last executing test programs:

58.835415692s ago: executing program 4 (id=17):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[]) (fail_nth: 1)

58.76480569s ago: executing program 4 (id=18):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r1=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="0d32818e7e6ae0cd", 0x8}])

58.480176183s ago: executing program 4 (id=21):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
bind$x25(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fchown(r2, 0x0, 0xee01)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000880)={0x0, 0x23, [0xffffffffffffffff, 0xb, 0xfffffffffffffffe, 0xc4edf9d, 0x8, 0x7]})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6, 0x25, 0x0, @val=@netfilter}, 0x40)
connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x1, @empty, 'ip6gretap0\x00'}}, 0x1e)
prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x4000)=nil)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = dup(0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
getuid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="acc925bd70fe49362137da67d5330e20fb3f5e98cc135004ebb487e2c806fc1d3a5b655e13edd6dfba9963dc5793ae708ac06666b9620bb00565c6b1c8d9d5a59a795d065815fa746c10d82e357f916534670e1106e8183a72a22a572aead866a32c8758ddcd9b7d0521ff7519b01484860938ca421253f3298b00c57b919a47edb40dca1e7e5169f2b29fa971c8fe25abb971062ad4ffe9174a", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000004733d9006000000"], 0x0, 0x7, 0x0, &(0x7f0000000300), 0x40f00, 0x15, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xd}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$eJzs3d9rHFsdAPDvTLL3Nm2um6s+1IJtsZWkaDdJY9vgQ1UQfSqo9b3GZBtCNtmSbNomFE3xDxBEVPBFn3wR/AME6Z8gQkHfRUURbfXBh+rI7s7GNN1NUro/vNnPB07mnJnZ/Z6TYc7OmRlmAhhaFyNiKiKyLMuuREQxn5/mKXabqb7ei+ePF+spiSy787ckknxe67vezadn8o+dioivfTnim8nrcTe3d1YXKpXyRl6erq0lL7Ns5+rK2sJyebm8Pjc3e2P+5vz1+ZmutHMiIm598U8/+O7PvnTrV59++Pu7f5n6VrOBTfvb0U3Nphca/4uW0YjY6EWwAUkaLWy6PuC6AABwuPrx/ocj4hMRcSWKMdI4OgUAAABOkuxz4/EyaV7/AwAAAE6mNCLGI0lL+f2+45GmpVLzHt6Pxum0Ut2sfSor7p0vmIhCem+lUp7J7x2YiEJSL8/m99i2ytcOlOci4v2I+H5xrFEuLVYrSwM98wEAAADD48yB8f8/i83xPwAAAHDCTAy6AgAAAEDPGf8DAADAyWf8DwAAACfaV27frqes9f7rpQfbW6vVB1eXypurpbWtxdJideN+ablaXW48s2/tqO+rVKv3PxPrW4+ma+XN2vTm9s7dterWeu3uyiuvwAYAAAD66P0LT3+XRMTuZ8fSiMiSfcsKEdnI/pVH+18/oHfSN1n5j72rB9B/I4OuADAwDulheBUGXQFg4I7qBzrevPPr7tcFAADojcmP7V3/b6S6d/JlyUBrBvRafv0/sa/D8HH9H4aX638wvAqHHQEYFMCJlx5jV3/76/9Z9kaVAgAAum68kZK0lI8DxiNNS6WI9xqvBSgk91Yq5ZmI+FBE/LZYeLdenm18MnF6AAAAAAAAAAAAAAAAAAAAAAAAAACOKcuSyDoY21sHAAAA+CCLSP+c5O//mixeHj94fuCd5F/FxjQiHv74zg8fLdRqG7P1+X/fm1/7UT7/Wr/PXgAAAADttMbprXE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTTi+ePF1upn3H/+oWImGgXfzRONaanohARp/+RxOi+zyURMdKF+LtPIuJsu/hJvVoxkdfiYPw0IsYGHP9MF+LDMHta738+327/S+NiY9p+/xvN09vq3P+le/3fSIf+7712X5i+Puvcs19Md4z/JOLcaPv+pxU/6RD/0jHb+I2v7+x0Wpb9NGKy7e9P8kqs6WT0/vTm9s7VlbWF5fJyeX1ubvbG/M356/Mz0/dWKuX8b9sY3/v4L/9zWPtPd4g/cUT7Lx+z/f9+9uj5R5rZwoFFhfhJlk1dar/9z3aI3/rt+2S+uevlyVZ+t5nf7/zPf3P+wiHtX+rQ/qO2/9Qx23/lq9/5wzFXBQD6YHN7Z3WhUilvyMj0LDMWfQy6EIet0zqI7UN9vp2H+r/YBG+cGWCnBAAA9MT/DvoHXRMAAAAAAAAAAAAAAAAAAAAYXkc9Biy68DixgzF3B9NUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBD/TcAAP//AU3LQQ==")
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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")
open(&(0x7f0000000040)='.\x00', 0x418601, 0x8)

56.688959873s ago: executing program 4 (id=54):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<\t0P\xc4d\xb5\x8e\xf3Y\x16oI\xdd\xf9\xae\x9a\xef&&\t')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20044881)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4045)
r8 = syz_open_dev$vcsa(&(0x7f0000000340), 0x6, 0x410000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r0, &(0x7f0000000380)={0x8})

55.947963478s ago: executing program 4 (id=63):
bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
timer_create(0xb, 0x0, &(0x7f00000000c0)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2})

55.469000795s ago: executing program 4 (id=70):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18)
openat(0xffffffffffffff9c, 0x0, 0x107042, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c00bb000000000000010000f2fc0469ffff", @ANYRES32=0x0, @ANYRES32=0xee00], 0x30, 0x8000}, 0x4)
signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x3}})
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f00000003c0)=ANY=[@ANYBLOB="0529000001000000800b22cd88c40808a9aa46825346caf411f6e90de04151dc598bf4f8b5dd81d7e3c2a90276c4674565545ed680ec23cde63871a7f0e510e7a954dacae5bc6567940f7d74fbcced6e2d57bb2096aa291acdc9caab0347f74f2eb593cf2f384e61852904e5ae9a3f7053d7475be371062ee2bc3daef20c2b4bc7ad04b7db26c51e09f4c41c88acff8f6fc5553b0598f901dca28239065cc90c5b7be68422842d4d95644bfb005a7cd99ed245c896ebd7bfd7729e23a08492"])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

55.457919416s ago: executing program 32 (id=70):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18)
openat(0xffffffffffffff9c, 0x0, 0x107042, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c00bb000000000000010000f2fc0469ffff", @ANYRES32=0x0, @ANYRES32=0xee00], 0x30, 0x8000}, 0x4)
signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x3}})
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f00000003c0)=ANY=[@ANYBLOB="0529000001000000800b22cd88c40808a9aa46825346caf411f6e90de04151dc598bf4f8b5dd81d7e3c2a90276c4674565545ed680ec23cde63871a7f0e510e7a954dacae5bc6567940f7d74fbcced6e2d57bb2096aa291acdc9caab0347f74f2eb593cf2f384e61852904e5ae9a3f7053d7475be371062ee2bc3daef20c2b4bc7ad04b7db26c51e09f4c41c88acff8f6fc5553b0598f901dca28239065cc90c5b7be68422842d4d95644bfb005a7cd99ed245c896ebd7bfd7729e23a08492"])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

49.799977745s ago: executing program 5 (id=134):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)

48.831847048s ago: executing program 5 (id=153):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$selinux_access(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='system_u:obvice_t:s0 unconfined 0'], 0x46)

48.767955336s ago: executing program 5 (id=155):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"})

48.672657337s ago: executing program 5 (id=159):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x43082, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
write$selinux_load(r1, &(0x7f0000000140)={0xf97cff8c, 0x8}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0)
rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x700, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x4c02, &(0x7f0000000140))
fdatasync(0xffffffffffffffff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0xffffffffffffff33, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18)
r7 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)

48.406042497s ago: executing program 5 (id=168):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), 0x8)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000080)={{0x8000, 0x1}, {0x0, 0x9}, 0xfffffffd, 0x6})
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x0, 0x3}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x0, 0x3}, 0x10)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r9=>0x0, 0x7, 0x80, 0x0, 0x1, {{0x38, 0x4, 0x2, 0x4, 0xe0, 0x67, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @remote, {[@timestamp_addr={0x44, 0x1c, 0x7e, 0x1, 0x9, [{@multicast2, 0x7}, {@loopback, 0x6}, {@multicast2, 0x2}]}, @timestamp_addr={0x44, 0x3c, 0x77, 0x1, 0xe, [{@broadcast, 0x696}, {@local, 0x6}, {@rand_addr=0x64010101, 0x5}, {@remote, 0x6}, {@multicast2}, {@local, 0x12}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4}]}, @rr={0x7, 0x13, 0x2e, [@multicast1, @multicast2, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0x54, 0xc1, 0x3, 0xd, [{@rand_addr=0x64010100, 0x38b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1, 0xfffffff8}, {@empty, 0x2bf}, {@rand_addr=0x64010101, 0x8}, {@local, 0xfffff801}, {@remote, 0x4}, {@empty, 0x346}, {@remote, 0x9}, {@broadcast, 0x200}]}, @timestamp_prespec={0x44, 0xc, 0x13, 0x3, 0x4, [{@rand_addr=0x64010100, 0x8001}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000002c0)={'gretap0\x00', <r10=>r9, 0x7, 0x80, 0xc5b, 0x7, {{0x10, 0x4, 0x3, 0x25, 0x40, 0x66, 0x0, 0xde, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@timestamp={0x44, 0xc, 0x91, 0x0, 0x5, [0x2, 0x605e]}, @cipso={0x86, 0x1d, 0x0, [{0x6, 0xa, "d49e4ae051a8cef2"}, {0x1, 0x8, "39a302b842f4"}, {0x2, 0x5, "7f10af"}]}]}}}}})
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f00000003c0)={0xa, 0x6, 0x80000000, 0x5, 0x8, "cbd21df90490ba47fda8554e3a58bb078d1691", 0x1, 0x3})
syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@local, @multicast, @void, {@can={0xc, {{0x3, 0x1}, 0x7, 0x3, 0x0, 0x0, "c0965e2533667427"}}}}, 0x0)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x17c, 0x17c, 0x3, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x7}, @enum64={0xa, 0x9, 0x0, 0x13, 0x1, 0x2, [{0x8, 0x5, 0x2}, {0x5, 0x81, 0x4}, {0x1, 0x7, 0x7f}, {0x7, 0xc, 0x5}, {0xd, 0x10000000, 0x2}, {0x7, 0x10000}, {0x2, 0x0, 0xd40c}, {0xb, 0x8, 0x7}, {0x1, 0x2c81, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x7}}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0xc}, {0x9, 0x5}, {0xa}, {0x5, 0x2}, {0xb, 0x1}, {0xd, 0x3}, {0x6, 0x2}]}, @enum64={0xe, 0x2, 0x0, 0x13, 0x1, 0x8, [{0x1, 0x2, 0xa560}, {0xd, 0x6, 0x7}]}, @enum64={0xe, 0x7, 0x0, 0x13, 0x0, 0x1d, [{0x7, 0x6, 0x7}, {0xc, 0x7, 0x8}, {0x3, 0x3, 0x7}, {0x8, 0x9, 0x10b}, {0x6, 0x0, 0x6ed1f78c}, {0xe, 0xfffffffd, 0x1}, {0xe, 0x2, 0x7}]}, @const={0x8}]}, {0x0, [0x30]}}, &(0x7f0000000400)=""/46, 0x197, 0x2e, 0x1, 0x800, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xd1b8, 0x0, r4, 0x8001, '\x00', r10, r12, 0x1, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)

46.918879501s ago: executing program 1 (id=185):
syz_read_part_table(0x60d, &(0x7f0000002240)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18)
preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)

46.723968694s ago: executing program 1 (id=188):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x20, r2, 0x65283e1aaa2ddbb1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)

46.656947391s ago: executing program 1 (id=190):
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x43403d05, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

46.436349007s ago: executing program 5 (id=192):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
close(0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
semget$private(0x0, 0x1, 0x0)

46.430079918s ago: executing program 33 (id=192):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
close(0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
semget$private(0x0, 0x1, 0x0)

46.419046779s ago: executing program 1 (id=194):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6(0xa, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x87003, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r5 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0)
sendfile(r5, r4, 0x0, 0x100801700)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001200010a0000000000000000800000000c0004000000000000000000"], 0x20}}, 0x0)
getsockopt(r6, 0x15, 0x7, &(0x7f00000010c0)=""/4096, &(0x7f0000000180)=0x1000)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
dup(r3)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000000101040000000000000000020030002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000001c000580040001400000000004000240000000000800034000000000"], 0x80}}, 0x0)

46.264880307s ago: executing program 1 (id=196):
syz_read_part_table(0x60d, &(0x7f0000002240)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18)
preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)

46.048454432s ago: executing program 1 (id=197):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x18, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8040)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000002100210100000000000000000a00000000003400000000000c001800c76eb2fa"], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x6}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000908000001000000", @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {}, [{}]}, 0x2c, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000180)='\x03')
bind$pptp(0xffffffffffffffff, 0x0, 0x0)
connect$netlink(r3, &(0x7f0000000800)=@unspec, 0xc)
syz_emit_ethernet(0x8c, &(0x7f0000000280)={@local, @random="50a203fff400", @void, {@x25={0x805, {0x2, 0x1, 0x27, "510deafd656b50c82d49c5d199fe842d0f91e4c9682e3c7fb4980358bfb1a3fd0e25d50a3ebc36e039697ea442c36da21ab777b32402e49494f004c70a82d0ae07d1653d4025671ab111e85757459f6c36087b38327a296933c7aed77a1daf29eece859c7e7b0277d14a02ac13313c90c4690677fd2a8924703aae"}}}}, 0x0)
uname(&(0x7f0000000100)=""/92)
lseek(r2, 0xffff, 0x4)
ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000680)={{0x8}, 0x100, './file1\x00'})

45.827232878s ago: executing program 34 (id=197):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x18, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8040)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000002100210100000000000000000a00000000003400000000000c001800c76eb2fa"], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x6}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000908000001000000", @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {}, [{}]}, 0x2c, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000180)='\x03')
bind$pptp(0xffffffffffffffff, 0x0, 0x0)
connect$netlink(r3, &(0x7f0000000800)=@unspec, 0xc)
syz_emit_ethernet(0x8c, &(0x7f0000000280)={@local, @random="50a203fff400", @void, {@x25={0x805, {0x2, 0x1, 0x27, "510deafd656b50c82d49c5d199fe842d0f91e4c9682e3c7fb4980358bfb1a3fd0e25d50a3ebc36e039697ea442c36da21ab777b32402e49494f004c70a82d0ae07d1653d4025671ab111e85757459f6c36087b38327a296933c7aed77a1daf29eece859c7e7b0277d14a02ac13313c90c4690677fd2a8924703aae"}}}}, 0x0)
uname(&(0x7f0000000100)=""/92)
lseek(r2, 0xffff, 0x4)
ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000680)={{0x8}, 0x100, './file1\x00'})

30.664356256s ago: executing program 2 (id=401):
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x800, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000180)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x5, 0x5, 0xfffffffd, 0x8, @local, @private2, 0x7, 0x8, 0x4, 0x9}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x8, &(0x7f00000031c0)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x35d7b01f, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100007f0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x20803}, 0xc004)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x2c8, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x4c, 0x1, @lb_hash_stats={{{}, {}, {0x0, 0x4, 0x7}}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @lb_tx_method={{}, {}, {0x0, 0x4, 'hash\x00'}}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x8040}, 0x8000)
setgroups(0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
syz_emit_ethernet(0x144, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000780)='memory.numa_stat\x00', 0x7a05, 0x1700)
r9 = dup2(r7, r8)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$P9_RGETLOCK(r9, &(0x7f0000000140)=ANY=[], 0x2c)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x12, r10, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20)
syz_usbip_server_init(0x4)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000340)=0x6d)
eventfd2(0x0, 0x0)
syz_usbip_server_init(0x5)

29.930887741s ago: executing program 2 (id=422):
syz_read_part_table(0x60d, &(0x7f0000002240)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18)
preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)

29.845277301s ago: executing program 2 (id=424):
r0 = add_key$keyring(0x0, &(0x7f0000002200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="97", 0x1, r0)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c2000001000010400c4eeffff89fffdffff0000", @ANYRES32], 0x3c}}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02", 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000000002"])
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = gettid()
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
read(r6, &(0x7f0000000100)=""/140, 0xde)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x197, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc0105303, &(0x7f0000000440))
tkill(r5, 0x7)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x9f, 0x3b, 0x9, 0x21, @mcast2, @local, 0x7800, 0x80, 0x6, 0x9}})
socket$inet(0x2, 0x1, 0x0)

29.481947924s ago: executing program 2 (id=427):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x37000, 0x1000}, 0x20)

29.481413694s ago: executing program 2 (id=428):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
read(0xffffffffffffffff, &(0x7f0000000200)=""/4, 0x4)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgrp(0x0)
kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
close(0xffffffffffffffff)
sync()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000e0ffffff008000a3a88134310d9c240000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
keyctl$assume_authority(0x10, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
r5 = epoll_create1(0x0)
r6 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x1, 0x31, 0x35, 0x66, 0x39, 0x30, 0x36, 0x35, 0x64, 0x63, 0x84e9cfe440a85a97, 0x62, 0x31, 0x35, 0x35, 0x39]}, &(0x7f00000003c0)={0x0, "944f3fc5fc90a7ace3b011980b09ad9fe76a742392b062b540c81958db2f1bdb1a853752827f52d4b372c0786e3ebf5148fb07393cf8572aa6a24a241ee848cc", 0x3b}, 0x48, 0xffffffffffffffff)
keyctl$instantiate(0xc, r6, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x10000)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000080))
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00018000000000000000001000673f73b2816bcbe0122dd633fbf695ddb3c238fd98ace20507b7523c1919972d50f15825c58f09adefef0f1270c658b53873cc6ff517003e85464cd84d5cfee4a53129007a6974bae8234a54dcf310415f37c7913d515447af9bdce3e2aa4880bb9d7054b496b4f460e7e7888dd7cbc5181e84f5c1318b88e89528f5d7b1b4058acaae520a80dc9c32a1db"], 0x48)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$selinux_load(r9, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000)

29.316949533s ago: executing program 2 (id=430):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xec, 0xb3, 0x4d, 0x20, 0xb95, 0x2791, 0xd2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x23, 0x86}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket(0x2, 0x3, 0x100000001)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}], [], 0x6b}})
lchown(&(0x7f0000000900)='./file0\x00', 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
getrlimit(0x7, &(0x7f00000004c0))
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18)
dup(r7)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@mcast2}}, 0xe8)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0)

25.033361802s ago: executing program 7 (id=509):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4)
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000200)=0x800, 0x4)
sendmsg$netlink(r3, &(0x7f00000002c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="7c000000220000012dbd7000fcdbdf25ea9c1053efb7a6395d1df36b54f89f67a1efbb0a8d39b1b8bdf6c7549ec1cb078a445e7bed73c11e4b7b57279446ceb835207e2efc864f535a99119475213623b69f2af88c21b27c5ad15c5de855334eac4c2e872108c3010845cd908b67e355af53f3484ca1c3dd9b260000"], 0x7c}, {&(0x7f0000000400)={0x94, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, "", [@generic="b261b8734c43769a8068cf3211b7c300bf55dad2c02b1b77c34914b23250eed02559994ab9616ba7f94dd1008eb312ad46354d768fd8357110232c1909b6fe2bd414aeb5f3fde28cb475b47832b9b2fbb3b083e226c5fe4a970fc6d68cb774943d2f54938581", @typed={0x5, 0x13d, 0x0, 0x0, @str='\x00'}, @generic="2c831b6d07237f38f6d2a4ebcfbe1910f5a0831dc1"]}, 0x94}], 0x2, &(0x7f0000000200), 0x0, 0x800}, 0x4051)

25.014088624s ago: executing program 7 (id=510):
r0 = add_key$keyring(0x0, &(0x7f0000002200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="97", 0x1, r0)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c2000001000010400c4eeffff89fffdffff0000", @ANYRES32, @ANYBLOB="01000000010700001c0012000d"], 0x3c}}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02", 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000000002"])
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = gettid()
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
read(r6, &(0x7f0000000100)=""/140, 0xde)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x197, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc0105303, &(0x7f0000000440))
tkill(r5, 0x7)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x9f, 0x3b, 0x9, 0x21, @mcast2, @local, 0x7800, 0x80, 0x6, 0x9}})
socket$inet(0x2, 0x1, 0x0)

24.821127317s ago: executing program 7 (id=514):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async, rerun: 32)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async)
r4 = syz_open_pts(r3, 0x0)
r5 = dup(r4)
fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) (async)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079dff9d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) (async)
write$binfmt_script(r2, &(0x7f0000001300), 0x8f) (async)
close(r2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

24.516797752s ago: executing program 7 (id=517):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r2=>0x0})
rt_tgsigqueueinfo(0x0, 0x0, 0x37, &(0x7f0000000640)={0x10, 0x1ff, 0x7ff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r5, &(0x7f0000000180)={0xf97cff8c, 0x8, 'SE Linux', "431133a6729ccf32f4d0cc1c2097590e"}, 0x20)
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="01000000400800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r0, @ANYBLOB="0000a0ae01"], 0x80}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00', @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ce2a4fa77baa108b"], 0x48}}, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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")
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000540)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
ioctl$TCSETS(r6, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"})

24.19662345s ago: executing program 7 (id=525):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f0000000500)={[{@grpquota}, {@nouid32}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x1, 0x504, &(0x7f0000001480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
r1 = fsopen(&(0x7f0000000040)='qnx6\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0x7}}, 0xa0000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getpgid(r2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000580)='gretap0\x00', 0xff7d)
sendmmsg$inet6(r3, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(r3, &(0x7f00000006c0)="7411ad854ae38a5e475c6eae84bcd528d2a23ce9a173ce31291d3b89e836c287454fc648b7e5289ecade94a850d2b5d307e2eb2b93893805c54ad7d1d1ca1000000000000000a884741f8e867bbef99538cb63470c3ffa78351dacc465b9a27aca5b7f010400004fda0cf3", 0x6b, 0x3b00, 0x0, 0x32)
getitimer(0x1, 0x0)
pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000200)="d568709330fcb522458db7d3a2d8819b284fe39391656f78e7058895f5a15a88be0194ea81709063aacbd4900aa360a1f89254c44d5f7277b4322245aa6ddc67ccc6d2b7b54183dc51f11e870de3bd5b3ad2f2aae5ffd467ff60229de7aab1d4755ab4a0406f1c5e89813d673ae2740bad70e1ce6b65aaff65e2d830f2084c8f7325d0accfedaef9f9d96c7b531920e066ec681a18ae1b0323ae2aeaafecc2e1a033", 0xa2}, {&(0x7f00000000c0)="06f38328c68584", 0x7}, {&(0x7f0000000300)="7943cfe40f05b5bd9510366b8a16403e10d89d488ca0f9bf4c79f3d2aa385c55a288a319363f1c3c175b6a4e98821e27dcb5d5b16b4a8600e0dc063fe80a58dede028e330a4746b7", 0x48}, {&(0x7f0000000100)="971c805f1bbd86d6d987255fe04986b62a7c4ceee2ab8df1b23ccdd0", 0x1c}, {&(0x7f00000003c0)="5a0194b574fc918444da4f6ec4e977f0d55547084f1cb727eec1569c6bccecf550b744dd1ca7fd11eaaa7b0c99e6402697429c7ce3747a19cb1660b98c3f2e1e542fcaba4d7924ea9d98b8cc1100303af14fad6cbff8e493b3486d0444a607e043fd3e8b899af7e44078eb645a1c9786d5dceea4057219d6cdbfdd0baa29cdda0e2be8a6ebd26c07ce501dd85c65597fdde2b1cd", 0x94}], 0x5, 0xffff, 0x7f471fc)
write$cgroup_int(r0, &(0x7f0000000000), 0x12)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000380), 0x101bf)
futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000540))
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x4, 0x22})
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x183100, 0x0)
read$rfkill(r5, &(0x7f0000000080), 0x8)

23.893183595s ago: executing program 7 (id=528):
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000bcd531f19d5429611fc0d29c1fecb4000000"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="0000b1571fdf4d2c772384fe455c651a51b2c39d0b", 0x15}], 0x1}, 0x0)
getsockname(r4, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000300)=0x80)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="381600df0f0037040000e47f0000000000a300008784aa698b00ce44c4", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010069703667726500000800028004001200"], 0x38}}, 0x0)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000200)=""/171, 0xab)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getegid()

14.101743936s ago: executing program 35 (id=430):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xec, 0xb3, 0x4d, 0x20, 0xb95, 0x2791, 0xd2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x23, 0x86}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket(0x2, 0x3, 0x100000001)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}], [], 0x6b}})
lchown(&(0x7f0000000900)='./file0\x00', 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
getrlimit(0x7, &(0x7f00000004c0))
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18)
dup(r7)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@mcast2}}, 0xe8)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0)

8.811265493s ago: executing program 36 (id=528):
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000bcd531f19d5429611fc0d29c1fecb4000000"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="0000b1571fdf4d2c772384fe455c651a51b2c39d0b", 0x15}], 0x1}, 0x0)
getsockname(r4, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000300)=0x80)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="381600df0f0037040000e47f0000000000a300008784aa698b00ce44c4", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010069703667726500000800028004001200"], 0x38}}, 0x0)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000200)=""/171, 0xab)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getegid()

1.866405363s ago: executing program 3 (id=830):
socket$kcm(0x21, 0x2, 0x2)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000019ea73d175f77d0c0000000000000019000000ff86d6"], 0x2c}}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x4000000000000000}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0x3, 0x7, 0x6092, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x5, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, <r4=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r5}, 0x10)
poll(&(0x7f0000001280), 0xa4, 0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000002c0), 0xbe, 0x477, &(0x7f00000004c0)="$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")
getpid()
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r6, 0x5, 0x2, 0x5, 0x8000000000000000})
r7 = epoll_create1(0x0)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="19bddc0cb59efd74dc9677da2776124e6af085803e754f975ca9c2249795749341c61014898f33ad6c74517318b79d1ba6ee373ca3c98aeb6a1124a6c9f8fd505ded7b79e703bb5a251a38855c5ec4efd90a80d2b7fc7462b9cc793a664a5317375b4e9ad78268562dd1a866b4433a5429d9cab80bcb378d1032ff1bf85a11b3e7a6cbe30a39e1e1aa442a3f82e00a8d33ad10b615f743f564e8743604ef5ee762b18141dc8d0418a6499d790d1f80a24622b7dfb79c511626415b27687e89735ed2d0ed51a78068d6ccc6d2", 0xcc}, {&(0x7f0000001b40)="d508a15a9aa4a335e83b9ecb350de99c324e5ca17b374376b0c8af35157bad04f4dbf6400fb9331bd8212b00a8cf57d5e7d70b5036724d922c49b69503f65142578d2986516d76f8120b14b957e76c3d2a7798310947ee65d2467808b602f91e4aa176afb76fa49a00a5de76fd2a23f93ab4a0dcf99b745c647220eaeeabecc5456ffd8954327f6f790bfe8816fc891c8ce42bd0132ae96a3d5ae75659dac96e4062132400f8673291116af46b131b248aa2028258f7a88b66d4a3b41289f82a5c02865291ba55c2c7832e6e62f55ae04ca37f9fd8f68853d565fa6249346b8d85b8bfaeffb5adb67260bcd5a009157f0dd0b64a", 0xf4}], 0x3)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
socket$nl_route(0x10, 0x3, 0x0)

1.71088152s ago: executing program 0 (id=835):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="183aa0a1447b4d0000000000000000000000000018110000e782c964fd580550389ef7385af558d99622d0ba4c3d2b7cacdf4da5f63fa945c1887a1b1dc5c23b5aae5f3a81a1f3ab5ed01150b1e0561bc9ec3d670e46cc0e834bed5506f1d40fe0a9070566dc849a0fc1fd6121aeed0a51977ba438913f2d7e8b37188db3267def32605bf342b6a9e628e47330e688ccf387f9080010951a0d6614040e9c3e9d6797372f3dcc6f8a51065744cbce841498455a1ca28b87498ddf048819ade6acc1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x68)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000a000000000000000001000056fc1d002bcfe9fa05001b001000"/44], 0x2c}}, 0x0)
r3 = socket(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000004000000000000000000006c590a35788b2c9505a4632f731e68cca864aa1062ea9b5333f2a2c7404124fc6279e32fef2b5d49caded5dedca4be1e4794523d0b5b8a0151ab7e9fef040000004760b4a28f209a7e3aef582506a0f1d76867f90e7427f6b03123a5ac3da5e052341b26eda5e28ad8258d35a90e677362242163470afb9ce703b921b3b6879f5e170d12b7903fc46849588e19e29c978fae4c09f42fca71f9395588baf1db3ce07f5ea560edcbc5ab911f57444dea1ee7407466f65fa38e9c65091c"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = dup(0xffffffffffffffff)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000380)=""/155, &(0x7f0000000200)=0x9b)
readv(r7, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000a800920000000000000003000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)

1.620912081s ago: executing program 3 (id=838):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)

1.078046064s ago: executing program 6 (id=851):
creat(0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000bc8600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
mlockall(0x7)

1.048960228s ago: executing program 6 (id=852):
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

1.006210642s ago: executing program 6 (id=853):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcc0984f9ead32b32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20)
readahead(0xffffffffffffffff, 0x5, 0x400)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa000000000000000014000200020000006401010100000000000000000d0001007564703a73"], 0x54}}, 0x0)

1.005022863s ago: executing program 6 (id=854):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000001dc0), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000400)={0x3, &(0x7f0000000080)=[{0x1, 0x0, 0x0, 0xfffff034}, {0x84, 0x0, 0x0, 0x3a5}, {0x6, 0x2, 0x0, 0x2}]}, 0xfffffffffffffe62)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000001100010026bd7000fcdbdf2500000000", @ANYRES32=r5], 0x94}}, 0x0)
r6 = socket$inet(0x2, 0x3, 0x100)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

891.697156ms ago: executing program 8 (id=856):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={<r3=>0x0}, &(0x7f0000000400)=0x8)
ftruncate(r0, 0xc17a)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000007c0)={r3, @in={{0x2, 0x4e24, @multicast1}}, 0x73d6, 0xbae}, &(0x7f0000000740)=0x90)
r5 = dup(r4)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0)
r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&')

863.728149ms ago: executing program 0 (id=857):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="2000000005000000080000000800000000000000", @ANYRES32, @ANYBLOB="000004000000ffffffffffffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/25, 0x19, <r1=>0x0, &(0x7f0000000280)=""/119, 0x77}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
io_setup(0x2, &(0x7f0000000200))
eventfd2(0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
io_uring_setup(0x146e, &(0x7f0000000000))
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x80400, 0x0)
ioctl$SNAPSHOT_S2RAM(r8, 0x330b)
r9 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x37000, 0x1000}, 0x20)

817.412085ms ago: executing program 8 (id=859):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000001700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x39046e39451244d5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x2, &(0x7f0000000380)=[{0xfffc, 0xb, 0x6, 0x7}, {0xc, 0x7, 0x95, 0x4}]})
r4 = timerfd_create(0x6, 0x0)
timerfd_gettime(r4, &(0x7f0000000040))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x3, &(0x7f0000000340)=[{0xfffc, 0xa4, 0x6}, {0x3, 0x0, 0xd, 0x1}, {0x3000, 0x6, 0x5, 0x1}]})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x132, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r6}, 0x10)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x21, @remote, 'hsr0\x00'}}, 0x1e)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0xfeab, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10)
r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0)
readv(r11, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1)
signalfd4(r11, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0x1d, &(0x7f00000000c0), 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x4, &(0x7f0000000140)=[{0x9, 0x9, 0x1, 0xa527}, {0x7, 0x4b, 0x8, 0x11458e44}, {0x6, 0x7, 0x4, 0x4}, {0x4, 0x7, 0x4, 0xb4f}]})
close_range(r5, 0xffffffffffffffff, 0x0)

746.747453ms ago: executing program 3 (id=860):
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x6, 0xfffffffe, 0x1, 0x21001, 0xffffffffffffffff, 0xf99e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x4, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000019006c798af8ff0000000100a200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00100000000000120000d1850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

701.703858ms ago: executing program 8 (id=861):
r0 = add_key$keyring(0x0, &(0x7f0000002200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="97", 0x1, r0)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c2000001000010400c4eeffff89fffdffff0000", @ANYBLOB="01000000010700001c0012000d"], 0x3c}}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02", 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000000002"])
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = gettid()
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
read(r6, &(0x7f0000000100)=""/140, 0xde)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x197, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc0105303, &(0x7f0000000440))
tkill(r5, 0x7)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x9f, 0x3b, 0x9, 0x21, @mcast2, @local, 0x7800, 0x80, 0x6, 0x9}})
socket$inet(0x2, 0x1, 0x0)

687.37617ms ago: executing program 0 (id=862):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = dup(r4)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206050000000000fffff40000000001050001000600000a050005000a0000000900020073797a320000000005000400000000001400078008000840fffffff0080006400000000215000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000000))
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in6=@local}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x0, @in=@broadcast}}, 0xe8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r6}, 0x38)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01dfffffff000000000021"], 0x20}}, 0x0)

686.17675ms ago: executing program 3 (id=863):
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x800, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000180)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x5, 0x5, 0xfffffffd, 0x8, @local, @private2, 0x7, 0x8, 0x4, 0x9}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x8, &(0x7f00000031c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x35d7b01f, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100007f0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x20803}, 0xc004)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x2c8, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x4c, 0x1, @lb_hash_stats={{{}, {}, {0x0, 0x4, 0x7}}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @lb_tx_method={{}, {}, {0x0, 0x4, 'hash\x00'}}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x8040}, 0x8000)
setgroups(0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
syz_emit_ethernet(0x144, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000780)='memory.numa_stat\x00', 0x7a05, 0x1700)
r9 = dup2(r7, r8)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$P9_RGETLOCK(r9, &(0x7f0000000140)=ANY=[], 0x2c)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x12, r10, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20)
syz_usbip_server_init(0x4)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000340)=0x6d)
eventfd2(0x0, 0x0)
syz_usbip_server_init(0x5)

662.497053ms ago: executing program 0 (id=864):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x141000, 0x0) (async)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', <r4=>0x0, 0x40, 0x80, 0x6, 0x2c6, {{0x2b, 0x4, 0x0, 0x24, 0xac, 0x66, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@rr={0x7, 0x1b, 0x2d, [@multicast2, @private=0xa010100, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x53, 0xffffffffffffffff, [{0x5, 0x5, "ecdfb2"}, {0x5, 0x8, "ecf60540e35c"}, {0x0, 0xb, "0402e307b74edf486e"}, {0x6, 0xe, "781942ba72d82195a9bda856"}, {0x4, 0xf, "cc6c39a15df7cf8ddd00233f92"}, {0x0, 0x6, "63a77b07"}, {0x1, 0x12, "87b8d80ef90114e77407291bfe5caadb"}]}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x23, 0x6a, [@rand_addr=0x64010101, @multicast1, @empty, @multicast2, @broadcast, @multicast2, @multicast1, @empty]}]}}}}}) (async)
pipe2(&(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8b, '\x00', r4, r5, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) (async)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f0000002ec0)=""/4096, 0x1000) (async)
fdatasync(r6) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) (async)
ioctl$TIOCGPGRP(r0, 0x5437, 0x0)

594.518031ms ago: executing program 0 (id=866):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0xb, 0x100085, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

593.487491ms ago: executing program 0 (id=867):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="183aa0a1447b4d0000000000000000000000000018110000e782c964fd580550389ef7385af558d99622d0ba4c3d2b7cacdf4da5f63fa945c1887a1b1dc5c23b5aae5f3a81a1f3ab5ed01150b1e0561bc9ec3d670e46cc0e834bed5506f1d40fe0a9070566dc849a0fc1fd6121aeed0a51977ba438913f2d7e8b37188db3267def32605bf342b6a9e628e47330e688ccf387f9080010951a0d6614040e9c3e9d6797372f3dcc6f8a51065744cbce841498455a1ca28b87498ddf048819ade6acc1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x68)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000a000000000000000001000056fc1d002bcfe9fa05001b001000"/44], 0x2c}}, 0x0)
r3 = socket(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000004000000000000000000006c590a35788b2c9505a4632f731e68cca864aa1062ea9b5333f2a2c7404124fc6279e32fef2b5d49caded5dedca4be1e4794523d0b5b8a0151ab7e9fef040000004760b4a28f209a7e3aef582506a0f1d76867f90e7427f6b03123a5ac3da5e052341b26eda5e28ad8258d35a90e677362242163470afb9ce703b921b3b6879f5e170d12b7903fc46849588e19e29c978fae4c09f42fca71f9395588baf1db3ce07f5ea560edcbc5ab911f57444dea1ee7407466f65fa38e9c65091c"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = dup(0xffffffffffffffff)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000380)=""/155, &(0x7f0000000200)=0x9b)
readv(r7, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000a800920000000000000003000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)

518.714009ms ago: executing program 8 (id=869):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x37, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000540)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"})

504.920041ms ago: executing program 9 (id=870):
msgsnd(0x0, 0x0, 0x401, 0x80010000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000010c0)={0xffffffffffffffff, 0x7fff, "b55c21", 0x2, 0x8})
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r3 = perf_event_open$cgroup(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, r3, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x3)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x6)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002900)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket(0x18, 0x0, 0x0)
connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x2, @local, 'vxcan1\x00'}}, 0x1e)
socket$nl_xfrm(0x10, 0x3, 0x6)

402.832043ms ago: executing program 9 (id=871):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
unshare(0x20000400)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

379.974306ms ago: executing program 9 (id=872):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x57, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="e9c2894e6d0a3d5a04000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=0x14, 0x0)
accept4$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x4ea0771269fa30b0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x8, 0xffc5, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f280db17ab50b5432b18faa02276ec9cdef5c9e647ff1a5b72438a5c0ba2c885e64e225db0393da557da605ce470e05e7e4835154e448a5572802349463fc0bdadf6cf6", 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

378.793356ms ago: executing program 8 (id=873):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="2000000005000000080000000800000000000000", @ANYRES32, @ANYBLOB="000004000000ffffffffffffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/25, 0x19, <r1=>0x0, &(0x7f0000000280)=""/119, 0x77}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
io_setup(0x2, &(0x7f0000000200))
eventfd2(0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
io_uring_setup(0x146e, &(0x7f0000000000))
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x80400, 0x0)
ioctl$SNAPSHOT_S2RAM(r7, 0x330b)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x37000, 0x1000}, 0x20)

280.523647ms ago: executing program 8 (id=874):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh]}}}}}}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0x81)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r3 = io_uring_setup(0x2d08, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000400)={0x4, 0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/121, 0x79}, {0x0}, {&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/236, 0xec}], &(0x7f00000003c0)=[0xfffffffffffffff7, 0x7ff]}, 0x20)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e33, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007000000830804"], 0x18}}], 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x2242}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4008844)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000980)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$tipc(r10, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10)
recvmsg(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
bind(r4, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x4, 0x2, 0x2}}, 0x80)

196.280677ms ago: executing program 9 (id=875):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00'})
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000540)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
ioctl$TCSETS(r1, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"})

83.14111ms ago: executing program 9 (id=876):
gettid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010300000000000000000a8000000003"], 0x30}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248)
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x305800, 0x41, 0x6}, 0x18)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x10)
renameat2(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x3)
mknod(0x0, 0x8001420, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, &(0x7f0000000180))
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000140), 0x4)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)

82.10665ms ago: executing program 6 (id=877):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'caif0\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x20, 0x0, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x6}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', <r3=>0x0, 0x4, 0x10, 0x3, 0xa, 0x9, @remote, @local, 0x7, 0x0, 0x9, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000400)={'sit0\x00', <r4=>0x0, 0x20, 0x8, 0xfff, 0xd4f, {{0x28, 0x4, 0x0, 0x3b, 0xa0, 0x67, 0x0, 0x2, 0x2f, 0x0, @remote, @local, {[@rr={0x7, 0x17, 0x68, [@dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @multicast1, @private=0xa010102, @remote]}, @lsrr={0x83, 0xb, 0x2f, [@local, @rand_addr=0x64010101]}, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x2}, {0x1, 0x5, "6adee1"}]}, @generic={0x94, 0x11, "2f880cac5d385ff21c73145f82a7a4"}, @timestamp={0x44, 0xc, 0xd0, 0x0, 0xe, [0x1be, 0x10000]}, @timestamp_addr={0x44, 0x24, 0x3b, 0x1, 0x5, [{@multicast2, 0xfffffffe}, {@loopback, 0x10001}, {@private=0xa010101, 0x3}, {@rand_addr=0x64010100, 0x2}]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x7, 0x9, "f363a1f27379de"}, {0x5, 0xa, "e327c192ffb31f54"}]}, @end]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006970766c616e3100000000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv0\x00', <r8=>0x0})
getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000600)={'erspan0\x00', <r10=>0x0, 0x10, 0x8, 0x10, 0x7, {{0x8, 0x4, 0x1, 0x3a, 0x20, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast1, @local, {[@noop, @generic={0x94, 0x9, "758227f4e66eb8"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000740)={'sit0\x00', <r11=>0x0, 0x10, 0x10, 0x3, 0x5, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@end, @timestamp_addr={0x44, 0xc, 0x92, 0x1, 0xb, [{@broadcast, 0xfeff}]}, @end, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={<r12=>0x0, @initdev, @initdev}, &(0x7f0000000840)=0xc)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000880)=<r13=>0x0, &(0x7f00000008c0)=0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'bond_slave_0\x00', <r14=>0x0})
r15 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r15, &(0x7f0000000200)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r16, {0xfff2}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x2}}]}, 0x2c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f0000000940)={'ip6tnl0\x00', <r17=>0x0, 0x4, 0x5, 0xf, 0x426e, 0x70, @mcast2, @remote, 0x80, 0xd0, 0x677d, 0x5}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a80)={0x1fc, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x4}]}, 0x1fc}}, 0x40081)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r18 = gettid()
process_vm_writev(r18, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20)
r19 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

81.497611ms ago: executing program 3 (id=878):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)

54.942904ms ago: executing program 3 (id=879):
r0 = add_key$keyring(0x0, &(0x7f0000002200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="97", 0x1, r0)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c2000001000010400c4eeffff89fffdffff0000", @ANYBLOB="01000000010700001c0012000d"], 0x3c}}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02", 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000000002"])
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = gettid()
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
read(r6, &(0x7f0000000100)=""/140, 0xde)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x197, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc0105303, &(0x7f0000000440))
tkill(r5, 0x7)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x9f, 0x3b, 0x9, 0x21, @mcast2, @local, 0x7800, 0x80, 0x6, 0x9}})
socket$inet(0x2, 0x1, 0x0)

760.61µs ago: executing program 6 (id=880):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vcan0\x00', <r1=>0x0})
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080), 0x4)
sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f00000002c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "d53495ed19ac6f39"}, 0x10}}, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x202, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x201089a, &(0x7f00000002c0)={[{@usrquota}, {@usrjquota, 0x22}, {@journal_checksum}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@noinit_itable}, {@dioread_nolock, 0x22}, {@abort}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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")

0s ago: executing program 9 (id=881):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x76d, &(0x7f0000000f80)="$eJzs3c1rHOUfAPDvbF6b9vdLBEHrKSBooHRjamwVPFQ8iGChoGfbZbMNNZtsyW5KEwJaRPAiqHgQ9NKzL/Xm1Zer/hcepKVqWqx4kMhsZttts5ts2iRrm88Hpn2emdl857sz8zzP7gw7AexZo+k/uYiDEfFhEjGczU8ioq9e6o04vrbezZXlYjolsbr6+u9JfZ0bK8vFaHpNan9WeTwifngv4lBufdzq4tJMoVwuzWf18drsufHq4tLhs7OF6dJ0ae7oxOTkkWPPHTu6fYn++fPSgasfvfL018f/fvexyx/8mMTxOJAtbs5ju4zGaPae9KVv4R1e3u5gXZZ0ewO4J+mp2bN2lsfBGI6eegkAeJi9HRGrrQ22mQ8APPCSdv0/APCQanwPcGNludiYuvuNxO669lJEDK7l37i+ubakN7tmN1i/Djp0I7njykgSESPbEH80Ij7/9s0v0yl26DokQCvvXIyI0yOj69v/ZN09C1v1TAfrjN5V1/7B7vkuHf8832r8l7s1/okW45+BFufuvdj8/M9d2YYwbaXjvxeb7m272ZR/ZqQnq/2vPubrS86cLZfStu3/ETEWfQNpfWKDGGPX/7neblnz+O+Pj9/6Io2f/n97jdyV3oE7XzNVqBXuJ+dm1y5GPNHbKv/k1v5P2ox/T3YY49UX3v+s3bI0/zTfxrQ+/521einiqZb7//YdbcmG9yeO1w+H8cZB0cI3v3w61C5+8/5PpzR+47PAbkj3/9DG+Y8kzfdrVrce46dLw9+3W7Z5/q2P//7kjXq5P5t3oVCrzU9E9CevrZ9/5PZrs/q+yNZP8x97svX5v9Hxn34mPN1h/r1Xf/vq3vPfWWn+U1va/1svXL4509Mufmf7f7JeGsvmdNL+dbqB9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECnchFxIJJc/lY5l8vn157h/WgM5cqVau3QmcrC3FTUn5U9En25xk9dDjf9HupE9nv4jfqRu+rPRsQjEfHJwL56PV+slKe6nTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZPa3ef5/6teBbm8dALBjBru9AQDArtP/A8Deo/8HgL1H/w8Ae4/+HwD2Hv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zkiRPptPrXynIxrU+dX1yYqZw/PFWqzuRnF4r5YmX+XH66Upkul/LFyuxmf69cqZybjLmFC+O1UrU2Xl1cOjVbWZirnTo7W5gunSr17UpWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA11cWlmUK5XJpXUFD4rxb6s9N1F4Nu1nLs2/nGCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAB8G8AAAD//62JJXw=")
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000140)={0xfffffffe, 0x101, 0xfffffffffffffffb, 0x6, 0x9, 0x1})
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000500)={0x1, 0x0, {0x38, 0x2, 0x0, 0xf, 0xb, 0x6, 0x3, 0xfd}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcb}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000014b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x828, &(0x7f0000000180)=ANY=[], 0x1, 0x2b2, &(0x7f0000000680)="$eJzs3E1oU1kUwPHTj2k7HdqEYRiYgRmPdqMijyZroQ3SihioaCPVgvBqXzTkmYS8EE2RJoLQjQs3fq1VECkUxIUglLpwJS3SnQt33XVhXVlEfJKmtUl5TbW2jdj/b9Fecs65nJd780huIPOHb16KRx0jamakvqVO6rulIIt14pd6WVGQA5cnXv936szZ46FwuOekam+oPxBU1fY9k4NXx/dNZf44/bT9ebNM+8/NLwTnpv+e/mf+c//FmKMxRxPJjJo6lExmzCHb0uHbTtxQPWFbpmNpLOFY6Yp41E6mUjk1E8Ntram05ThqJnIat3KaSWomnVPzghlLqGEY2tYqqG48ey+0fjTyeNF1ZSHzynWbC+K6bvHBlh1sDzW2tP6uW7b+N2rdEnZQ2U29RcQey0aykdL/UjwUlZjYYkmn+OSTFPeIe3/CXdoqxb9XghPh2YMvX6iqX0bt/HJ9PhtpqKwPiE/8pZqS0rj3WLgnoCWV9b9Ja3l9UHzyl3d90LO+SfZ3lNUb4pPZ85IUW2Ym936Y6xu7s1I/GlA90hdeU/+7DK8+TY/e12h9AAAAAAAAAADYDEO/8jy/N4oJ10dUtW1NvFTv9f3A2vP5Ts/z+Ub5t7G21w4AAAAAwG7h5Ebipm1b6R8cFD/Kb8U8v97gwbVvT/6/t3pOR1fDTPebQmr7m2/+rr0hIoUqOR8HfpK1qOh5+fRpo+SGLX6lrA7ebck8dcv9rZ9zdPDtkw3nafJYU29T239XAgAAALAdVt/0d0k++iybHzh0q9Y9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACw22ziJ8dm7nqFtDj486FXqNbXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUM2XAAAA//8NV80s")
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
syz_emit_ethernet(0xe, &(0x7f00000001c0)={@random="577a5fb02a91", @empty, @void, {@mpls_mc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14)
openat(r1, &(0x7f00000004c0)='./file1\x00', 0x400002, 0x12)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r11)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r10], 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

tends beyond EOD, truncated
[   54.725721][ T5079] JBD2: no valid journal superblock found
[   54.731519][ T5079] EXT4-fs (loop3): Could not load journal inode
[   54.818920][ T5086] loop7: detected capacity change from 0 to 1024
[   54.874790][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   54.892973][ T4057] udevd[4057]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   54.912926][ T5086] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   54.932478][ T5085] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[   54.939058][ T5085] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   54.946571][ T5085] vhci_hcd vhci_hcd.0: Device attached
[   54.994673][ T5086] JBD2: no valid journal superblock found
[   55.000496][ T5086] EXT4-fs (loop7): Could not load journal inode
[   55.028986][ T5092] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13)
[   55.035644][ T5092] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   55.043460][ T5092] vhci_hcd vhci_hcd.0: Device attached
[   55.064582][ T5098] loop3: detected capacity change from 0 to 1024
[   55.080820][ T5093] vhci_hcd: connection closed
[   55.090614][ T5098] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   55.091556][ T5089] vhci_hcd: connection closed
[   55.095787][ T4609] vhci_hcd: stop threads
[   55.114518][ T4609] vhci_hcd: release socket
[   55.118959][ T4609] vhci_hcd: disconnect device
[   55.154557][ T5098] JBD2: no valid journal superblock found
[   55.160371][ T5098] EXT4-fs (loop3): Could not load journal inode
[   55.166962][ T4609] vhci_hcd: stop threads
[   55.171241][ T4609] vhci_hcd: release socket
[   55.175662][ T4609] vhci_hcd: disconnect device
[   55.209573][ T5108] FAULT_INJECTION: forcing a failure.
[   55.209573][ T5108] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   55.222736][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: +}[@ Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   55.232954][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   55.243024][ T5108] Call Trace:
[   55.246304][ T5108]  <TASK>
[   55.249241][ T5108]  dump_stack_lvl+0xf2/0x150
[   55.253962][ T5108]  dump_stack+0x15/0x20
[   55.258127][ T5108]  should_fail_ex+0x223/0x230
[   55.262856][ T5108]  should_fail+0xb/0x10
[   55.267050][ T5108]  should_fail_usercopy+0x1a/0x20
[   55.272079][ T5108]  strncpy_from_user+0x25/0x210
[   55.276964][ T5108]  ? kmem_cache_alloc_noprof+0x10c/0x290
[   55.282630][ T5108]  getname_flags+0xb0/0x3b0
[   55.287142][ T5108]  user_path_at+0x26/0x110
[   55.291645][ T5108]  __se_sys_mount+0x248/0x2d0
[   55.296340][ T5108]  __x64_sys_mount+0x67/0x80
[   55.300977][ T5108]  x64_sys_call+0x203e/0x2d60
[   55.305670][ T5108]  do_syscall_64+0xc9/0x1c0
[   55.310187][ T5108]  ? clear_bhb_loop+0x55/0xb0
[   55.314867][ T5108]  ? clear_bhb_loop+0x55/0xb0
[   55.319564][ T5108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.325481][ T5108] RIP: 0033:0x7f8e9409e719
[   55.329918][ T5108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.349530][ T5108] RSP: 002b:00007f8e92d17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   55.357994][ T5108] RAX: ffffffffffffffda RBX: 00007f8e94255f80 RCX: 00007f8e9409e719
[   55.365966][ T5108] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000
[   55.373965][ T5108] RBP: 00007f8e92d17090 R08: 0000000020000080 R09: 0000000000000000
[   55.381949][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.390050][ T5108] R13: 0000000000000000 R14: 00007f8e94255f80 R15: 00007ffd8f3c7ca8
[   55.398032][ T5108]  </TASK>
[   55.435989][ T5111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.251'.
[   55.445227][ T5111] unsupported nlmsg_type 40
[   55.459296][   T29] kauditd_printk_skb: 135 callbacks suppressed
[   55.459309][   T29] audit: type=1326 audit(1730429443.950:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.7.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0dfe719 code=0x7ffc0000
[   55.490291][   T29] audit: type=1326 audit(1730429443.990:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.7.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f06f0dfe719 code=0x7ffc0000
[   55.498253][ T5111] bond1: entered promiscuous mode
[   55.513730][   T29] audit: type=1326 audit(1730429443.990:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.7.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0dfe719 code=0x7ffc0000
[   55.518824][ T5111] bond1: entered allmulticast mode
[   55.528763][ T5111] 8021q: adding VLAN 0 to HW filter on device bond1
[   55.542178][   T29] audit: type=1326 audit(1730429443.990:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.7.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f0dfe719 code=0x7ffc0000
[   55.608533][ T5111] bond1 (unregistering): Released all slaves
[   55.641624][   T29] audit: type=1400 audit(1730429444.130:1733): avc:  denied  { watch } for  pid=5122 comm="syz.2.254" path="/64/control" dev="tmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   55.651297][ T5132] loop6: detected capacity change from 0 to 2048
[   55.709406][   T29] audit: type=1326 audit(1730429444.200:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9409e719 code=0x7ffc0000
[   55.753073][ T5132]  loop6: p1 < > p4
[   55.760709][ T5132] loop6: p4 size 8388608 extends beyond EOD, truncated
[   55.781999][   T29] audit: type=1326 audit(1730429444.200:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9409e719 code=0x7ffc0000
[   55.805651][   T29] audit: type=1326 audit(1730429444.200:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9409e719 code=0x7ffc0000
[   55.829285][   T29] audit: type=1326 audit(1730429444.200:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9409e719 code=0x7ffc0000
[   55.852751][   T29] audit: type=1326 audit(1730429444.200:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9409e719 code=0x7ffc0000
[   55.939286][ T3017]  loop6: p1 < > p4
[   55.952174][ T3017] loop6: p4 size 8388608 extends beyond EOD, truncated
[   55.989043][ T5162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'.
[   56.021274][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[   56.036237][ T4057] udevd[4057]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[   56.055679][ T5173] capability: warning: `syz.2.262' uses deprecated v2 capabilities in a way that may be insecure
[   56.257917][ T5206] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[   56.264546][ T5206] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   56.272106][ T5206] vhci_hcd vhci_hcd.0: Device attached
[   56.313641][ T5206] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[   56.320283][ T5206] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   56.328101][ T5206] vhci_hcd vhci_hcd.0: Device attached
[   56.372247][ T5227] syzkaller0: entered allmulticast mode
[   56.378770][ T5209] vhci_hcd: connection closed
[   56.378937][ T5221] vhci_hcd: connection closed
[   56.379818][ T3746] vhci_hcd: stop threads
[   56.392717][ T3746] vhci_hcd: release socket
[   56.397270][ T3746] vhci_hcd: disconnect device
[   56.403076][ T5227] syzkaller0 (unregistering): left allmulticast mode
[   56.420468][ T3746] vhci_hcd: stop threads
[   56.424759][ T3746] vhci_hcd: release socket
[   56.429281][ T3746] vhci_hcd: disconnect device
[   56.785284][ T5311] loop7: detected capacity change from 0 to 2048
[   56.846532][ T5311]  loop7: p1 < > p4
[   56.908987][ T5311] loop7: p4 size 8388608 extends beyond EOD, truncated
[   56.956735][ T5351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'.
[   57.038105][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.273'.
[   57.058332][ T3017]  loop7: p1 < > p4
[   57.062566][ T3017] loop7: p4 size 8388608 extends beyond EOD, truncated
[   57.131716][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[   57.145580][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.273'.
[   57.195217][ T4057] udevd[4057]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[   57.233203][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[   57.665385][ T5419] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   57.683723][ T5419] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   57.792694][ T5439] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[   57.799249][ T5439] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   57.806702][ T5439] vhci_hcd vhci_hcd.0: Device attached
[   57.817118][ T5439] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[   57.823801][ T5439] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   57.831529][ T5439] vhci_hcd vhci_hcd.0: Device attached
[   57.850881][ T5444] vhci_hcd: connection closed
[   57.850991][  T388] vhci_hcd: stop threads
[   57.860301][  T388] vhci_hcd: release socket
[   57.864835][  T388] vhci_hcd: disconnect device
[   57.869866][ T5442] vhci_hcd: connection closed
[   57.906241][  T388] vhci_hcd: stop threads
[   57.915223][  T388] vhci_hcd: release socket
[   57.919683][  T388] vhci_hcd: disconnect device
[   57.946808][ T5451] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5451 comm=syz.6.286
[   57.959760][ T5456] loop0: detected capacity change from 0 to 2048
[   58.028983][ T5456]  loop0: p1 < > p4
[   58.033462][ T5456] loop0: p4 size 8388608 extends beyond EOD, truncated
[   58.088691][ T3017]  loop0: p1 < > p4
[   58.093122][ T3017] loop0: p4 size 8388608 extends beyond EOD, truncated
[   58.144189][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   58.156508][ T4057] udevd[4057]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   58.231149][ T5485] FAULT_INJECTION: forcing a failure.
[   58.231149][ T5485] name failslab, interval 1, probability 0, space 0, times 0
[   58.240742][ T5486] loop6: detected capacity change from 0 to 512
[   58.244176][ T5485] CPU: 1 UID: 0 PID: 5485 Comm: syz.0.292 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   58.261024][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   58.271098][ T5485] Call Trace:
[   58.274383][ T5485]  <TASK>
[   58.277337][ T5485]  dump_stack_lvl+0xf2/0x150
[   58.282003][ T5485]  dump_stack+0x15/0x20
[   58.286189][ T5485]  should_fail_ex+0x223/0x230
[   58.291084][ T5485]  ? skb_clone+0x154/0x1f0
[   58.295558][ T5485]  should_failslab+0x8f/0xb0
[   58.300218][ T5485]  kmem_cache_alloc_noprof+0x4c/0x290
[   58.305719][ T5485]  skb_clone+0x154/0x1f0
[   58.310052][ T5485]  __netlink_deliver_tap+0x2bd/0x4c0
[   58.315413][ T5485]  netlink_unicast+0x64a/0x670
[   58.320226][ T5485]  netlink_sendmsg+0x5cc/0x6e0
[   58.325130][ T5485]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.330518][ T5485]  __sock_sendmsg+0x140/0x180
[   58.335255][ T5485]  ____sys_sendmsg+0x312/0x410
[   58.340093][ T5485]  __sys_sendmsg+0x1d9/0x270
[   58.344876][ T5485]  __x64_sys_sendmsg+0x46/0x50
[   58.349678][ T5485]  x64_sys_call+0x2689/0x2d60
[   58.354384][ T5485]  do_syscall_64+0xc9/0x1c0
[   58.358982][ T5485]  ? clear_bhb_loop+0x55/0xb0
[   58.363678][ T5485]  ? clear_bhb_loop+0x55/0xb0
[   58.368730][ T5485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.374665][ T5485] RIP: 0033:0x7f31524fe719
[   58.379100][ T5485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.393587][ T5486] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   58.398804][ T5485] RSP: 002b:00007f3151177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   58.398833][ T5485] RAX: ffffffffffffffda RBX: 00007f31526b5f80 RCX: 00007f31524fe719
[   58.398850][ T5485] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000006
[   58.411900][ T5486] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   58.420233][ T5485] RBP: 00007f3151177090 R08: 0000000000000000 R09: 0000000000000000
[   58.420252][ T5485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.420269][ T5485] R13: 0000000000000000 R14: 00007f31526b5f80 R15: 00007ffcefc7ecb8
[   58.420292][ T5485]  </TASK>
[   58.478244][ T5486] EXT4-fs (loop6): 1 truncate cleaned up
[   58.490524][ T5486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.502000][ T5504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.295'.
[   58.596098][ T4698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.026269][ T5596] FAULT_INJECTION: forcing a failure.
[   59.026269][ T5596] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   59.039396][ T5596] CPU: 1 UID: 0 PID: 5596 Comm: syz.6.310 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   59.050042][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   59.060164][ T5596] Call Trace:
[   59.063485][ T5596]  <TASK>
[   59.066529][ T5596]  dump_stack_lvl+0xf2/0x150
[   59.071190][ T5596]  dump_stack+0x15/0x20
[   59.075395][ T5596]  should_fail_ex+0x223/0x230
[   59.080115][ T5596]  should_fail+0xb/0x10
[   59.084321][ T5596]  should_fail_usercopy+0x1a/0x20
[   59.089429][ T5596]  _copy_to_user+0x20/0xa0
[   59.093890][ T5596]  simple_read_from_buffer+0xa0/0x110
[   59.099354][ T5596]  proc_fail_nth_read+0xf9/0x140
[   59.104330][ T5596]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   59.110012][ T5596]  vfs_read+0x1a2/0x700
[   59.114273][ T5596]  ? __fget_files+0x1d4/0x210
[   59.119095][ T5596]  ksys_read+0xeb/0x1b0
[   59.123289][ T5596]  __x64_sys_read+0x42/0x50
[   59.127819][ T5596]  x64_sys_call+0x27d3/0x2d60
[   59.132530][ T5596]  do_syscall_64+0xc9/0x1c0
[   59.137124][ T5596]  ? clear_bhb_loop+0x55/0xb0
[   59.141893][ T5596]  ? clear_bhb_loop+0x55/0xb0
[   59.146595][ T5596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.152545][ T5596] RIP: 0033:0x7fac0caed15c
[   59.156975][ T5596] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[   59.176653][ T5596] RSP: 002b:00007fac0b761030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   59.185084][ T5596] RAX: ffffffffffffffda RBX: 00007fac0cca5f80 RCX: 00007fac0caed15c
[   59.193134][ T5596] RDX: 000000000000000f RSI: 00007fac0b7610a0 RDI: 0000000000000006
[   59.201125][ T5596] RBP: 00007fac0b761090 R08: 0000000000000000 R09: 0000000000000000
[   59.209223][ T5596] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001
[   59.217210][ T5596] R13: 0000000000000000 R14: 00007fac0cca5f80 R15: 00007fffd3afb648
[   59.225227][ T5596]  </TASK>
[   59.308594][ T5609] syzkaller0: entered promiscuous mode
[   59.314135][ T5609] syzkaller0: entered allmulticast mode
[   59.323264][ T5624] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[   59.329815][ T5624] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   59.337350][ T5624] vhci_hcd vhci_hcd.0: Device attached
[   59.346504][ T5624] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12)
[   59.353197][ T5624] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   59.360975][ T5624] vhci_hcd vhci_hcd.0: Device attached
[   59.374535][ T5629] vhci_hcd: connection closed
[   59.374826][ T4604] vhci_hcd: stop threads
[   59.383843][ T4604] vhci_hcd: release socket
[   59.388304][ T4604] vhci_hcd: disconnect device
[   59.517984][ T5626] vhci_hcd: connection closed
[   59.535650][ T4604] vhci_hcd: stop threads
[   59.544801][ T4604] vhci_hcd: release socket
[   59.549313][ T4604] vhci_hcd: disconnect device
[   59.554197][ T3630] vhci_hcd: vhci_device speed not set
[   59.729460][ T5690] loop0: detected capacity change from 0 to 512
[   59.737671][ T5697] FAULT_INJECTION: forcing a failure.
[   59.737671][ T5697] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   59.750789][ T5697] CPU: 0 UID: 0 PID: 5697 Comm: syz.3.319 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   59.761547][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   59.771622][ T5697] Call Trace:
[   59.774925][ T5697]  <TASK>
[   59.777882][ T5697]  dump_stack_lvl+0xf2/0x150
[   59.782512][ T5697]  dump_stack+0x15/0x20
[   59.786741][ T5697]  should_fail_ex+0x223/0x230
[   59.791470][ T5697]  should_fail+0xb/0x10
[   59.795673][ T5697]  should_fail_usercopy+0x1a/0x20
[   59.800775][ T5697]  _copy_from_user+0x1e/0xb0
[   59.805382][ T5697]  usbdev_ioctl+0xab2/0x3e00
[   59.810092][ T5697]  ? do_vfs_ioctl+0x96e/0x1530
[   59.814885][ T5697]  ? selinux_file_ioctl+0x2f7/0x380
[   59.820163][ T5697]  ? __fget_files+0x1d4/0x210
[   59.824952][ T5697]  ? __pfx_usbdev_ioctl+0x10/0x10
[   59.830102][ T5697]  __se_sys_ioctl+0xcd/0x140
[   59.834789][ T5697]  __x64_sys_ioctl+0x43/0x50
[   59.839468][ T5697]  x64_sys_call+0x15cc/0x2d60
[   59.844184][ T5697]  do_syscall_64+0xc9/0x1c0
[   59.848797][ T5697]  ? clear_bhb_loop+0x55/0xb0
[   59.853488][ T5697]  ? clear_bhb_loop+0x55/0xb0
[   59.858256][ T5697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.864188][ T5697] RIP: 0033:0x7fbf8fe6e719
[   59.868613][ T5697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.888322][ T5697] RSP: 002b:00007fbf8eae1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   59.896798][ T5697] RAX: ffffffffffffffda RBX: 00007fbf90025f80 RCX: 00007fbf8fe6e719
[   59.904800][ T5697] RDX: 00000000200001c0 RSI: 00000000c0185500 RDI: 0000000000000005
[   59.912869][ T5697] RBP: 00007fbf8eae1090 R08: 0000000000000000 R09: 0000000000000000
[   59.920871][ T5697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.928952][ T5697] R13: 0000000000000000 R14: 00007fbf90025f80 R15: 00007fff8b2bf938
[   59.936971][ T5697]  </TASK>
[   59.978181][ T5690] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm +}[@: casefold flag without casefold feature
[   59.998129][ T5690] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm +}[@: couldn't read orphan inode 15 (err -117)
[   60.011900][ T5712] netlink: 52 bytes leftover after parsing attributes in process `syz.3.321'.
[   60.022697][ T5690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.059709][ T5712] netlink: 52 bytes leftover after parsing attributes in process `syz.3.321'.
[   60.101896][ T5712] netlink: 52 bytes leftover after parsing attributes in process `syz.3.321'.
[   60.115244][ T5727] SELinux:  policydb version -1506602685 does not match my version range 15-33
[   60.121603][ T5690] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   60.133457][ T5690] vhci_hcd: invalid port number 109
[   60.138770][ T5690] vhci_hcd: default hub control req: 2f75 v6273 i006d l9070
[   60.162247][ T5727] SELinux: failed to load policy
[   60.224574][ T5732] loop3: detected capacity change from 0 to 1024
[   60.281411][ T5724] loop6: detected capacity change from 0 to 2048
[   60.332974][ T5732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.395812][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.429431][ T5724]  loop6: p1 < > p4
[   60.440233][ T5724] loop6: p4 size 8388608 extends beyond EOD, truncated
[   60.453898][ T5732] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.582774][ T3017]  loop6: p1 < > p4
[   60.648505][ T3017] loop6: p4 size 8388608 extends beyond EOD, truncated
[   60.687541][   T29] kauditd_printk_skb: 239 callbacks suppressed
[   60.687560][   T29] audit: type=1400 audit(1730429449.157:1978): avc:  denied  { read write } for  pid=5731 comm="syz.3.324" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   60.707268][ T5727] loop2: detected capacity change from 0 to 8192
[   60.716416][   T29] audit: type=1400 audit(1730429449.157:1979): avc:  denied  { open } for  pid=5731 comm="syz.3.324" path="/71/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   60.752837][ T5750] syz.3.324[5750] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.752898][ T5750] syz.3.324[5750] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.768951][   T29] audit: type=1400 audit(1730429449.217:1980): avc:  denied  { mount } for  pid=5725 comm="syz.2.323" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   60.802230][   T29] audit: type=1326 audit(1730429449.257:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31524fe719 code=0x7ffc0000
[   60.804720][ T4057] udevd[4057]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[   60.825664][   T29] audit: type=1326 audit(1730429449.257:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f31524fe719 code=0x7ffc0000
[   60.837034][ T4493] udevd[4493]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[   60.858888][   T29] audit: type=1326 audit(1730429449.257:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31524fe719 code=0x7ffc0000
[   60.872547][ T5750] syz.3.324[5750] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.891842][   T29] audit: type=1326 audit(1730429449.257:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f31524fe719 code=0x7ffc0000
[   60.891871][   T29] audit: type=1326 audit(1730429449.257:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31524fe719 code=0x7ffc0000
[   60.949915][   T29] audit: type=1326 audit(1730429449.257:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31524fe719 code=0x7ffc0000
[   60.973293][   T29] audit: type=1326 audit(1730429449.257:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31524fd0b0 code=0x7ffc0000
[   60.976282][ T5746] syz.0.325[5746] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   61.025988][ T5746] syz.0.325[5746] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   61.041193][ T5758] loop7: detected capacity change from 0 to 1024
[   61.069404][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.069818][ T5746] syz.0.325[5746] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   61.100317][ T5758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.151372][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.224825][ T5773] FAULT_INJECTION: forcing a failure.
[   61.224825][ T5773] name failslab, interval 1, probability 0, space 0, times 0
[   61.237518][ T5773] CPU: 0 UID: 0 PID: 5773 Comm: syz.6.334 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   61.248124][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   61.258226][ T5773] Call Trace:
[   61.261508][ T5773]  <TASK>
[   61.264442][ T5773]  dump_stack_lvl+0xf2/0x150
[   61.269047][ T5773]  dump_stack+0x15/0x20
[   61.273215][ T5773]  should_fail_ex+0x223/0x230
[   61.277937][ T5773]  ? kernfs_fop_write_iter+0xe1/0x2c0
[   61.283417][ T5773]  should_failslab+0x8f/0xb0
[   61.288064][ T5773]  __kmalloc_noprof+0xa5/0x370
[   61.292848][ T5773]  kernfs_fop_write_iter+0xe1/0x2c0
[   61.298064][ T5773]  do_iter_readv_writev+0x394/0x450
[   61.303346][ T5773]  vfs_writev+0x2d4/0x880
[   61.307690][ T5773]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   61.313457][ T5773]  __x64_sys_pwritev+0x100/0x1c0
[   61.318428][ T5773]  x64_sys_call+0x2a03/0x2d60
[   61.323117][ T5773]  do_syscall_64+0xc9/0x1c0
[   61.327625][ T5773]  ? clear_bhb_loop+0x55/0xb0
[   61.332312][ T5773]  ? clear_bhb_loop+0x55/0xb0
[   61.337015][ T5773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.342924][ T5773] RIP: 0033:0x7fac0caee719
[   61.347395][ T5773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.367080][ T5773] RSP: 002b:00007fac0b761038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[   61.375522][ T5773] RAX: ffffffffffffffda RBX: 00007fac0cca5f80 RCX: 00007fac0caee719
[   61.383563][ T5773] RDX: 0000000000000002 RSI: 0000000020000100 RDI: 0000000000000003
[   61.391536][ T5773] RBP: 00007fac0b761090 R08: 0000000000000008 R09: 0000000000000000
[   61.399966][ T5773] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[   61.407942][ T5773] R13: 0000000000000000 R14: 00007fac0cca5f80 R15: 00007fffd3afb648
[   61.415988][ T5773]  </TASK>
[   61.427484][ T5783] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5783 comm=syz.0.333
[   61.469660][ T5788] syzkaller0: entered allmulticast mode
[   61.478376][ T5790] loop2: detected capacity change from 0 to 2048
[   61.490235][ T5788] syzkaller0 (unregistering): left allmulticast mode
[   61.498343][ T5785] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8)
[   61.504882][ T5785] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   61.512447][ T5785] vhci_hcd vhci_hcd.0: Device attached
[   61.528682][ T5790]  loop2: p1 < > p4
[   61.536092][ T5790] loop2: p4 size 8388608 extends beyond EOD, truncated
[   61.547111][ T5785] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12)
[   61.553739][ T5785] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   61.561462][ T5785] vhci_hcd vhci_hcd.0: Device attached
[   61.570639][ T5797] vhci_hcd: connection closed
[   61.572983][ T5793] vhci_hcd: connection closed
[   61.585720][ T4609] vhci_hcd: stop threads
[   61.586179][ T3017]  loop2: p1 < > p4
[   61.590472][ T4609] vhci_hcd: release socket
[   61.602979][ T4609] vhci_hcd: disconnect device
[   61.608395][ T3017] loop2: p4 size 8388608 extends beyond EOD, truncated
[   61.641643][ T3392] printk: udevd: 14 output lines suppressed due to ratelimiting
[   61.668911][ T4609] vhci_hcd: stop threads
[   61.673200][ T4609] vhci_hcd: release socket
[   61.677703][ T4609] vhci_hcd: disconnect device
[   61.692007][ T5804] loop2: detected capacity change from 0 to 1024
[   61.698437][ T3541] vhci_hcd: vhci_device speed not set
[   61.708036][ T5804] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   61.727144][ T5804] JBD2: no valid journal superblock found
[   61.732903][ T5804] EXT4-fs (loop2): Could not load journal inode
[   61.788082][ T5808] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   61.841309][ T5802] loop6: detected capacity change from 0 to 2048
[   61.848621][ T5802] ext4: Unknown parameter 'dont_measure'
[   61.877718][ T5802] netlink: zone id is out of range
[   61.881673][ T5811] loop2: detected capacity change from 0 to 736
[   61.882955][ T5802] netlink: zone id is out of range
[   61.894334][ T5802] netlink: zone id is out of range
[   61.899504][ T5802] netlink: zone id is out of range
[   61.904963][ T5802] netlink: zone id is out of range
[   61.909644][ T5811] iso9660: Unknown parameter 'ÿ0177777777777777777777701777777777777777777777'
[   61.910369][ T5802] netlink: zone id is out of range
[   61.924172][ T5802] netlink: zone id is out of range
[   61.929516][ T5802] netlink: zone id is out of range
[   61.935892][ T5802] netlink: zone id is out of range
[   61.941120][ T5802] netlink: zone id is out of range
[   61.942829][ T5811] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[   61.993752][ T5813] loop2: detected capacity change from 0 to 128
[   62.068147][ T5820] loop3: detected capacity change from 0 to 1024
[   62.085746][ T5820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.103451][ T5820] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.149652][ T5820] syz.3.345[5820] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   62.165826][ T5823] syz.6.343[5823] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   62.190370][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.361103][ T5836] loop7: detected capacity change from 0 to 2048
[   62.427873][ T5836]  loop7: p1 < > p4
[   62.432407][ T5836] loop7: p4 size 8388608 extends beyond EOD, truncated
[   62.518639][ T5838] loop7: detected capacity change from 0 to 1024
[   62.525700][ T5838] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   62.547130][ T5838] JBD2: no valid journal superblock found
[   62.552925][ T5838] EXT4-fs (loop7): Could not load journal inode
[   62.672698][ T5844] FAULT_INJECTION: forcing a failure.
[   62.672698][ T5844] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.685966][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz.0.353 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   62.696586][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   62.706733][ T5844] Call Trace:
[   62.710022][ T5844]  <TASK>
[   62.713008][ T5844]  dump_stack_lvl+0xf2/0x150
[   62.717682][ T5844]  dump_stack+0x15/0x20
[   62.721856][ T5844]  should_fail_ex+0x223/0x230
[   62.726609][ T5844]  should_fail+0xb/0x10
[   62.730838][ T5844]  should_fail_usercopy+0x1a/0x20
[   62.735934][ T5844]  strncpy_from_user+0x25/0x210
[   62.740819][ T5844]  ? __fget_files+0x1d4/0x210
[   62.745572][ T5844]  __se_sys_add_key+0x81/0x320
[   62.750417][ T5844]  ? fput+0x14e/0x190
[   62.754454][ T5844]  __x64_sys_add_key+0x67/0x80
[   62.759328][ T5844]  x64_sys_call+0x157d/0x2d60
[   62.764064][ T5844]  do_syscall_64+0xc9/0x1c0
[   62.768597][ T5844]  ? clear_bhb_loop+0x55/0xb0
[   62.773373][ T5844]  ? clear_bhb_loop+0x55/0xb0
[   62.778120][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.784175][ T5844] RIP: 0033:0x7f31524fe719
[   62.788601][ T5844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.808225][ T5844] RSP: 002b:00007f3151177038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   62.816766][ T5844] RAX: ffffffffffffffda RBX: 00007f31526b5f80 RCX: 00007f31524fe719
[   62.824763][ T5844] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000020000100
[   62.832783][ T5844] RBP: 00007f3151177090 R08: 000000003a34ab0e R09: 0000000000000000
[   62.840843][ T5844] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[   62.848821][ T5844] R13: 0000000000000000 R14: 00007f31526b5f80 R15: 00007ffcefc7ecb8
[   62.856904][ T5844]  </TASK>
[   62.964086][ T5851] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[   62.970637][ T5851] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   62.978184][ T5851] vhci_hcd vhci_hcd.0: Device attached
[   62.989892][ T5846] loop7: detected capacity change from 0 to 2048
[   63.000075][ T5855] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13)
[   63.006761][ T5855] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   63.014541][ T5855] vhci_hcd vhci_hcd.0: Device attached
[   63.027044][ T5859] netlink: 28 bytes leftover after parsing attributes in process `syz.6.357'.
[   63.045260][ T5846] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.069207][ T5859] loop6: detected capacity change from 0 to 512
[   63.081389][ T5864] loop3: detected capacity change from 0 to 2048
[   63.088893][ T5859] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[   63.099026][ T5864] EXT4-fs: Ignoring removed nobh option
[   63.104738][ T5852] vhci_hcd: connection closed
[   63.104842][ T5856] vhci_hcd: connection closed
[   63.110276][ T4609] vhci_hcd: stop threads
[   63.119227][ T4609] vhci_hcd: release socket
[   63.123648][ T4609] vhci_hcd: disconnect device
[   63.128855][ T4609] vhci_hcd: stop threads
[   63.133108][ T4609] vhci_hcd: release socket
[   63.137582][ T4609] vhci_hcd: disconnect device
[   63.139129][ T5864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.156031][ T5864] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.156937][ T5859] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.357: bg 0: block 64: padding at end of block bitmap is not set
[   63.169478][    T9] vhci_hcd: vhci_device speed not set
[   63.188108][ T5859] EXT4-fs error (device loop6): ext4_acquire_dquot:6879: comm syz.6.357: Failed to acquire dquot type 0
[   63.200315][ T5859] EXT4-fs (loop6): 1 truncate cleaned up
[   63.206469][ T5859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.231836][ T5859] syz.6.357 (5859) used greatest stack depth: 9344 bytes left
[   63.241249][ T4698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.280581][ T5864] SELinux:  Context system_u:object_r:dhcpd_initrc_exec_t:s0 is not valid (left unmapped).
[   63.308403][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.319786][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.348403][ T5874] syzkaller0: entered allmulticast mode
[   63.361089][ T5874] syzkaller0 (unregistering): left allmulticast mode
[   63.526255][ T5880] loop7: detected capacity change from 0 to 1024
[   63.538461][ T5880] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   63.565134][ T5880] JBD2: no valid journal superblock found
[   63.571036][ T5880] EXT4-fs (loop7): Could not load journal inode
[   63.639103][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.7.365'.
[   63.716584][ T5900] netlink: 100 bytes leftover after parsing attributes in process `syz.7.368'.
[   63.777678][ T5907] SELinux:  policydb version -1506602685 does not match my version range 15-33
[   63.791191][ T5907] SELinux: failed to load policy
[   63.838222][ T5913] loop7: detected capacity change from 0 to 1024
[   63.857764][ T5913] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   63.879478][ T5907] loop6: detected capacity change from 0 to 8192
[   63.889403][ T5913] JBD2: no valid journal superblock found
[   63.895152][ T5913] EXT4-fs (loop7): Could not load journal inode
[   63.939248][ T5921] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8)
[   63.945854][ T5921] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   63.953377][ T5921] vhci_hcd vhci_hcd.0: Device attached
[   63.962372][ T5909] netlink: 596 bytes leftover after parsing attributes in process `syz.0.373'.
[   63.971740][ T5921] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12)
[   63.978385][ T5921] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   63.986152][ T5921] vhci_hcd vhci_hcd.0: Device attached
[   63.987924][ T5909] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0
[   63.997680][ T5933] usb usb7: usbfs: process 5933 (syz.6.379) did not claim interface 0 before use
[   64.009462][ T5924] vhci_hcd: connection closed
[   64.010335][ T5929] vhci_hcd: connection closed
[   64.019686][  T582] vhci_hcd: stop threads
[   64.028773][  T582] vhci_hcd: release socket
[   64.033264][  T582] vhci_hcd: disconnect device
[   64.043527][  T582] vhci_hcd: stop threads
[   64.048019][  T582] vhci_hcd: release socket
[   64.052463][  T582] vhci_hcd: disconnect device
[   64.062282][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.071055][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.080476][ T5936] usb usb7: usbfs: process 5936 (syz.6.381) did not claim interface 0 before use
[   64.102233][ T5940] batadv0: entered promiscuous mode
[   64.115306][ T5940] batadv_slave_0: entered promiscuous mode
[   64.121435][ T5940] batadv_slave_0: left promiscuous mode
[   64.134258][ T5940] batadv0: left promiscuous mode
[   64.193621][ T5950] loop2: detected capacity change from 0 to 2048
[   64.228764][ T5950]  loop2: p1 < > p4
[   64.233315][ T5950] loop2: p4 size 8388608 extends beyond EOD, truncated
[   64.308860][ T5955] loop2: detected capacity change from 0 to 1024
[   64.316498][ T5955] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   64.327786][ T5955] JBD2: no valid journal superblock found
[   64.333548][ T5955] EXT4-fs (loop2): Could not load journal inode
[   64.385454][ T5959] syzkaller0: entered allmulticast mode
[   64.393260][ T5959] syzkaller0 (unregistering): left allmulticast mode
[   64.579271][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.7.391'.
[   64.726900][ T5975] syzkaller0: entered promiscuous mode
[   64.732406][ T5975] syzkaller0: entered allmulticast mode
[   64.777148][ T5983] loop3: detected capacity change from 0 to 1024
[   64.791534][ T5983] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   64.820112][ T5983] JBD2: no valid journal superblock found
[   64.825964][ T5983] EXT4-fs (loop3): Could not load journal inode
[   64.855350][ T5986] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   64.885919][ T5990] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[   64.892475][ T5990] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   64.899953][ T5990] vhci_hcd vhci_hcd.0: Device attached
[   64.974591][ T6001] ref_ctr increment failed for inode: 0x1e1 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810a7af9c0
[   64.998872][ T5990] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[   65.005512][ T5990] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   65.013294][ T5990] vhci_hcd vhci_hcd.0: Device attached
[   65.023668][ T6001] uprobe: syz.0.405:6001 failed to unregister, leaking uprobe
[   65.047938][ T5994] vhci_hcd: connection closed
[   65.048083][ T6005] vhci_hcd: connection closed
[   65.056474][ T6002] sctp: [Deprecated]: syz.7.404 (pid 6002) Use of int in max_burst socket option deprecated.
[   65.056474][ T6002] Use struct sctp_assoc_value instead
[   65.057124][ T5284] vhci_hcd: stop threads
[   65.081097][ T5284] vhci_hcd: release socket
[   65.085528][ T5284] vhci_hcd: disconnect device
[   65.092280][ T5284] vhci_hcd: stop threads
[   65.096601][ T5284] vhci_hcd: release socket
[   65.101049][ T5284] vhci_hcd: disconnect device
[   65.123796][ T6011] loop3: detected capacity change from 0 to 8192
[   65.125044][ T6011] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   65.156106][ T3579] vhci_hcd: vhci_device speed not set
[   65.164492][ T5999] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[   65.172734][ T5999] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[   65.224369][ T6025] loop3: detected capacity change from 0 to 1024
[   65.232521][ T6025] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   65.243051][ T6025] JBD2: no valid journal superblock found
[   65.248849][ T6025] EXT4-fs (loop3): Could not load journal inode
[   65.412322][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.7.418'.
[   65.435208][ T6047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.419'.
[   65.510428][ T6052] syz.3.421 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   65.523326][ T6052] syz.3.421 uses obsolete (PF_INET,SOCK_PACKET)
[   65.593826][ T6058] loop2: detected capacity change from 0 to 2048
[   65.621176][ T6060] loop3: detected capacity change from 0 to 2048
[   65.628062][ T6058]  loop2: p1 < > p4
[   65.632343][ T6058] loop2: p4 size 8388608 extends beyond EOD, truncated
[   65.687715][ T6060]  loop3: p1 < > p4
[   65.692265][ T6060] loop3: p4 size 8388608 extends beyond EOD, truncated
[   65.738260][   T29] kauditd_printk_skb: 14360 callbacks suppressed
[   65.738275][   T29] audit: type=1326 audit(1730429454.237:16346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   65.776679][   T29] audit: type=1326 audit(1730429454.267:16347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   65.800499][   T29] audit: type=1326 audit(1730429454.267:16348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   65.823965][   T29] audit: type=1326 audit(1730429454.267:16349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   65.847497][   T29] audit: type=1326 audit(1730429454.267:16350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   65.870934][   T29] audit: type=1326 audit(1730429454.267:16351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   65.894367][   T29] audit: type=1326 audit(1730429454.267:16352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   65.917879][   T29] audit: type=1326 audit(1730429454.267:16353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   65.941542][   T29] audit: type=1326 audit(1730429454.267:16354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   65.965545][   T29] audit: type=1326 audit(1730429454.267:16355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   66.013619][ T6070] loop3: detected capacity change from 0 to 2048
[   66.067697][ T6070]  loop3: p1 < > p4
[   66.072454][ T6070] loop3: p4 size 8388608 extends beyond EOD, truncated
[   66.107420][ T6074] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[   66.125010][ T6074] SELinux: failed to load policy
[   66.152242][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.161854][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.210202][ T6083] FAULT_INJECTION: forcing a failure.
[   66.210202][ T6083] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   66.223998][ T6083] CPU: 0 UID: 0 PID: 6083 Comm: syz.6.431 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   66.234615][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   66.244688][ T6083] Call Trace:
[   66.247986][ T6083]  <TASK>
[   66.250934][ T6083]  dump_stack_lvl+0xf2/0x150
[   66.255549][ T6083]  dump_stack+0x15/0x20
[   66.259803][ T6083]  should_fail_ex+0x223/0x230
[   66.264629][ T6083]  should_fail+0xb/0x10
[   66.268973][ T6083]  should_fail_usercopy+0x1a/0x20
[   66.274061][ T6083]  strncpy_from_user+0x25/0x210
[   66.278933][ T6083]  ? kmem_cache_alloc_noprof+0x10c/0x290
[   66.284681][ T6083]  getname_flags+0xb0/0x3b0
[   66.289225][ T6083]  __x64_sys_rename+0x33/0x70
[   66.293951][ T6083]  x64_sys_call+0x1a84/0x2d60
[   66.298748][ T6083]  do_syscall_64+0xc9/0x1c0
[   66.303389][ T6083]  ? clear_bhb_loop+0x55/0xb0
[   66.308083][ T6083]  ? clear_bhb_loop+0x55/0xb0
[   66.312910][ T6083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.318925][ T6083] RIP: 0033:0x7fac0caee719
[   66.323369][ T6083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   66.343118][ T6083] RSP: 002b:00007fac0b761038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   66.351794][ T6083] RAX: ffffffffffffffda RBX: 00007fac0cca5f80 RCX: 00007fac0caee719
[   66.359842][ T6083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300
[   66.367834][ T6083] RBP: 00007fac0b761090 R08: 0000000000000000 R09: 0000000000000000
[   66.375898][ T6083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   66.383937][ T6083] R13: 0000000000000001 R14: 00007fac0cca5f80 R15: 00007fffd3afb648
[   66.391932][ T6083]  </TASK>
[   66.423631][ T6090] loop0: detected capacity change from 0 to 2048
[   66.458265][ T6090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.480087][ T6095] loop6: detected capacity change from 0 to 2048
[   66.526494][ T6095]  loop6: p1 < > p4
[   66.530891][ T6095] loop6: p4 size 8388608 extends beyond EOD, truncated
[   66.533613][ T6105] loop3: detected capacity change from 0 to 1024
[   66.546847][ T6105] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   66.557621][ T6105] JBD2: no valid journal superblock found
[   66.563484][ T6105] EXT4-fs (loop3): Could not load journal inode
[   66.737741][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.750207][ T6114] SELinux:  policydb version -1506602685 does not match my version range 15-33
[   66.760025][ T6114] SELinux: failed to load policy
[   67.313611][ T6114] loop6: detected capacity change from 0 to 8192
[   67.388598][ T6122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.444'.
[   67.436520][ T6128] net_ratelimit: 72 callbacks suppressed
[   67.436609][ T6128] IPv6: addrconf: prefix option has invalid lifetime
[   67.473584][ T6133] syzkaller0: entered allmulticast mode
[   67.481782][ T6133] syzkaller0 (unregistering): left allmulticast mode
[   67.490913][ T6135] loop6: detected capacity change from 0 to 1024
[   67.499541][ T6135] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   67.510462][ T6135] JBD2: no valid journal superblock found
[   67.516287][ T6135] EXT4-fs (loop6): Could not load journal inode
[   67.547328][ T6137] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   67.629013][ T6145] netlink: 20 bytes leftover after parsing attributes in process `syz.6.454'.
[   67.640620][ T6147] SELinux:  policydb version -1506602685 does not match my version range 15-33
[   67.650634][ T6147] SELinux: failed to load policy
[   67.680617][ T6149] loop6: detected capacity change from 0 to 2048
[   67.702808][ T6147] loop3: detected capacity change from 0 to 8192
[   67.715354][ T6151] serio: Serial port ptm2
[   67.726284][ T6149]  loop6: p1 < > p4
[   67.730708][ T6149] loop6: p4 size 8388608 extends beyond EOD, truncated
[   67.767781][ T6151] syz.7.457[6151] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   67.767895][ T6151] syz.7.457[6151] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   67.779396][ T6151] syz.7.457[6151] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   67.794634][ T6151] netlink: 268 bytes leftover after parsing attributes in process `syz.7.457'.
[   67.815000][ T6151] unsupported nla_type 65024
[   67.837803][ T6156] loop3: detected capacity change from 0 to 1024
[   67.841306][ T6158] loop6: detected capacity change from 0 to 1024
[   67.844826][ T6156] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   67.855754][ T6158] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   67.873548][ T6158] JBD2: no valid journal superblock found
[   67.879432][ T6158] EXT4-fs (loop6): Could not load journal inode
[   67.895711][ T6160] loop7: detected capacity change from 0 to 512
[   67.898445][ T6156] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   67.911438][ T6156] EXT4-fs (loop3): orphan cleanup on readonly fs
[   67.913389][ T6160] EXT4-fs error (device loop7): ext4_orphan_get:1388: inode #15: comm +}[@: casefold flag without casefold feature
[   67.930190][ T6156] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[   67.930266][ T6160] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm +}[@: couldn't read orphan inode 15 (err -117)
[   67.944693][ T6156] EXT4-fs (loop3): Cannot turn on quotas: error -5
[   67.958179][ T6164] loop6: detected capacity change from 0 to 2048
[   67.964499][ T6156] EXT4-fs (loop3): 1 truncate cleaned up
[   67.969431][ T6160] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.975146][ T6156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   68.007952][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.017666][ T6164]  loop6: p1 < > p4
[   68.022795][ T6156] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.459: corrupted in-inode xattr: overlapping e_value 
[   68.028038][ T6164] loop6: p4 size 8388608 extends beyond EOD, truncated
[   68.087609][ T6175] netlink: 20 bytes leftover after parsing attributes in process `syz.7.466'.
[   68.097121][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.118762][ T6179] SELinux:  policydb version -1506602685 does not match my version range 15-33
[   68.128217][ T6179] SELinux: failed to load policy
[   68.144293][ T6183] loop6: detected capacity change from 0 to 512
[   68.167489][ T6183] EXT4-fs (loop6): too many log groups per flexible block group
[   68.175254][ T6183] EXT4-fs (loop6): failed to initialize mballoc (-12)
[   68.181565][ T6179] loop7: detected capacity change from 0 to 8192
[   68.182421][ T6183] EXT4-fs (loop6): mount failed
[   68.199664][ T6183] netlink: 72 bytes leftover after parsing attributes in process `syz.6.470'.
[   68.208670][ T6183] ip6gretap0: entered promiscuous mode
[   68.214139][ T6183] ip6gretap0: entered allmulticast mode
[   68.261401][ T6191] loop0: detected capacity change from 0 to 1024
[   68.269882][ T6191] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   68.282316][ T6191] JBD2: no valid journal superblock found
[   68.288107][ T6191] EXT4-fs (loop0): Could not load journal inode
[   68.662719][ T6209] loop7: detected capacity change from 0 to 1024
[   68.715256][ T6209] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   68.738532][ T6209] EXT4-fs (loop7): revision level too high, forcing read-only mode
[   68.747858][ T6209] EXT4-fs (loop7): orphan cleanup on readonly fs
[   68.754732][ T6209] EXT4-fs warning (device loop7): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[   68.769289][ T6209] EXT4-fs (loop7): Cannot turn on quotas: error -5
[   68.778362][ T6209] EXT4-fs (loop7): 1 truncate cleaned up
[   68.784445][ T6209] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   68.806326][ T6209] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.477: corrupted in-inode xattr: overlapping e_value 
[   68.893172][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.935419][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz.6.485'.
[   68.964041][ T6230] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   69.044269][ T6235] loop7: detected capacity change from 0 to 1024
[   69.068958][ T6235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.085885][ T6235] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.157223][ T6235] syz.7.488[6235] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   69.157298][ T6235] syz.7.488[6235] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   69.176141][ T6235] syz.7.488[6235] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   69.217825][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.383732][ T6254] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[   69.414068][ T6255] loop7: detected capacity change from 0 to 1024
[   69.436846][ T6255] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   69.458571][ T6255] EXT4-fs (loop7): revision level too high, forcing read-only mode
[   69.476011][ T6255] EXT4-fs (loop7): orphan cleanup on readonly fs
[   69.490477][ T6255] EXT4-fs warning (device loop7): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[   69.505105][ T6255] EXT4-fs (loop7): Cannot turn on quotas: error -5
[   69.526520][ T6255] EXT4-fs (loop7): 1 truncate cleaned up
[   69.539155][ T6255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   69.582106][ T6255] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.493: corrupted in-inode xattr: overlapping e_value 
[   69.655756][ T6258] syzkaller0: entered allmulticast mode
[   69.680509][ T6258] syzkaller0 (unregistering): left allmulticast mode
[   69.706151][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.808810][ T6264] syzkaller0: entered allmulticast mode
[   69.823235][ T6264] syzkaller0 (unregistering): left allmulticast mode
[   70.178756][ T6273] loop7: detected capacity change from 0 to 1024
[   70.262776][ T6273] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.290771][ T6273] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.317775][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.341817][ T6288] loop7: detected capacity change from 0 to 512
[   70.350574][ T6288] Cannot find del_set index 0 as target
[   70.353074][ T6286] loop3: detected capacity change from 0 to 2048
[   70.367357][ T6286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.387158][ T6293] loop7: detected capacity change from 0 to 2048
[   70.423062][ T6296] netlink: 16 bytes leftover after parsing attributes in process `syz.6.508'.
[   70.437187][ T6293]  loop7: p1 < > p4
[   70.441520][ T6293] loop7: p4 size 8388608 extends beyond EOD, truncated
[   70.508059][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.688334][ T6312] FAULT_INJECTION: forcing a failure.
[   70.688334][ T6312] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   70.701571][ T6312] CPU: 0 UID: 0 PID: 6312 Comm: syz.0.513 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   70.712179][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   70.722238][ T6312] Call Trace:
[   70.725517][ T6312]  <TASK>
[   70.728520][ T6312]  dump_stack_lvl+0xf2/0x150
[   70.733192][ T6312]  dump_stack+0x15/0x20
[   70.737414][ T6312]  should_fail_ex+0x223/0x230
[   70.742217][ T6312]  should_fail+0xb/0x10
[   70.746423][ T6312]  should_fail_usercopy+0x1a/0x20
[   70.751474][ T6312]  _copy_to_user+0x20/0xa0
[   70.755989][ T6312]  simple_read_from_buffer+0xa0/0x110
[   70.761390][ T6312]  proc_fail_nth_read+0xf9/0x140
[   70.766433][ T6312]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   70.772158][ T6312]  vfs_read+0x1a2/0x700
[   70.776377][ T6312]  ? percpu_counter_add_batch+0xc6/0x140
[   70.782116][ T6312]  ? __fget_files+0x1d4/0x210
[   70.786817][ T6312]  ksys_read+0xeb/0x1b0
[   70.790992][ T6312]  __x64_sys_read+0x42/0x50
[   70.795571][ T6312]  x64_sys_call+0x27d3/0x2d60
[   70.800497][ T6312]  do_syscall_64+0xc9/0x1c0
[   70.805131][ T6312]  ? clear_bhb_loop+0x55/0xb0
[   70.809822][ T6312]  ? clear_bhb_loop+0x55/0xb0
[   70.814511][ T6312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.820464][ T6312] RIP: 0033:0x7f31524fd15c
[   70.824887][ T6312] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[   70.844516][ T6312] RSP: 002b:00007f3151177030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   70.853014][ T6312] RAX: ffffffffffffffda RBX: 00007f31526b5f80 RCX: 00007f31524fd15c
[   70.861040][ T6312] RDX: 000000000000000f RSI: 00007f31511770a0 RDI: 0000000000000009
[   70.869042][ T6312] RBP: 00007f3151177090 R08: 0000000000000000 R09: 0000000000000000
[   70.877019][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.884992][ T6312] R13: 0000000000000000 R14: 00007f31526b5f80 R15: 00007ffcefc7ecb8
[   70.893043][ T6312]  </TASK>
[   70.928169][   T29] kauditd_printk_skb: 274 callbacks suppressed
[   70.928187][   T29] audit: type=1326 audit(1730429459.427:16627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   70.930993][ T6319] loop0: detected capacity change from 0 to 2048
[   70.934429][   T29] audit: type=1326 audit(1730429459.427:16628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   70.987623][   T29] audit: type=1326 audit(1730429459.427:16629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   71.011276][   T29] audit: type=1326 audit(1730429459.427:16630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   71.034915][   T29] audit: type=1326 audit(1730429459.427:16631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   71.058624][   T29] audit: type=1326 audit(1730429459.427:16632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   71.082288][   T29] audit: type=1326 audit(1730429459.427:16633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   71.105895][   T29] audit: type=1326 audit(1730429459.427:16634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   71.129308][   T29] audit: type=1326 audit(1730429459.427:16635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   71.153327][ T6323] SELinux:  policydb version -1506602685 does not match my version range 15-33
[   71.153656][   T29] audit: type=1326 audit(1730429459.457:16636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   71.164779][ T6319]  loop0: p1 < > p4
[   71.191864][ T6323] SELinux: failed to load policy
[   71.197318][ T6319] loop0: p4 size 8388608 extends beyond EOD, truncated
[   71.240132][ T6323] loop7: detected capacity change from 0 to 8192
[   71.331080][ T6341] loop7: detected capacity change from 0 to 512
[   71.351082][ T6341] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.366018][ T6341] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.625546][ T4768] EXT4-fs error (device loop7): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /59/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   71.764019][ T6358] netlink: 40 bytes leftover after parsing attributes in process `syz.6.529'.
[   71.781713][ T6358] tipc: Started in network mode
[   71.786754][ T6358] tipc: Node identity ac1414aa, cluster identity 4711
[   71.797174][ T6358] tipc: New replicast peer: 100.1.1.1
[   71.802710][ T6358] tipc: Enabled bearer <udp:s>, priority 10
[   71.980664][ T6364] loop6: detected capacity change from 0 to 2048
[   72.056332][ T6364]  loop6: p1 < > p4
[   72.061037][ T6364] loop6: p4 size 8388608 extends beyond EOD, truncated
[   72.228807][ T6367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.532'.
[   72.398196][ T6382] sctp: [Deprecated]: syz.0.538 (pid 6382) Use of int in max_burst socket option deprecated.
[   72.398196][ T6382] Use struct sctp_assoc_value instead
[   72.622016][ T6394] loop0: detected capacity change from 0 to 1024
[   72.743681][ T6394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.757486][ T6394] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.915928][ T3393] tipc: Node number set to 2886997162
[   72.927549][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.063145][ T6410] IPv4: Oversized IP packet from 172.20.20.10
[   73.069386][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   73.075537][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   73.082055][ T6410] IPv4: Oversized IP packet from 172.20.20.10
[   73.088246][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   73.094346][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   73.100856][ T6410] IPv4: Oversized IP packet from 172.20.20.10
[   73.106355][ T6412] loop0: detected capacity change from 0 to 2048
[   73.107014][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   73.120637][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   73.127404][ T6410] IPv4: Oversized IP packet from 172.20.20.10
[   73.166502][ T6412]  loop0: p1 < > p4
[   73.171859][ T6412] loop0: p4 size 8388608 extends beyond EOD, truncated
[   74.553670][ T6576] loop6: detected capacity change from 0 to 512
[   74.587908][ T6581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.561'.
[   74.600795][ T6579] loop0: detected capacity change from 0 to 2048
[   74.607365][ T6576] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.559: corrupted in-inode xattr: invalid ea_ino
[   74.650372][ T6576] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.559: couldn't read orphan inode 15 (err -117)
[   74.662652][ T6579]  loop0: p1 < > p4
[   74.669688][ T6579] loop0: p4 size 8388608 extends beyond EOD, truncated
[   74.689988][ T6576] EXT4-fs (loop6): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.972887][ T4698] EXT4-fs (loop6): unmounting filesystem 00000007-0000-0000-0000-000000000000.
[   75.313103][ T6602] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   75.421774][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.6.566'.
[   75.448863][ T6609] loop3: detected capacity change from 0 to 2048
[   75.496640][ T6609]  loop3: p1 < > p4
[   75.501188][ T6609] loop3: p4 size 8388608 extends beyond EOD, truncated
[   75.643018][ T6618] loop3: detected capacity change from 0 to 1024
[   75.649868][ T6618] EXT4-fs: Ignoring removed nomblk_io_submit option
[   75.662184][ T6620] loop0: detected capacity change from 0 to 2048
[   75.670165][ T6618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.704802][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.715161][ T6620]  loop0: p1 < > p4
[   75.719571][ T6620] loop0: p4 size 8388608 extends beyond EOD, truncated
[   75.805818][ T6624] loop3: detected capacity change from 0 to 8192
[   75.841452][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'.
[   75.857509][ T6628] team0 (unregistering): Port device team_slave_0 removed
[   75.867926][ T6628] team0 (unregistering): Port device team_slave_1 removed
[   75.952231][ T6635] FAULT_INJECTION: forcing a failure.
[   75.952231][ T6635] name failslab, interval 1, probability 0, space 0, times 0
[   75.955456][   T29] kauditd_printk_skb: 434 callbacks suppressed
[   75.955513][   T29] audit: type=1326 audit(1730429464.447:17071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31524fe719 code=0x7ffc0000
[   75.964929][ T6635] CPU: 1 UID: 0 PID: 6635 Comm: syz.0.578 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   75.971106][   T29] audit: type=1326 audit(1730429464.447:17072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31524fd0b0 code=0x7ffc0000
[   75.994393][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   75.994410][ T6635] Call Trace:
[   75.994418][ T6635]  <TASK>
[   75.994427][ T6635]  dump_stack_lvl+0xf2/0x150
[   75.994458][ T6635]  dump_stack+0x15/0x20
[   75.994481][ T6635]  should_fail_ex+0x223/0x230
[   76.005328][   T29] audit: type=1326 audit(1730429464.447:17073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f31524fd1ff code=0x7ffc0000
[   76.028467][ T6635]  ? audit_log_start+0x34c/0x6b0
[   76.028507][ T6635]  should_failslab+0x8f/0xb0
[   76.091042][ T6635]  kmem_cache_alloc_noprof+0x4c/0x290
[   76.096545][ T6635]  audit_log_start+0x34c/0x6b0
[   76.101325][ T6635]  audit_seccomp+0x4b/0x130
[   76.105899][ T6635]  __seccomp_filter+0x6fa/0x1180
[   76.110856][ T6635]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   76.116653][ T6635]  ? vfs_write+0x596/0x920
[   76.121106][ T6635]  ? __rcu_read_unlock+0x4e/0x70
[   76.126211][ T6635]  ? __fget_files+0x1d4/0x210
[   76.130959][ T6635]  __secure_computing+0x9f/0x1c0
[   76.135927][ T6635]  syscall_trace_enter+0xd1/0x1f0
[   76.141049][ T6635]  ? fpregs_assert_state_consistent+0x83/0xa0
[   76.147159][ T6635]  do_syscall_64+0xaa/0x1c0
[   76.151706][ T6635]  ? clear_bhb_loop+0x55/0xb0
[   76.156399][ T6635]  ? clear_bhb_loop+0x55/0xb0
[   76.161098][ T6635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.167044][ T6635] RIP: 0033:0x7f31524fe719
[   76.171479][ T6635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.191103][ T6635] RSP: 002b:00007f3151177038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e
[   76.199537][ T6635] RAX: ffffffffffffffda RBX: 00007f31526b5f80 RCX: 00007f31524fe719
[   76.207525][ T6635] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffffffffffffffff
[   76.215596][ T6635] RBP: 00007f3151177090 R08: 0000000000000000 R09: 0000000000000000
[   76.223581][ T6635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   76.231569][ T6635] R13: 0000000000000000 R14: 00007f31526b5f80 R15: 00007ffcefc7ecb8
[   76.239556][ T6635]  </TASK>
[   76.242800][ T6635] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[   76.250592][ T6635] audit: out of memory in audit_log_start
[   76.262804][   T29] audit: type=1326 audit(1730429464.757:17074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f31524fd15c code=0x7ffc0000
[   76.286255][   T29] audit: type=1326 audit(1730429464.757:17075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f31524fd1ff code=0x7ffc0000
[   76.309712][   T29] audit: type=1326 audit(1730429464.757:17076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f31524fd3aa code=0x7ffc0000
[   76.332970][   T29] audit: type=1326 audit(1730429464.757:17077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31524fe719 code=0x7ffc0000
[   76.356506][   T29] audit: type=1326 audit(1730429464.757:17078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31524fe719 code=0x7ffc0000
[   76.440252][ T6645] netlink: 100 bytes leftover after parsing attributes in process `syz.0.583'.
[   76.475091][ T6652] loop3: detected capacity change from 0 to 512
[   76.689366][ T6652] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.585: bad orphan inode 13
[   76.758653][ T6652] ext4_test_bit(bit=12, block=4) = 1
[   76.764042][ T6652] is_bad_inode(inode)=0
[   76.768273][ T6652] NEXT_ORPHAN(inode)=0
[   76.772366][ T6652] max_ino=32
[   76.775834][ T6652] i_nlink=1
[   76.871103][ T6664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.589'.
[   76.893283][ T6652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.913250][ T6652] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm +}[@: Unrecognised inode hash code 20
[   76.924174][ T6652] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm +}[@: Corrupt directory, running e2fsck is recommended
[   77.005978][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.029179][ T6669] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[   77.563214][ T6681] netlink: 100 bytes leftover after parsing attributes in process `syz.6.595'.
[   77.679137][ T6683] loop6: detected capacity change from 0 to 8192
[   77.846298][ T6692] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   77.958878][ T6699] netdevsim netdevsim6: Direct firmware load for  failed with error -2
[   78.184552][ T6710] netlink: 100 bytes leftover after parsing attributes in process `syz.6.606'.
[   78.387919][ T6721] netlink: 40 bytes leftover after parsing attributes in process `syz.6.608'.
[   78.555228][ T6732] loop6: detected capacity change from 0 to 2048
[   78.577697][ T6732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.821917][ T4698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.836789][ T6755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.610'.
[   79.358731][ T6829] loop3: detected capacity change from 0 to 512
[   79.426761][ T6829] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   79.457247][ T6829] EXT4-fs (loop3): orphan cleanup on readonly fs
[   79.463973][ T6829] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   79.479848][ T6829] EXT4-fs (loop3): Cannot turn on quotas: error -22
[   79.486803][ T6829] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #16: comm syz.3.613: corrupted xattr block 31: invalid header
[   79.501637][ T6829] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117)
[   79.513433][ T6829] EXT4-fs (loop3): 1 orphan inode deleted
[   79.520825][ T6829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.552934][ T6829] 
@ÿ: renamed from vlan0 (while UP)
[   79.588617][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.747996][ T6855] loop0: detected capacity change from 0 to 2048
[   79.814146][ T6855]  loop0: p1 < > p4
[   79.825948][ T6855] loop0: p4 size 8388608 extends beyond EOD, truncated
[   80.725682][ T6899] : port 1(erspan0) entered blocking state
[   80.731822][ T6899] : port 1(erspan0) entered disabled state
[   80.738805][ T6899] erspan0: entered allmulticast mode
[   80.744616][ T6899] erspan0: entered promiscuous mode
[   81.168130][   T29] kauditd_printk_skb: 307 callbacks suppressed
[   81.168146][   T29] audit: type=1326 audit(1730429469.667:17386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6922 comm="syz.6.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0caee719 code=0x7ffc0000
[   81.227711][   T29] audit: type=1326 audit(1730429469.697:17387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6922 comm="syz.6.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0caee719 code=0x7ffc0000
[   81.251297][   T29] audit: type=1326 audit(1730429469.707:17388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6922 comm="syz.6.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fac0caee719 code=0x7ffc0000
[   81.274728][   T29] audit: type=1326 audit(1730429469.707:17389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6922 comm="syz.6.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0caee719 code=0x7ffc0000
[   81.298206][   T29] audit: type=1326 audit(1730429469.707:17390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6922 comm="syz.6.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0caee719 code=0x7ffc0000
[   81.321785][   T29] audit: type=1326 audit(1730429469.707:17391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6922 comm="syz.6.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac0caee719 code=0x7ffc0000
[   81.345410][   T29] audit: type=1326 audit(1730429469.707:17392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6922 comm="syz.6.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0caee719 code=0x7ffc0000
[   81.368928][   T29] audit: type=1326 audit(1730429469.707:17393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6922 comm="syz.6.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac0caee719 code=0x7ffc0000
[   81.403567][   T29] audit: type=1326 audit(1730429469.897:17394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6922 comm="syz.6.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0caee719 code=0x7ffc0000
[   81.427084][   T29] audit: type=1326 audit(1730429469.897:17395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6922 comm="syz.6.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0caee719 code=0x7ffc0000
[   81.455510][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.6.627'.
[   81.470011][ T6916] loop3: detected capacity change from 0 to 1024
[   81.593188][ T6916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.640005][ T6940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.630'.
[   81.653292][ T6938] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[   81.659940][ T6938] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   81.667512][ T6938] vhci_hcd vhci_hcd.0: Device attached
[   81.685963][ T6916] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.709137][ T6938] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12)
[   81.715764][ T6938] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   81.723468][ T6938] vhci_hcd vhci_hcd.0: Device attached
[   81.764536][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.782232][ T6945] vhci_hcd: connection closed
[   81.782747][  T388] vhci_hcd: stop threads
[   81.791729][  T388] vhci_hcd: release socket
[   81.796283][  T388] vhci_hcd: disconnect device
[   81.802562][ T6941] vhci_hcd: connection closed
[   81.813297][  T388] vhci_hcd: stop threads
[   81.822474][  T388] vhci_hcd: release socket
[   81.826943][  T388] vhci_hcd: disconnect device
[   81.849288][ T3579] vhci_hcd: vhci_device speed not set
[   81.857025][ T6926] chnl_net:caif_netlink_parms(): no params data found
[   82.083451][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.090554][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.102124][ T6926] bridge_slave_0: entered allmulticast mode
[   82.108538][ T6926] bridge_slave_0: entered promiscuous mode
[   82.115575][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.122676][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.131329][ T6926] bridge_slave_1: entered allmulticast mode
[   82.140350][ T6926] bridge_slave_1: entered promiscuous mode
[   82.160030][ T6926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.172084][ T6926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.196092][ T6926] team0: Port device team_slave_0 added
[   82.202887][ T6926] team0: Port device team_slave_1 added
[   82.221173][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.228334][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.254391][ T6926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.317312][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.324290][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.350260][ T6926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.393279][ T6926] hsr_slave_0: entered promiscuous mode
[   82.412092][ T6926] hsr_slave_1: entered promiscuous mode
[   82.426381][ T6926] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.444257][ T6926] Cannot create hsr debugfs directory
[   82.678097][ T6926] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   82.697810][ T6926] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   82.717850][ T6926] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   82.718997][ T6969] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   82.733848][ T6926] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   82.770969][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.778096][ T6926] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.785535][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.792605][ T6926] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.824693][ T6926] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.837979][ T6926] 8021q: adding VLAN 0 to HW filter on device team0
[   82.883452][ T6973] syz.0.638[6973] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   82.883512][ T6973] syz.0.638[6973] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   82.895247][ T6973] syz.0.638[6973] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   82.939035][ T6926] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.975587][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.639'.
[   83.138390][ T6926] veth0_vlan: entered promiscuous mode
[   83.151667][ T6926] veth1_vlan: entered promiscuous mode
[   83.172162][ T6926] veth0_macvtap: entered promiscuous mode
[   83.180469][ T6926] veth1_macvtap: entered promiscuous mode
[   83.193904][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.204585][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.214512][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.225027][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.235021][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.245528][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.255491][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.265963][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.275778][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.286325][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.307159][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.315906][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.326488][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.336432][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.346984][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.356834][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.367349][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.377186][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.387877][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.397956][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.408508][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.419721][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.427737][ T7003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.644'.
[   83.429433][ T6926] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.445715][ T6926] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.454525][ T6926] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.463248][ T6926] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.480452][ T7003] tipc: Started in network mode
[   83.485457][ T7003] tipc: Node identity ac1414aa, cluster identity 4711
[   83.493276][ T7003] tipc: New replicast peer: 100.1.1.1
[   83.498959][ T7003] tipc: Enabled bearer <udp:s>, priority 10
[   83.536204][ T7006] serio: Serial port ptm0
[   83.588544][ T7008] loop8: detected capacity change from 0 to 8192
[   83.588972][ T7006] syz.3.645[7006] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   83.595483][ T7006] syz.3.645[7006] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   83.607115][ T7006] syz.3.645[7006] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   83.627450][ T7006] netlink: 268 bytes leftover after parsing attributes in process `syz.3.645'.
[   83.723630][ T7015] netdevsim netdevsim8: Direct firmware load for  failed with error -2
[   83.725134][ T7017] syzkaller0: entered allmulticast mode
[   83.776165][ T7017] syzkaller0 (unregistering): left allmulticast mode
[   83.838125][ T7019] netlink: 20 bytes leftover after parsing attributes in process `syz.8.650'.
[   83.869952][ T7021] loop8: detected capacity change from 0 to 1024
[   83.888135][ T7021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.900321][ T7021] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.932711][ T7021] syz.8.651[7021] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   83.932787][ T7021] syz.8.651[7021] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   83.987078][ T7021] syz.8.651[7021] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   84.191683][ T6926] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.522304][ T7033] netdevsim netdevsim8: Direct firmware load for  failed with error -2
[   84.635921][ T3630] tipc: Node number set to 2886997162
[   84.890930][ T7035] loop8: detected capacity change from 0 to 256
[   84.911952][ T7044] serio: Serial port ptm0
[   84.935717][ T7035] netlink: 116 bytes leftover after parsing attributes in process `syz.8.655'.
[   84.963970][ T7044] syz.3.657[7044] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   85.002720][ T7050] loop0: detected capacity change from 0 to 8192
[   85.023531][ T7053] x_tables: duplicate underflow at hook 2
[   85.644134][ T7081] netlink: 100 bytes leftover after parsing attributes in process `syz.6.664'.
[   85.868049][ T7094] FAULT_INJECTION: forcing a failure.
[   85.868049][ T7094] name failslab, interval 1, probability 0, space 0, times 0
[   85.880786][ T7094] CPU: 0 UID: 0 PID: 7094 Comm: syz.6.666 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   85.891416][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   85.901497][ T7094] Call Trace:
[   85.904829][ T7094]  <TASK>
[   85.907822][ T7094]  dump_stack_lvl+0xf2/0x150
[   85.912443][ T7094]  dump_stack+0x15/0x20
[   85.916788][ T7094]  should_fail_ex+0x223/0x230
[   85.921501][ T7094]  ? __alloc_skb+0x10b/0x310
[   85.926136][ T7094]  should_failslab+0x8f/0xb0
[   85.930841][ T7094]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[   85.936822][ T7094]  __alloc_skb+0x10b/0x310
[   85.941306][ T7094]  audit_log_start+0x368/0x6b0
[   85.946094][ T7094]  audit_seccomp+0x4b/0x130
[   85.950648][ T7094]  __seccomp_filter+0x6fa/0x1180
[   85.955732][ T7094]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   85.961518][ T7094]  ? vfs_write+0x596/0x920
[   85.966009][ T7094]  ? __rcu_read_unlock+0x4e/0x70
[   85.970977][ T7094]  __secure_computing+0x9f/0x1c0
[   85.975972][ T7094]  syscall_trace_enter+0xd1/0x1f0
[   85.981091][ T7094]  do_syscall_64+0xaa/0x1c0
[   85.985734][ T7094]  ? clear_bhb_loop+0x55/0xb0
[   85.990518][ T7094]  ? clear_bhb_loop+0x55/0xb0
[   85.995229][ T7094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.001216][ T7094] RIP: 0033:0x7fac0caee719
[   86.005641][ T7094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.025361][ T7094] RSP: 002b:00007fac0b761038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   86.033802][ T7094] RAX: ffffffffffffffda RBX: 00007fac0cca5f80 RCX: 00007fac0caee719
[   86.041788][ T7094] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000020000440
[   86.049770][ T7094] RBP: 00007fac0b761090 R08: 0000000000000000 R09: 0000000000000000
[   86.057771][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.065760][ T7094] R13: 0000000000000000 R14: 00007fac0cca5f80 R15: 00007fffd3afb648
[   86.073756][ T7094]  </TASK>
[   86.166592][ T7143] loop0: detected capacity change from 0 to 128
[   86.205006][   T29] kauditd_printk_skb: 173 callbacks suppressed
[   86.205025][   T29] audit: type=1326 audit(1730429474.697:17567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   86.266292][   T29] audit: type=1326 audit(1730429474.757:17568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   86.289826][   T29] audit: type=1326 audit(1730429474.757:17569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   86.295550][ T7154] loop6: detected capacity change from 0 to 1024
[   86.313591][   T29] audit: type=1326 audit(1730429474.757:17570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   86.344703][ T7154] EXT4-fs: Ignoring removed orlov option
[   86.351251][ T7143] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   86.363568][ T7154] EXT4-fs: Ignoring removed mblk_io_submit option
[   86.370123][ T7143] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.391146][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.411264][ T7157] loop3: detected capacity change from 0 to 8192
[   86.429980][ T7159] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[   86.431903][ T7154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.436523][ T7159] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   86.436614][ T7159] vhci_hcd vhci_hcd.0: Device attached
[   86.475954][ T7159] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12)
[   86.482682][ T7159] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   86.490548][ T7159] vhci_hcd vhci_hcd.0: Device attached
[   86.497210][ T7160] vhci_hcd: connection closed
[   86.497304][ T7164] vhci_hcd: connection closed
[   86.502177][  T582] vhci_hcd: stop threads
[   86.511163][  T582] vhci_hcd: release socket
[   86.515621][  T582] vhci_hcd: disconnect device
[   86.521818][  T582] vhci_hcd: stop threads
[   86.526187][  T582] vhci_hcd: release socket
[   86.530649][  T582] vhci_hcd: disconnect device
[   86.557014][ T4698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.589023][ T7167] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[   86.647869][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.6.673'.
[   86.722619][ T7172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.676'.
[   86.723322][   T29] audit: type=1326 audit(1730429475.217:17571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   86.755201][   T29] audit: type=1326 audit(1730429475.217:17572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   86.778684][   T29] audit: type=1326 audit(1730429475.217:17573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   86.802336][   T29] audit: type=1326 audit(1730429475.217:17574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   86.826030][   T29] audit: type=1326 audit(1730429475.217:17575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   86.849468][   T29] audit: type=1326 audit(1730429475.217:17576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.3.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8fe6e719 code=0x7ffc0000
[   87.009547][ T7174] chnl_net:caif_netlink_parms(): no params data found
[   87.044838][ T7206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.680'.
[   87.059873][ T4768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.078511][  T582] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.090475][ T7206] tipc: Started in network mode
[   87.095433][ T7206] tipc: Node identity ac1414aa, cluster identity 4711
[   87.104923][ T7206] tipc: New replicast peer: 100.1.1.1
[   87.110390][ T7206] tipc: Enabled bearer <udp:s>, priority 10
[   87.116570][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.123741][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.131138][ T7174] bridge_slave_0: entered allmulticast mode
[   87.139329][ T7174] bridge_slave_0: entered promiscuous mode
[   87.154262][  T582] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.172749][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.180093][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.191714][ T7174] bridge_slave_1: entered allmulticast mode
[   87.198901][ T7174] bridge_slave_1: entered promiscuous mode
[   87.219978][ T7227] loop0: detected capacity change from 0 to 2048
[   87.229767][  T582] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.243195][ T7174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.254741][ T7174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.266932][ T7227]  loop0: p1 < > p4
[   87.271427][ T7227] loop0: p4 size 8388608 extends beyond EOD, truncated
[   87.290633][  T582] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.318662][ T7174] team0: Port device team_slave_0 added
[   87.329261][ T7174] team0: Port device team_slave_1 added
[   87.335738][ T7243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.682'.
[   87.364668][ T7243] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   87.372449][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.379461][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.405505][ T7174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.425703][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.432706][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.458671][ T7174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.494656][ T7254] loop6: detected capacity change from 0 to 2048
[   87.521070][  T582] bridge_slave_1: left allmulticast mode
[   87.526817][  T582] bridge_slave_1: left promiscuous mode
[   87.532659][  T582] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.542059][ T7254]  loop6: p1 < > p4
[   87.546720][  T582] bridge_slave_0: left allmulticast mode
[   87.546748][ T7254] loop6: p4 size 8388608 extends beyond EOD, truncated
[   87.552392][  T582] bridge_slave_0: left promiscuous mode
[   87.565124][  T582] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.650446][ T7274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.687'.
[   87.674432][ T7277] netlink: 100 bytes leftover after parsing attributes in process `syz.6.688'.
[   87.751123][  T582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.762021][  T582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.772854][  T582] bond0 (unregistering): Released all slaves
[   87.896566][ T7174] hsr_slave_0: entered promiscuous mode
[   87.905684][ T7174] hsr_slave_1: entered promiscuous mode
[   87.920808][ T7320] loop0: detected capacity change from 0 to 8192
[   87.927491][ T7174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.935699][ T7174] Cannot create hsr debugfs directory
[   87.941340][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.689'.
[   87.952751][ T7282] geneve2: entered promiscuous mode
[   87.963845][ T7291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.689'.
[   87.966473][ T7320]  loop0: p2 p3 p4
[   87.979541][ T7320] loop0: p3 start 1048607 is beyond EOD, truncated
[   87.986101][ T7320] loop0: p4 size 65536 extends beyond EOD, truncated
[   88.000942][  T582] hsr_slave_0: left promiscuous mode
[   88.014289][  T582] hsr_slave_1: left promiscuous mode
[   88.020366][  T582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.028216][  T582] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.030907][ T7332] bpf_get_probe_write_proto: 2 callbacks suppressed
[   88.030924][ T7332] syz.6.695[7332] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   88.044676][  T582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.045698][ T7332] syz.6.695[7332] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   88.056170][  T582] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.063566][ T7332] syz.6.695[7332] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   88.084194][  T582] veth1_macvtap: left promiscuous mode
[   88.101167][  T582] veth0_macvtap: left promiscuous mode
[   88.106747][  T582] veth1_vlan: left promiscuous mode
[   88.111999][  T582] veth0_vlan: left promiscuous mode
[   88.127469][ T3630] tipc: Node number set to 2886997162
[   88.201978][  T582] team0 (unregistering): Port device team_slave_1 removed
[   88.212684][  T582] team0 (unregistering): Port device team_slave_0 removed
[   88.284512][ T7337] netlink: 100 bytes leftover after parsing attributes in process `syz.6.696'.
[   88.333560][ T7174] netdevsim netdevsim9 netdevsim0: renamed from eth0
[   88.345375][ T7174] netdevsim netdevsim9 netdevsim1: renamed from eth1
[   88.355654][ T7174] netdevsim netdevsim9 netdevsim2: renamed from eth2
[   88.368843][ T7174] netdevsim netdevsim9 netdevsim3: renamed from eth3
[   88.430358][ T7349] loop0: detected capacity change from 0 to 1024
[   88.445618][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.450050][ T7349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   88.457640][ T7174] 8021q: adding VLAN 0 to HW filter on device team0
[   88.469179][ T7349] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   88.482620][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.489732][ T5289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.497280][ T7349] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   88.506204][ T7349] EXT4-fs (loop0): orphan cleanup on readonly fs
[   88.513067][ T7349] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.702: Invalid inode table block 0 in block_group 0
[   88.532421][ T7349] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem
[   88.543963][ T7349] EXT4-fs error (device loop0): ext4_quota_write:7251: inode #3: comm syz.0.702: mark_inode_dirty error
[   88.571230][ T7354] loop8: detected capacity change from 0 to 1024
[   88.575199][ T7174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.588120][ T7174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.606135][ T7349] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.702: Failed to acquire dquot type 0
[   88.617826][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.620994][ T7354] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.624882][ T5289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.645186][ T7349] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.702: Invalid inode table block 0 in block_group 0
[   88.660089][ T7349] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem
[   88.670053][ T7349] EXT4-fs error (device loop0): ext4_ext_truncate:4457: inode #15: comm syz.0.702: mark_inode_dirty error
[   88.686639][ T7349] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.702: Invalid inode table block 0 in block_group 0
[   88.704021][ T7349] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem
[   88.706454][ T7354] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[   88.715680][ T7349] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   88.721669][ T7354] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[   88.768176][ T7349] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.702: Invalid inode table block 0 in block_group 0
[   88.783551][ T7349] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem
[   88.791198][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.801073][ T7349] EXT4-fs error (device loop0): ext4_truncate:4208: inode #15: comm syz.0.702: mark_inode_dirty error
[   88.801976][ T7375] netlink: 'syz.6.710': attribute type 2 has an invalid length.
[   88.818495][ T7349] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   88.819907][ T7375] netlink: 'syz.6.710': attribute type 1 has an invalid length.
[   88.830362][ T7349] EXT4-fs (loop0): 1 truncate cleaned up
[   88.842717][ T7349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   88.848333][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.710'.
[   88.865999][ T7354] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   88.903672][ T7354] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28
[   88.903759][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.916305][ T7354] EXT4-fs (loop8): This should not happen!! Data will be lost
[   88.916305][ T7354] 
[   88.916325][ T7354] EXT4-fs (loop8): Total free blocks count 0
[   88.941313][ T7354] EXT4-fs (loop8): Free/Dirty block details
[   88.947455][ T7354] EXT4-fs (loop8): free_blocks=68451041280
[   88.953271][ T7354] EXT4-fs (loop8): dirty_blocks=16
[   88.958447][ T7354] EXT4-fs (loop8): Block reservation details
[   88.964444][ T7354] EXT4-fs (loop8): i_reserved_data_blocks=1
[   89.058403][ T7393] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   89.076720][ T7174] veth0_vlan: entered promiscuous mode
[   89.090366][ T7174] veth1_vlan: entered promiscuous mode
[   89.107767][ T7174] veth0_macvtap: entered promiscuous mode
[   89.120885][ T7174] veth1_macvtap: entered promiscuous mode
[   89.134307][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.144927][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.154787][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.165281][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.175206][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.185785][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.195705][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.206332][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.216261][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.226826][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.238833][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.247261][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.257829][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.267764][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.278236][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.288123][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.298628][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.308640][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.319199][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.329116][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.339655][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.350304][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.380300][ T7174] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.389197][ T7174] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.397972][ T7174] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.406774][ T7174] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.451929][ T6926] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.715433][ T7430] loop9: detected capacity change from 0 to 2048
[   89.730440][ T7432] serio: Serial port ptm0
[   89.746622][ T7430]  loop9: p1 < > p4
[   89.753251][ T7430] loop9: p4 size 8388608 extends beyond EOD, truncated
[   89.933077][ T7439] syz.8.725[7439] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   89.933289][ T7439] syz.8.725[7439] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   89.977574][ T7441] loop9: detected capacity change from 0 to 512
[   90.018853][ T7439] syz.8.725[7439] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   90.083127][ T7441] journal_path: Lookup failure for './file0'
[   90.100483][ T7441] EXT4-fs: error: could not find journal device path
[   90.498055][ T7476] netem: change failed
[   90.544188][ T7482] syzkaller0: entered allmulticast mode
[   90.589477][ T7482] syzkaller0 (unregistering): left allmulticast mode
[   90.773637][ T7504] loop0: detected capacity change from 0 to 2048
[   90.828551][ T7504]  loop0: p1 < > p4
[   90.835755][ T7504] loop0: p4 size 8388608 extends beyond EOD, truncated
[   90.993888][ T7526] syzkaller0: entered allmulticast mode
[   91.004285][ T7526] syzkaller0 (unregistering): left allmulticast mode
[   91.011447][ T7528] FAULT_INJECTION: forcing a failure.
[   91.011447][ T7528] name failslab, interval 1, probability 0, space 0, times 0
[   91.024160][ T7528] CPU: 0 UID: 0 PID: 7528 Comm: syz.8.765 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   91.034821][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   91.044895][ T7528] Call Trace:
[   91.048185][ T7528]  <TASK>
[   91.051366][ T7528]  dump_stack_lvl+0xf2/0x150
[   91.055987][ T7528]  dump_stack+0x15/0x20
[   91.060169][ T7528]  should_fail_ex+0x223/0x230
[   91.064912][ T7528]  ? __alloc_skb+0x10b/0x310
[   91.069524][ T7528]  should_failslab+0x8f/0xb0
[   91.074128][ T7528]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[   91.080066][ T7528]  __alloc_skb+0x10b/0x310
[   91.084557][ T7528]  netlink_alloc_large_skb+0xad/0xe0
[   91.089925][ T7528]  netlink_sendmsg+0x3b4/0x6e0
[   91.094709][ T7528]  ? __pfx_netlink_sendmsg+0x10/0x10
[   91.100041][ T7528]  __sock_sendmsg+0x140/0x180
[   91.104752][ T7528]  ____sys_sendmsg+0x312/0x410
[   91.109701][ T7528]  __sys_sendmsg+0x1d9/0x270
[   91.114344][ T7528]  __x64_sys_sendmsg+0x46/0x50
[   91.119137][ T7528]  x64_sys_call+0x2689/0x2d60
[   91.123830][ T7528]  do_syscall_64+0xc9/0x1c0
[   91.128381][ T7528]  ? clear_bhb_loop+0x55/0xb0
[   91.133262][ T7528]  ? clear_bhb_loop+0x55/0xb0
[   91.137991][ T7528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.143905][ T7528] RIP: 0033:0x7f439128e719
[   91.148323][ T7528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.167940][ T7528] RSP: 002b:00007f438ff07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   91.176359][ T7528] RAX: ffffffffffffffda RBX: 00007f4391445f80 RCX: 00007f439128e719
[   91.184420][ T7528] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006
[   91.192457][ T7528] RBP: 00007f438ff07090 R08: 0000000000000000 R09: 0000000000000000
[   91.200500][ T7528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.208476][ T7528] R13: 0000000000000000 R14: 00007f4391445f80 R15: 00007ffce4d37448
[   91.216541][ T7528]  </TASK>
[   91.241157][   T29] kauditd_printk_skb: 301 callbacks suppressed
[   91.241176][   T29] audit: type=1326 audit(1730429479.737:17876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.8.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439128e719 code=0x7ffc0000
[   91.273222][   T29] audit: type=1326 audit(1730429479.737:17877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.8.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439128e719 code=0x7ffc0000
[   91.296297][ T7535] loop8: detected capacity change from 0 to 2048
[   91.297008][   T29] audit: type=1326 audit(1730429479.737:17878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.8.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f439128e719 code=0x7ffc0000
[   91.306565][ T7536] syz.9.768[7536] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   91.326815][   T29] audit: type=1326 audit(1730429479.737:17879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.8.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439128e719 code=0x7ffc0000
[   91.327234][ T7536] syz.9.768[7536] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   91.338169][   T29] audit: type=1326 audit(1730429479.737:17880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.8.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439128e719 code=0x7ffc0000
[   91.417182][ T7535]  loop8: p1 < > p4
[   91.418399][ T7536] loop9: detected capacity change from 0 to 512
[   91.426187][ T7535] loop8: p4 size 8388608 extends beyond EOD, truncated
[   91.427642][ T7536] EXT4-fs: Ignoring removed nomblk_io_submit option
[   91.445909][ T7536] EXT4-fs (loop9): orphan cleanup on readonly fs
[   91.466480][ T7536] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.768: bg 0: block 248: padding at end of block bitmap is not set
[   91.485521][ T7536] Quota error (device loop9): write_blk: dquota write failed
[   91.493047][ T7536] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[   91.503155][ T7536] EXT4-fs error (device loop9): ext4_acquire_dquot:6879: comm syz.9.768: Failed to acquire dquot type 1
[   91.515790][ T7550] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   91.526782][ T7536] EXT4-fs (loop9): 1 truncate cleaned up
[   91.541236][ T7536] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   91.554413][ T7536] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.576048][ T7552] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   91.584325][ T7552] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   91.668977][ T7567] loop6: detected capacity change from 0 to 512
[   91.688842][ T7567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.701599][ T7567] ext4 filesystem being mounted at /138/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   91.703843][ T7572] __nla_validate_parse: 6 callbacks suppressed
[   91.703859][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.783'.
[   91.713459][ T7567] FAULT_INJECTION: forcing a failure.
[   91.713459][ T7567] name failslab, interval 1, probability 0, space 0, times 0
[   91.740565][ T7567] CPU: 1 UID: 0 PID: 7567 Comm: syz.6.782 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   91.751187][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   91.761377][ T7567] Call Trace:
[   91.764674][ T7567]  <TASK>
[   91.767624][ T7567]  dump_stack_lvl+0xf2/0x150
[   91.772291][ T7567]  dump_stack+0x15/0x20
[   91.776548][ T7567]  should_fail_ex+0x223/0x230
[   91.781271][ T7567]  ? sidtab_sid2str_get+0xb8/0x140
[   91.786472][ T7567]  should_failslab+0x8f/0xb0
[   91.791181][ T7567]  __kmalloc_node_track_caller_noprof+0xa6/0x380
[   91.797629][ T7567]  kmemdup_noprof+0x2a/0x60
[   91.802297][ T7567]  sidtab_sid2str_get+0xb8/0x140
[   91.807354][ T7567]  security_sid_to_context_core+0x1eb/0x2f0
[   91.813382][ T7567]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   91.819459][ T7567]  security_sid_to_context+0x27/0x30
[   91.824788][ T7567]  avc_audit_post_callback+0x10d/0x530
[   91.830342][ T7567]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   91.836443][ T7567]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   91.842453][ T7567]  common_lsm_audit+0x7cc/0xfc0
[   91.847422][ T7567]  ? avc_perm_nonode+0xcd/0xe0
[   91.852218][ T7567]  slow_avc_audit+0xf9/0x140
[   91.856943][ T7567]  avc_has_perm+0x129/0x160
[   91.861493][ T7567]  may_create+0x25d/0x300
[   91.865870][ T7567]  selinux_inode_mknod+0xc0/0xd0
[   91.870908][ T7567]  security_inode_mknod+0x8b/0xd0
[   91.876071][ T7567]  vfs_mknod+0x28b/0x310
[   91.880437][ T7567]  unix_bind+0x2de/0x870
[   91.884811][ T7567]  __sys_bind+0x14f/0x1c0
[   91.889227][ T7567]  __x64_sys_bind+0x41/0x50
[   91.893360][ T7580] loop9: detected capacity change from 0 to 2048
[   91.893750][ T7567]  x64_sys_call+0x201c/0x2d60
[   91.904802][ T7567]  do_syscall_64+0xc9/0x1c0
[   91.909332][ T7567]  ? clear_bhb_loop+0x55/0xb0
[   91.914117][ T7567]  ? clear_bhb_loop+0x55/0xb0
[   91.918894][ T7567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.924847][ T7567] RIP: 0033:0x7fac0caee719
[   91.929311][ T7567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.949013][ T7567] RSP: 002b:00007fac0b761038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[   91.957461][ T7567] RAX: ffffffffffffffda RBX: 00007fac0cca5f80 RCX: 00007fac0caee719
[   91.965456][ T7567] RDX: 000000000000006e RSI: 0000000020000080 RDI: 0000000000000005
[   91.973474][ T7567] RBP: 00007fac0b761090 R08: 0000000000000000 R09: 0000000000000000
[   91.981533][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   91.989577][ T7567] R13: 0000000000000000 R14: 00007fac0cca5f80 R15: 00007fffd3afb648
[   91.997583][ T7567]  </TASK>
[   92.001033][   T29] audit: type=1400 audit(1730429480.207:17881): avc:  denied  { create } for  pid=7566 comm="syz.6.782" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tsid=153 tclass=sock_file permissive=1
[   92.023465][ T4698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.069363][ T7580]  loop9: p1 < > p4
[   92.079564][ T7580] loop9: p4 size 8388608 extends beyond EOD, truncated
[   92.152731][   T29] audit: type=1326 audit(1730429480.647:17882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.9.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f1dde719 code=0x7ffc0000
[   92.183400][   T29] audit: type=1326 audit(1730429480.647:17883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.9.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f1dde719 code=0x7ffc0000
[   92.425460][ T7611] loop6: detected capacity change from 0 to 8192
[   92.472736][ T7615] loop9: detected capacity change from 0 to 2048
[   92.512302][ T7615] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.800: bad orphan inode 8192
[   92.523183][ T7615] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.539193][ T7615] EXT4-fs warning (device loop9): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[   92.754413][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.811222][ T7637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.809'.
[   92.823942][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.811'.
[   93.008003][ T7677] FAULT_INJECTION: forcing a failure.
[   93.008003][ T7677] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   93.021321][ T7677] CPU: 1 UID: 0 PID: 7677 Comm: syz.6.818 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   93.032021][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   93.042182][ T7677] Call Trace:
[   93.045478][ T7677]  <TASK>
[   93.048502][ T7677]  dump_stack_lvl+0xf2/0x150
[   93.053202][ T7677]  dump_stack+0x15/0x20
[   93.057383][ T7677]  should_fail_ex+0x223/0x230
[   93.062104][ T7677]  should_fail+0xb/0x10
[   93.066384][ T7677]  should_fail_usercopy+0x1a/0x20
[   93.071508][ T7677]  _copy_to_user+0x20/0xa0
[   93.076036][ T7677]  simple_read_from_buffer+0xa0/0x110
[   93.081439][ T7677]  proc_fail_nth_read+0xf9/0x140
[   93.086407][ T7677]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   93.091979][ T7677]  vfs_read+0x1a2/0x700
[   93.096271][ T7677]  ? __fget_files+0x1d4/0x210
[   93.101000][ T7677]  ksys_read+0xeb/0x1b0
[   93.105205][ T7677]  __x64_sys_read+0x42/0x50
[   93.109812][ T7677]  x64_sys_call+0x27d3/0x2d60
[   93.114525][ T7677]  do_syscall_64+0xc9/0x1c0
[   93.119071][ T7677]  ? clear_bhb_loop+0x55/0xb0
[   93.123783][ T7677]  ? clear_bhb_loop+0x55/0xb0
[   93.128557][ T7677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.134518][ T7677] RIP: 0033:0x7fac0caed15c
[   93.138949][ T7677] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[   93.158621][ T7677] RSP: 002b:00007fac0b761030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   93.167077][ T7677] RAX: ffffffffffffffda RBX: 00007fac0cca5f80 RCX: 00007fac0caed15c
[   93.175165][ T7677] RDX: 000000000000000f RSI: 00007fac0b7610a0 RDI: 0000000000000004
[   93.183197][ T7677] RBP: 00007fac0b761090 R08: 0000000000000000 R09: 0000000000000000
[   93.191192][ T7677] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[   93.199228][ T7677] R13: 0000000000000000 R14: 00007fac0cca5f80 R15: 00007fffd3afb648
[   93.207230][ T7677]  </TASK>
[   93.600673][ T7777] netlink: 40 bytes leftover after parsing attributes in process `syz.6.828'.
[   93.611542][ T7777] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   93.653769][ T7785] sctp: [Deprecated]: syz.3.830 (pid 7785) Use of int in maxseg socket option.
[   93.653769][ T7785] Use struct sctp_assoc_value instead
[   93.699541][ T7785] loop3: detected capacity change from 0 to 512
[   93.771522][ T7785] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[   93.801755][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.835'.
[   94.053910][ T7865] netlink: 40 bytes leftover after parsing attributes in process `syz.6.841'.
[   94.064892][ T7865] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   94.480118][ T7945] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   94.573775][ T7958] netlink: 116 bytes leftover after parsing attributes in process `syz.6.854'.
[   94.665206][ T7976] netlink: 100 bytes leftover after parsing attributes in process `syz.0.857'.
[   94.746915][ T7986] netlink: 100 bytes leftover after parsing attributes in process `syz.9.858'.
[   94.847288][ T8005] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[   94.853830][ T8005] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   94.861815][ T8005] vhci_hcd vhci_hcd.0: Device attached
[   94.869112][ T8005] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[   94.875810][ T8005] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   94.883602][ T8005] vhci_hcd vhci_hcd.0: Device attached
[   94.891424][ T8016] vhci_hcd: connection closed
[   94.891569][   T57] vhci_hcd: stop threads
[   94.900656][   T57] vhci_hcd: release socket
[   94.905084][   T57] vhci_hcd: disconnect device
[   94.909887][ T8008] vhci_hcd: connection closed
[   94.917706][ T8024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.867'.
[   94.937410][   T57] vhci_hcd: stop threads
[   94.941743][   T57] vhci_hcd: release socket
[   94.946236][   T57] vhci_hcd: disconnect device
[   95.009324][ T8032] serio: Serial port ptm1
[   95.047983][ T8030] loop8: detected capacity change from 0 to 8192
[   95.062988][ T8032] syz.9.870[8032] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.063063][ T8032] syz.9.870[8032] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.075259][ T8032] syz.9.870[8032] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.295996][ T8045] syz.8.874[8045] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.332329][ T8044] loop9: detected capacity change from 0 to 8192
[   95.335951][ T8045] syz.8.874[8045] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.352013][ T8045] syz.8.874[8045] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.415345][ T8049] team0: Device ipvlan1 failed to register rx_handler
[   95.494075][ T8058] loop9: detected capacity change from 0 to 2048
[   95.507768][ T8058] ==================================================================
[   95.511447][ T8059] loop6: detected capacity change from 0 to 512
[   95.515848][ T8058] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760
[   95.515888][ T8058] 
[   95.515928][ T8058] race at unknown origin, with assert no writes to 0xffff8881084ea168 of 4 bytes by task 8058 on cpu 0:
[   95.542827][ T8058]  dequeue_entities+0x6df/0x760
[   95.547688][ T8058]  pick_next_task_fair+0x7d/0x410
[   95.552720][ T8058]  __schedule+0x284/0x940
[   95.557074][ T8058]  schedule+0x55/0xc0
[   95.561079][ T8058]  schedule_timeout+0x55/0x2c0
[   95.565860][ T8058]  wait_for_common+0xfb/0x1c0
[   95.570564][ T8058]  wait_for_completion_killable+0x18/0x40
[   95.576293][ T8058]  __kthread_create_on_node+0x1ae/0x230
[   95.581838][ T8058]  kthread_create_on_node+0x8a/0xc0
[   95.587045][ T8058]  ext4_register_li_request+0x40b/0x660
[   95.592600][ T8058]  ext4_fill_super+0x352e/0x3a10
[   95.597543][ T8058]  get_tree_bdev+0x256/0x2e0
[   95.602163][ T8058]  ext4_get_tree+0x1c/0x30
[   95.606584][ T8058]  vfs_get_tree+0x56/0x1e0
[   95.611011][ T8058]  do_new_mount+0x227/0x690
[   95.615523][ T8058]  path_mount+0x49b/0xb30
[   95.619858][ T8058]  __se_sys_mount+0x27c/0x2d0
[   95.624657][ T8058]  __x64_sys_mount+0x67/0x80
[   95.629257][ T8058]  x64_sys_call+0x203e/0x2d60
[   95.633937][ T8058]  do_syscall_64+0xc9/0x1c0
[   95.638440][ T8058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.644341][ T8058] 
[   95.646682][ T8058] value changed: 0x00000000 -> 0x00000001
[   95.652412][ T8058] 
[   95.654728][ T8058] Reported by Kernel Concurrency Sanitizer on:
[   95.660877][ T8058] CPU: 0 UID: 0 PID: 8058 Comm: syz.9.881 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0
[   95.671462][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   95.681514][ T8058] ==================================================================
[   95.690083][ T8059] journal_path: Lookup failure for './file0'
[   95.696298][ T8059] EXT4-fs: error: could not find journal device path
[   95.696605][ T8058] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.881: bad orphan inode 8192
[   95.715374][ T8058] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.731751][ T8058] EXT4-fs warning (device loop9): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[   95.915924][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.