comm: kworker/u8:67 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  330.431739][ T3765] Tainted: [W]=WARN
[  330.435530][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  330.445816][ T3765] Workqueue: netns cleanup_net
[  330.450694][ T3765] RIP: 0010:xfrm6_tunnel_net_exit+0xd8/0x100
[  330.456682][ T3765] Code: 5e d3 af fc 49 83 3c 1e 00 75 19 e8 32 b0 95 fc 48 81 fb f8 07 00 00 74 1d e8 24 b0 95 fc 48 83 c3 08 eb d7 e8 19 b0 95 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 07 b0 95 fc 5b 41 5e 41 5f
[  330.476492][ T3765] RSP: 0018:ffffc9000f65fc78 EFLAGS: 00010293
[  330.482562][ T3765] RAX: ffffffff84c1f407 RBX: 0000000000000008 RCX: ffff88811ea02080
[  330.490621][ T3765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888108fd2808
[  330.498639][ T3765] RBP: ffffffff86c8a6a0 R08: 0001ffff86848aff R09: 0000000000000000
[  330.506693][ T3765] R10: ffffc90003033b88 R11: 0001c90003033b88 R12: ffffffff86c8a6c0
[  330.514737][ T3765] R13: ffff888135da6428 R14: ffff888108fd2800 R15: 00000000000007f8
[  330.522722][ T3765] FS:  0000000000000000(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000
[  330.531659][ T3765] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  330.538400][ T3765] CR2: 00005555817244a8 CR3: 0000000118ed0000 CR4: 00000000003506f0
[  330.546465][ T3765] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  330.554571][ T3765] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  330.562702][ T3765] Call Trace:
[  330.565978][ T3765]  <TASK>
[  330.568910][ T3765]  ops_undo_list+0x27b/0x410
[  330.573528][ T3765]  cleanup_net+0x2de/0x4d0
[  330.578028][ T3765]  process_scheduled_works+0x4cb/0x9d0
[  330.583536][ T3765]  worker_thread+0x582/0x770
[  330.588156][ T3765]  ? schedule+0x5f/0xd0
[  330.592389][ T3765]  kthread+0x486/0x510
[  330.596505][ T3765]  ? finish_task_switch+0xad/0x2b0
[  330.601757][ T3765]  ? __pfx_worker_thread+0x10/0x10
[  330.607024][ T3765]  ? __pfx_kthread+0x10/0x10
[  330.611627][ T3765]  ret_from_fork+0xda/0x150
[  330.616282][ T3765]  ? __pfx_kthread+0x10/0x10
[  330.621018][ T3765]  ret_from_fork_asm+0x1a/0x30
[  330.625863][ T3765]  </TASK>
[  330.628870][ T3765] ---[ end trace 0000000000000000 ]---
[  330.648243][T18298] hsr_slave_0: entered promiscuous mode
[  330.661901][T18298] hsr_slave_1: entered promiscuous mode
[  330.668007][T18298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  330.677591][T18298] Cannot create hsr debugfs directory
[  330.687002][ T3765] ------------[ cut here ]------------
[  330.692681][ T3765] WARNING: CPU: 0 PID: 3765 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0
[  330.702547][ T3765] Modules linked in:
[  330.706459][ T3765] CPU: 0 UID: 0 PID: 3765 Comm: kworker/u8:67 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  330.720885][ T3765] Tainted: [W]=WARN
[  330.724719][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  330.734948][ T3765] Workqueue: netns cleanup_net
[  330.740225][ T3765] RIP: 0010:xfrm_state_fini+0x17c/0x1f0
[  330.745829][ T3765] Code: 48 8d bb 70 0e 00 00 e8 92 5e c1 fc 48 8b bb 70 0e 00 00 e8 36 c3 cd fc 5b 41 5e 41 5f 5d e9 0b 94 b3 00 cc e8 05 4f a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 f7 4e a7 fc 90 0f 0b 90 4c 89 f7 e8 5b
[  330.765837][ T3765] RSP: 0018:ffffc9000f65fc60 EFLAGS: 00010293
[  330.772046][ T3765] RAX: ffffffff84b0551b RBX: ffff888135da6400 RCX: ffff88811ea02080
[  330.780077][ T3765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888135da7240
[  330.781353][T18390] block device autoloading is deprecated and will be removed.
[  330.788124][ T3765] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000
[  330.788141][ T3765] R10: ffffc9000f65fbe8 R11: 0001c9000f65fbe8 R12: ffffffff86c82480
[  330.788153][ T3765] R13: ffff888135da6428 R14: ffff888135da7240 R15: ffff888135da6400
[  330.820021][ T3765] FS:  0000000000000000(0000) GS:ffff8882aee2d000(0000) knlGS:0000000000000000
[  330.829260][ T3765] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  330.836007][ T3765] CR2: 00007f5966977d60 CR3: 0000000118b08000 CR4: 00000000003506f0
[  330.844051][ T3765] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  330.852133][ T3765] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  330.860229][ T3765] Call Trace:
[  330.863746][ T3765]  <TASK>
[  330.866688][ T3765]  xfrm_net_exit+0x2d/0x60
[  330.871349][ T3765]  ops_undo_list+0x27b/0x410
[  330.876088][ T3765]  cleanup_net+0x2de/0x4d0
[  330.880693][ T3765]  process_scheduled_works+0x4cb/0x9d0
[  330.886164][ T3765]  worker_thread+0x582/0x770
[  330.890899][ T3765]  ? schedule+0x5f/0xd0
[  330.895150][ T3765]  kthread+0x486/0x510
[  330.899268][ T3765]  ? finish_task_switch+0xad/0x2b0
[  330.904385][ T3765]  ? __pfx_worker_thread+0x10/0x10
[  330.909617][ T3765]  ? __pfx_kthread+0x10/0x10
[  330.914278][ T3765]  ret_from_fork+0xda/0x150
[  330.918773][ T3765]  ? __pfx_kthread+0x10/0x10
[  330.923391][ T3765]  ret_from_fork_asm+0x1a/0x30
[  330.928232][ T3765]  </TASK>
[  330.931301][ T3765] ---[ end trace 0000000000000000 ]---
[  331.013932][T18298] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.023775][T18298] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.034001][   T29] kauditd_printk_skb: 146 callbacks suppressed
[  331.034014][   T29] audit: type=1400 audit(1753592362.785:13459): avc:  denied  { name_bind } for  pid=18412 comm="syz.8.5178" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  331.035627][T18414] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5173'.
[  331.122040][T18298] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.131955][T18298] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.151944][T18422] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53264 sclass=netlink_audit_socket pid=18422 comm=syz.9.5181
[  331.190745][   T29] audit: type=1400 audit(1753592362.945:13460): avc:  denied  { write } for  pid=18423 comm="syz.9.5182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  331.212875][T18298] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.222846][T18298] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.267597][T18298] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.277678][T18298] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.300702][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5178'.
[  331.349465][ T3395] usb usb14-port1: attempt power cycle
[  331.543844][ T3765] $Hÿ (unregistering): Released all slaves
[  331.556559][ T3765] bond0 (unregistering): Released all slaves
[  331.645025][T18298] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  331.691276][ T3765] hsr_slave_0: left promiscuous mode
[  331.714512][ T3765] hsr_slave_1: left promiscuous mode
[  331.737749][ T3765] veth1_macvtap: left promiscuous mode
[  331.766694][ T3765] veth0_macvtap: left promiscuous mode
[  331.772382][ T3765] veth1_vlan: left promiscuous mode
[  331.777691][ T3765] veth0_vlan: left promiscuous mode
[  331.778750][T18456] loop9: detected capacity change from 0 to 512
[  331.789700][T18456] EXT4-fs: Ignoring removed nomblk_io_submit option
[  331.797398][T18456] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  331.807896][T18456] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal
[  331.865221][T18298] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  331.874583][T18298] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  331.884149][T18298] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  331.928835][T18298] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.937521][T18465] FAULT_INJECTION: forcing a failure.
[  331.937521][T18465] name failslab, interval 1, probability 0, space 0, times 0
[  331.950259][T18465] CPU: 1 UID: 0 PID: 18465 Comm: syz.8.5194 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  331.950291][T18465] Tainted: [W]=WARN
[  331.950297][T18465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  331.950309][T18465] Call Trace:
[  331.950314][T18465]  <TASK>
[  331.950322][T18465]  __dump_stack+0x1d/0x30
[  331.950417][T18465]  dump_stack_lvl+0xe8/0x140
[  331.950439][T18465]  dump_stack+0x15/0x1b
[  331.950455][T18465]  should_fail_ex+0x265/0x280
[  331.950482][T18465]  ? tcf_proto_create+0x44/0x1a0
[  331.950502][T18465]  should_failslab+0x8c/0xb0
[  331.950551][T18465]  __kmalloc_cache_noprof+0x4c/0x320
[  331.950577][T18465]  tcf_proto_create+0x44/0x1a0
[  331.950650][T18465]  tc_new_tfilter+0x95c/0x10a0
[  331.950674][T18465]  ? __pfx_tc_new_tfilter+0x10/0x10
[  331.950710][T18465]  rtnetlink_rcv_msg+0x5fb/0x6d0
[  331.950741][T18465]  netlink_rcv_skb+0x123/0x220
[  331.950829][T18465]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  331.950856][T18465]  rtnetlink_rcv+0x1c/0x30
[  331.950867][T18465]  netlink_unicast+0x5a8/0x680
[  331.950886][T18465]  netlink_sendmsg+0x58b/0x6b0
[  331.950898][T18465]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.950943][T18465]  __sock_sendmsg+0x142/0x180
[  331.950957][T18465]  ____sys_sendmsg+0x31e/0x4e0
[  331.951025][T18465]  ___sys_sendmsg+0x17b/0x1d0
[  331.951043][T18465]  __x64_sys_sendmsg+0xd4/0x160
[  331.951056][T18465]  x64_sys_call+0x2999/0x2fb0
[  331.951074][T18465]  do_syscall_64+0xd2/0x200
[  331.951115][T18465]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  331.951130][T18465]  ? clear_bhb_loop+0x40/0x90
[  331.951145][T18465]  ? clear_bhb_loop+0x40/0x90
[  331.951157][T18465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.951170][T18465] RIP: 0033:0x7f5965c1e9a9
[  331.951179][T18465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.951190][T18465] RSP: 002b:00007f596427f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  331.951202][T18465] RAX: ffffffffffffffda RBX: 00007f5965e45fa0 RCX: 00007f5965c1e9a9
[  331.951283][T18465] RDX: 0000000000040000 RSI: 0000200000006040 RDI: 0000000000000004
[  331.951290][T18465] RBP: 00007f596427f090 R08: 0000000000000000 R09: 0000000000000000
[  331.951298][T18465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.951305][T18465] R13: 0000000000000000 R14: 00007f5965e45fa0 R15: 00007fffa16a75b8
[  331.951316][T18465]  </TASK>
[  331.955505][T18298] 8021q: adding VLAN 0 to HW filter on device team0
[  332.208840][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.216116][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.229377][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.236560][ T3747] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.259696][T18474] block device autoloading is deprecated and will be removed.
[  332.312578][T18298] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.361773][ T3765] IPVS: stop unused estimator thread 0...
[  332.394854][ T3765] ------------[ cut here ]------------
[  332.400415][ T3765] WARNING: CPU: 1 PID: 3765 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0
[  332.410094][ T3765] Modules linked in:
[  332.413999][ T3765] CPU: 1 UID: 0 PID: 3765 Comm: kworker/u8:67 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  332.428456][ T3765] Tainted: [W]=WARN
[  332.432324][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  332.442441][ T3765] Workqueue: netns cleanup_net
[  332.447337][ T3765] RIP: 0010:xfrm_state_fini+0x17c/0x1f0
[  332.452971][ T3765] Code: 48 8d bb 70 0e 00 00 e8 92 5e c1 fc 48 8b bb 70 0e 00 00 e8 36 c3 cd fc 5b 41 5e 41 5f 5d e9 0b 94 b3 00 cc e8 05 4f a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 f7 4e a7 fc 90 0f 0b 90 4c 89 f7 e8 5b
[  332.473067][ T3765] RSP: 0018:ffffc9000f65fc60 EFLAGS: 00010293
[  332.479564][ T3765] RAX: ffffffff84b0551b RBX: ffff88810c73a800 RCX: ffff88811ea02080
[  332.487571][ T3765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810c73b640
[  332.495761][ T3765] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000
[  332.503787][ T3765] R10: ffffc9000f65fbe8 R11: 0001c9000f65fbe8 R12: ffffffff86c82480
[  332.511916][ T3765] R13: ffff88810c73a828 R14: ffff88810c73b640 R15: ffff88810c73a800
[  332.512478][T18298] veth0_vlan: entered promiscuous mode
[  332.519992][ T3765] FS:  0000000000000000(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000
[  332.532959][T18298] veth1_vlan: entered promiscuous mode
[  332.534384][ T3765] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  332.546460][ T3765] CR2: 00007f274dba6f98 CR3: 0000000006834000 CR4: 00000000003506f0
[  332.554588][ T3765] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  332.560141][T18298] veth0_macvtap: entered promiscuous mode
[  332.562780][ T3765] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  332.576487][ T3765] Call Trace:
[  332.579812][ T3765]  <TASK>
[  332.582787][ T3765]  xfrm_net_exit+0x2d/0x60
[  332.586648][T18298] veth1_macvtap: entered promiscuous mode
[  332.587231][ T3765]  ops_undo_list+0x27b/0x410
[  332.597657][ T3765]  cleanup_net+0x2de/0x4d0
[  332.602273][ T3765]  process_scheduled_works+0x4cb/0x9d0
[  332.605343][T18298] batman_adv: batadv0: Interface activated: batadv_slave_0
[  332.607754][ T3765]  worker_thread+0x582/0x770
[  332.619673][ T3765]  ? schedule+0x5f/0xd0
[  332.620917][T18298] batman_adv: batadv0: Interface activated: batadv_slave_1
[  332.623834][ T3765]  kthread+0x486/0x510
[  332.623855][ T3765]  ? finish_task_switch+0xad/0x2b0
[  332.634150][T18298] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.635099][ T3765]  ? __pfx_worker_thread+0x10/0x10
[  332.640274][T18298] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.648881][ T3765]  ? __pfx_kthread+0x10/0x10
[  332.648904][ T3765]  ret_from_fork+0xda/0x150
[  332.654113][T18298] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.662739][ T3765]  ? __pfx_kthread+0x10/0x10
[  332.667385][T18298] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.671826][ T3765]  ret_from_fork_asm+0x1a/0x30
[  332.698896][ T3765]  </TASK>
[  332.702131][ T3765] ---[ end trace 0000000000000000 ]---
[  332.718616][   T29] audit: type=1400 audit(1753592364.465:13461): avc:  denied  { mounton } for  pid=18298 comm="syz-executor" path="/root/syzkaller.ENHs3g/syz-tmp" dev="sda1" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  332.748700][   T29] audit: type=1400 audit(1753592364.495:13462): avc:  denied  { mount } for  pid=18298 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  332.771530][   T29] audit: type=1400 audit(1753592364.495:13463): avc:  denied  { mount } for  pid=18298 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  332.793716][   T29] audit: type=1400 audit(1753592364.495:13464): avc:  denied  { mounton } for  pid=18298 comm="syz-executor" path="/root/syzkaller.ENHs3g/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  332.820806][   T29] audit: type=1400 audit(1753592364.495:13465): avc:  denied  { mounton } for  pid=18298 comm="syz-executor" path="/root/syzkaller.ENHs3g/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=65519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  332.855178][   T29] audit: type=1400 audit(1753592364.605:13466): avc:  denied  { mounton } for  pid=18298 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  332.878426][   T29] audit: type=1400 audit(1753592364.605:13467): avc:  denied  { mount } for  pid=18298 comm="syz-executor" name="/" dev="gadgetfs" ino=3585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  333.000201][T18530] loop9: detected capacity change from 0 to 1024
[  333.020503][   T29] audit: type=1400 audit(1753592364.765:13468): avc:  denied  { bind } for  pid=18529 comm="syz.9.5213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  333.077552][T18533] loop9: detected capacity change from 0 to 512
[  333.200326][T18533] EXT4-fs: Ignoring removed oldalloc option
[  333.223149][T18533] ext4: Unknown parameter 'smackfsfloor'
[  333.391900][T18539] FAULT_INJECTION: forcing a failure.
[  333.391900][T18539] name failslab, interval 1, probability 0, space 0, times 0
[  333.404587][T18539] CPU: 1 UID: 0 PID: 18539 Comm: syz.8.5216 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  333.404622][T18539] Tainted: [W]=WARN
[  333.404628][T18539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  333.404640][T18539] Call Trace:
[  333.404647][T18539]  <TASK>
[  333.404671][T18539]  __dump_stack+0x1d/0x30
[  333.404705][T18539]  dump_stack_lvl+0xe8/0x140
[  333.404725][T18539]  dump_stack+0x15/0x1b
[  333.404743][T18539]  should_fail_ex+0x265/0x280
[  333.404774][T18539]  should_failslab+0x8c/0xb0
[  333.404856][T18539]  __kvmalloc_node_noprof+0x123/0x4e0
[  333.404960][T18539]  ? alloc_netdev_mqs+0x8b7/0xab0
[  333.404976][T18539]  ? __kmalloc_cache_noprof+0x22e/0x320
[  333.405046][T18539]  alloc_netdev_mqs+0x8b7/0xab0
[  333.405090][T18539]  tun_set_iff+0x42c/0x890
[  333.405117][T18539]  __tun_chr_ioctl+0x5f0/0x14c0
[  333.405146][T18539]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  333.405244][T18539]  tun_chr_ioctl+0x27/0x40
[  333.405270][T18539]  __se_sys_ioctl+0xce/0x140
[  333.405300][T18539]  __x64_sys_ioctl+0x43/0x50
[  333.405359][T18539]  x64_sys_call+0x19a8/0x2fb0
[  333.405380][T18539]  do_syscall_64+0xd2/0x200
[  333.405401][T18539]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  333.405429][T18539]  ? clear_bhb_loop+0x40/0x90
[  333.405541][T18539]  ? clear_bhb_loop+0x40/0x90
[  333.405565][T18539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.405586][T18539] RIP: 0033:0x7f5965c1e9a9
[  333.405599][T18539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.405684][T18539] RSP: 002b:00007f596427f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  333.405704][T18539] RAX: ffffffffffffffda RBX: 00007f5965e45fa0 RCX: 00007f5965c1e9a9
[  333.405716][T18539] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000008
[  333.405727][T18539] RBP: 00007f596427f090 R08: 0000000000000000 R09: 0000000000000000
[  333.405739][T18539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.405808][T18539] R13: 0000000000000000 R14: 00007f5965e45fa0 R15: 00007fffa16a75b8
[  333.405825][T18539]  </TASK>
[  333.819449][ T3395] usb usb14-port1: unable to enumerate USB device
[  333.999514][ T3765] ==================================================================
[  334.007645][ T3765] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios
[  334.016176][ T3765] 
[  334.018510][ T3765] write to 0xffff88812d310108 of 44 bytes by task 18579 on cpu 0:
[  334.026326][ T3765]  tty_set_termios+0xc0/0x8c0
[  334.031013][ T3765]  set_termios+0x496/0x4e0
[  334.035429][ T3765]  tty_mode_ioctl+0x379/0x5c0
[  334.040105][ T3765]  n_tty_ioctl_helper+0x91/0x210
[  334.045045][ T3765]  n_tty_ioctl+0x101/0x200
[  334.049458][ T3765]  tty_ioctl+0x845/0xb80
[  334.053704][ T3765]  __se_sys_ioctl+0xce/0x140
[  334.058300][ T3765]  __x64_sys_ioctl+0x43/0x50
[  334.062893][ T3765]  x64_sys_call+0x19a8/0x2fb0
[  334.067573][ T3765]  do_syscall_64+0xd2/0x200
[  334.072070][ T3765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.077964][ T3765] 
[  334.080282][ T3765] read to 0xffff88812d310122 of 1 bytes by task 3765 on cpu 1:
[  334.087819][ T3765]  n_tty_receive_char_flow_ctrl+0x59/0x1a0
[  334.093635][ T3765]  n_tty_lookahead_flow_ctrl+0xed/0x130
[  334.099182][ T3765]  tty_port_default_lookahead_buf+0x8e/0xc0
[  334.105084][ T3765]  flush_to_ldisc+0x281/0x360
[  334.109768][ T3765]  process_scheduled_works+0x4cb/0x9d0
[  334.115233][ T3765]  worker_thread+0x582/0x770
[  334.119832][ T3765]  kthread+0x486/0x510
[  334.123905][ T3765]  ret_from_fork+0xda/0x150
[  334.128404][ T3765]  ret_from_fork_asm+0x1a/0x30
[  334.133168][ T3765] 
[  334.135483][ T3765] value changed: 0x13 -> 0xf8
[  334.140152][ T3765] 
[  334.142467][ T3765] Reported by Kernel Concurrency Sanitizer on:
[  334.148614][ T3765] CPU: 1 UID: 0 PID: 3765 Comm: kworker/u8:67 Tainted: G        W           6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  334.162858][ T3765] Tainted: [W]=WARN
[  334.166653][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  334.176707][ T3765] Workqueue: events_unbound flush_to_ldisc
[  334.182529][ T3765] ==================================================================