last executing test programs:

16m22.230572044s ago: executing program 3 (id=75):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mq_notify(0xffffffffffffffff, 0x0)

16m22.130934308s ago: executing program 3 (id=78):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r2, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x68c5}, 0x80)

16m21.871617949s ago: executing program 3 (id=81):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000080000b7030000000000008500c98a170c81c098cab1ee8cf0fd9ca400"/47], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000000000006911ba000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffff8001}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1, 0x3523, 0x4)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

16m21.786666173s ago: executing program 3 (id=84):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x70bd26, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x0, 0x5}, {0x4, 0xfff8}}}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x3)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x1049000, 0x0, 0x0, 0x0, &(0x7f0000000100))
mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9)
r7 = syz_io_uring_setup(0x20c5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x200004}, &(0x7f0000000600), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_FILES2(r7, 0xd, &(0x7f0000000740)={0x1000000000000059, 0x0, 0x0, &(0x7f0000000200)=[{0xffffffffffffffff}], &(0x7f0000000240)=[0x0, 0x4]}, 0x20)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e229dc340125fb5eacf6c582af5e1ca7a8c7f30278267acde4c74a68c5d22a0c032efe876650000000000000005285930d07d56559c21ec199b3c20f826391793904927d6f5afb89e9556f17e6841ce8e2ecbe61617d430a4a375c95d37f789b989412df3da18182b0561b7ab2ac3d68ecb585d419ef202bda1b4b3e2f1601097faaad034cd1c0aef6f2d5ece066d21331a309c2c0557dffd644dbb3730a918f73a14aa34f53d215a430768b1d106c4a49d31b2606b25a8e7506afb923dfe7d2f3cfe12c91ca2bb9f59e445825c9ac3da5e08b45dd331b58a0b566e101edb490a2da8ea2f5c0fc235a2d7240f01f36ca91a2c6b7c988fac1213cddf6be87612d92aebb60f8733e43626de2fe87841a7c680fb57d674ecae815a76eb54e99f67d2924f532e3e87fd3c546518b8609b89f960b225cc5a720a754687169cbaad6a085277b768375541", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780001"], 0x0)
syz_emit_ethernet(0x38, &(0x7f0000000580)={@remote, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xff}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xff, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c4}, 0x4040c81)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0)
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nodioread_nolock}, {@user_xattr}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$eJzs28tvG0UYAPBv10nfJaGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmiHjkBRyT+Ak5wQcAJxBVuHBBShXqhcECL1t5t3cQOdmzXLf79JMczu5Od+XZ37NkdbwADayz/k0Rsi4ifI2Kklr2xwFjt7eqV87N/XTk/m0SWvfpHUi3355Xzs2XRJGIof99aZMbTiPSDJPY0qHfx7LmTM/Pzc2eK/OTSqbcmF8+ee+rEqZnjc8fnTk8fOnTwwNSzz0w/3ZU4t+dt3f3uwt5dh1+/9PLskUtvfPdF3v5txfr6OGpGO65zLMZu3Jd1Hu1467eW7XXpZKiPDaEtlah12uFq/x+JSlw/eCPx0vt9bRzQU1mWZRtXLa2UieWsmU1N1wC3jST63QKgP8ov+vz6t3zdxOFH311+vnYBlMd9tXjV1gxFWpQZXnF9201jEXFk+e9P8lc0vA8BANBdX+Xjnycbjf/SuKeu3B3F3NBoRNwZETsi4q6I2BkRd0dUy94bEfe1Wf/Yivzq8c+Pm9cVWIvy8d9zxdzWjeO/cvQXo5Uit70a/3By7MT83P5in4zH8MY8P7VGHV+/+NNHzdbVj//yV15/ORYs2vH70IobdEdnlmY6ibne5fcidg81ij+5NneVv++KiN3r2H6+z048/vneZuv/O/41dGGeKfss4rHa8V+OFfGXkrXnJyc3xfzc/snyrFjt+x8uvtKs/o7i74L8+G9peP5fi380qZ+vXWy/jou/fNj0mma95/+G5LVqekOx7J2ZpaUzUxEbkuXVy6ev/2+ZL8vn8Y/va9z/d0T882nxf3siIj+J74+IByLiwaLtD0XEwxGxb434v33hkTfXH39v5fEfbev4t5+onPzmy2b1t3b8D1ZT48WSVj7/Wm1gJ/sOAAAAbhdp9TfwSTpxLZ2mExO13/DvjC3p/MLi0hPHFt4+fbT2W/nRGE7LO10jdfdDp4p7w2V+ekX+QPW+cZZl2eZqfmJ2Yb5Xc+pAa7Y26f+53yr9bh3Qc23NozV7og24LXleEwaX/g+Da6juiV9gsPj+h8HVqP9fiLjah6YAN5nvfxhc+j8MLv0fBpf+DwOpk+f610rsONyrLf/fEpWebPnXjyN62/hI+77r1p9Ib41m1BIbI6LVwhfiJjVsud+fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//r5Xn3g==")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x3, [<r8=>0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r8, @in={{0x2, 0x4e20, @empty}}, 0x8, 0x5}, &(0x7f0000000000)=0x90)

16m21.413311969s ago: executing program 3 (id=86):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x4, 0x2b00})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r1}, 0x14)
syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0)

16m21.187543158s ago: executing program 3 (id=92):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="88"], 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7}, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r1, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = openat(r1, &(0x7f0000000040)='./file2\x00', 0x143842, 0xe3)
read$eventfd(r2, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x4e24, 0x1000000, @loopback, 0x7}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)

16m21.172079869s ago: executing program 32 (id=92):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="88"], 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7}, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r1, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = openat(r1, &(0x7f0000000040)='./file2\x00', 0x143842, 0xe3)
read$eventfd(r2, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x4e24, 0x1000000, @loopback, 0x7}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)

12m56.335960871s ago: executing program 4 (id=3098):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40)
r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180), 0x1b}, 0x0, 0x6, 0x7, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="055b657e832dfd292ee442e86261aba54b4fd2cf2073df30d4077a220366040147c8991a8519750651cde7a17350ee4d327404b9664759c8254793dc42f169f76ac170437114e82d26a5e73ddfcfd621c06c0e93abb16c091eb93e1bd25320a8a10e3277dd551f9bb1d7b7dd9b273f2f24126f9b4bf120e8e2816ce914b80f110476ff6a0f8033e37d87c27f37c3139df1668a0fd8ca653ad12b346ff37f5c684b4d40e8fbb3e14b1d0df0988b8984b911a5e5f6bbe1caf454bbd2456c0e0a84ebe01c4e93f5a3588eb5f08aca1dcc080cb2391a64ae6cc332e49de6eaec0dce585e6d0fb2c634817a6c3da8d4f6", @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRESDEC=r1, @ANYBLOB="c8626a90ce3d8389ec5be8"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&')
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x8, 0xd, 0x0, 0x7fff8040}]})
close_range(r7, 0xffffffffffffffff, 0x200000000000000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VT_ACTIVATE(r9, 0x5606, 0x8f)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006201200000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000f4110380f01100800800034000000002"], 0x12b4}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500fde10300000000119078000045945673f33e97a6030000000000000000000000000000000000000000000000000000000000b0cd276ecef2920cfdaa09b71107b2a3dad670b4a60e3e46abf71ac50318624776f71f281b7d37eeca5fb742c3bd09203ec097"], 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0xfffffffffffffe00)
write$tun(r8, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x3a)

12m55.334259573s ago: executing program 4 (id=3112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xffffffff}, 0x18)
r2 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000280)=ANY=[], 0x18)

12m55.245178297s ago: executing program 4 (id=3114):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000f80)={<r5=>0x0, 0x50, 0x3, 0x1})
ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001380)={0x2, 0xff, @start={r5, 0x0, "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", "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"}, [0x7, 0x7fffffff, 0x3, 0x61, 0x4, 0xffff, 0xa9c, 0xb9da, 0x8, 0x41f4, 0x4, 0x8, 0xa9d, 0x1, 0x1ff, 0x4, 0x6, 0xdc06, 0x9, 0xfffffffffffff6bc, 0x9, 0x2, 0x1, 0x3, 0x100000000, 0x8, 0x9, 0x8, 0x8498, 0x4, 0x8000, 0x9dc, 0x7fffffff, 0x8, 0x3, 0xff, 0x6, 0x3, 0x6, 0x2, 0x0, 0x7fffffff, 0x7, 0x6, 0x0, 0x0, 0x1, 0x3, 0x25, 0x101, 0xfffffffffffffffe, 0x8, 0x7, 0x3, 0x1, 0x3, 0x5, 0x7ff, 0x3000000000000, 0x4, 0x2, 0x0, 0x20, 0x2]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94)

12m55.226668377s ago: executing program 4 (id=3116):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x26c, &(0x7f0000000340)="$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")
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa2aaaaaaaaa0008"], 0x0)
r2 = socket$inet(0x2, 0x3, 0xd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x20) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x20)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000010000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) (async)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000010000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x5, <r6=>0x0}, 0x8)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000090000008510000002000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000037aeb043e7420000000000b702000c0000801e839592822c3796470857304854b7abb78985a69bb5600018110000000000000000000029b9ef942e34087137735bd55d06f9646437c577bde233f2f196dc54a552a353f59857c2255a50551f8cad648544f148a669f5e451991eab62bbc7c21465a11ec4b42351c77b2b517eff00d311ba5d222300000000d22534f157e929e6", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000184800000400000000000000000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x21, &(0x7f0000000540)=""/33, 0x41000, 0x19, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x9, 0x955c, 0x800}, 0x10, r6, 0x0, 0x1, &(0x7f0000000700)=[r0, r0, r7, r0, r0, r0, r0], &(0x7f0000000740)=[{0x2, 0x3, 0xc, 0x9}], 0x10, 0x4}, 0x94)
getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000008, 0x6c033, 0xffffffffffffffff, 0x0)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
wait4(r8, 0x0, 0x40000000, 0x0) (async)
wait4(r8, 0x0, 0x40000000, 0x0)
ptrace$poke(0x2, r8, &(0x7f0000000000), 0x1)
accept$packet(r5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) (async)
r9 = accept$packet(r5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14)
fcntl$setownex(r9, 0xf, &(0x7f0000000880)={0x2, r8}) (async)
fcntl$setownex(r9, 0xf, &(0x7f0000000880)={0x2, r8})
mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) (async)
mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=@gettaction={0x154, 0x32, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2cb}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8c}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xb641}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x154}}, 0x48010)

12m54.361264324s ago: executing program 4 (id=3123):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001b0120095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
chdir(&(0x7f0000000000)='./file0\x00')

12m53.668601503s ago: executing program 4 (id=3126):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x188341)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xfffffdfb})
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x604aa59d)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x840, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={<r2=>0x0, @in={{0x2, 0x4e20, @remote}}, 0xfffc, 0xae2}, &(0x7f0000000380)=0x90)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000400)={r2, 0x38, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x0, @loopback, 0x9}, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}]}, &(0x7f0000000740)=0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x8, 0x0, 0x7ffc0001}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x8818)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r8, 0x0, 0x10000001}, 0x18)
splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020041a1fefbc064493bcc2f0014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000850000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r5, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

12m53.666432414s ago: executing program 33 (id=3126):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x188341)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xfffffdfb})
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x604aa59d)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x840, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={<r2=>0x0, @in={{0x2, 0x4e20, @remote}}, 0xfffc, 0xae2}, &(0x7f0000000380)=0x90)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000400)={r2, 0x38, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x0, @loopback, 0x9}, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}]}, &(0x7f0000000740)=0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x8, 0x0, 0x7ffc0001}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x8818)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r8, 0x0, 0x10000001}, 0x18)
splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020041a1fefbc064493bcc2f0014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000850000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r5, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

8m15.021365846s ago: executing program 6 (id=8013):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000)

8m14.982212328s ago: executing program 6 (id=8017):
r0 = getpid()
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x77359400}})
setns(r1, 0x66020000)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={'\x00', 0x6, 0x2, 0x1, 0x200, 0x0, <r2=>r0})
ptrace$setregset(0x4205, r2, 0x6, &(0x7f0000000100)={&(0x7f00000003c0)="c59f68eb3da97c9b3090102ab3f0971eb7e047e6127b487442e9ad628d4d9108edec37d91067981b1b76e8e7ed2664b672b102542b2ee9fcaa0388c6c9f56570b32f9a0cdf0e207930cb13ba60f4151755e56ba20f7d70a2d1df94ed2f720f1bb1300b243293e80d6a762f84fcfc6b576204b1050bb8e036970c6e2db0277e28", 0x80})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x1002}, 0x18)
r3 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0)
mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r3, 0x1e67e000)
ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0xc397e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x0)

8m14.92769718s ago: executing program 6 (id=8019):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x4084)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2, 0x7, 0x5, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', 0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c60000/0x4000)=nil, &(0x7f0000e01000/0x8000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ee7000/0x2000)=nil, 0x0, 0x0, r1}, 0x68)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0xffff0001, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xd, 0x15, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @exit, @call={0x85, 0x0, 0x0, 0x73}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001500)='syzkaller\x00', 0x3, 0xc1, &(0x7f00000016c0)=""/193, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, r5, r0, 0x3, 0xfffffffffffffffc, &(0x7f0000001800)=[{0x4, 0x4, 0x8, 0x7}, {0x4, 0x4, 0x2, 0xb}, {0x1, 0x1, 0x8, 0x8}], 0x10, 0x4c}, 0x94)
clock_gettime(0x0, &(0x7f00000001c0))

8m14.263848658s ago: executing program 6 (id=8044):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x8010)

8m14.200054331s ago: executing program 6 (id=8048):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f00000003c0)={[{@barrier_val={'barrier', 0x3d, 0xdc}}, {@nouser_xattr}, {@jqfmt_vfsv1}, {@nouid32}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@sysvgroups}]}, 0x1, 0x620, &(0x7f0000001680)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0))
mount(&(0x7f0000000000)=@nullb, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='erofs\x00', 0x0, &(0x7f0000000340)='nouid32')
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x60000010})
close(r4)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4)
sendto$inet(r8, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
recvmmsg(r8, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x12061, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

8m13.27636876s ago: executing program 6 (id=8065):
r0 = syz_pidfd_open(0x0, 0x0)
r1 = pidfd_getfd(r0, r0, 0x0)
utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x77359400}})
setns(r1, 0x66020000)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={'\x00', 0x6, 0x2, 0x1, 0x200, 0x0, <r2=>0x0})
ptrace$setregset(0x4205, r2, 0x6, &(0x7f0000000100)={&(0x7f00000003c0)="c59f68eb3da97c9b3090102ab3f0971eb7e047e6127b487442e9ad628d4d9108edec37d91067981b1b76e8e7ed2664b672b102542b2ee9fcaa0388c6c9f56570b32f9a0cdf0e207930cb13ba60f4151755e56ba20f7d70a2d1df94ed2f720f1bb1300b243293e80d6a762f84fcfc6b576204b1050bb8e036970c6e2db0277e28", 0x80})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x1002}, 0x18)
r3 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0)
mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r3, 0x1e67e000)
ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0xc397e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x0)

7m58.256704143s ago: executing program 34 (id=8065):
r0 = syz_pidfd_open(0x0, 0x0)
r1 = pidfd_getfd(r0, r0, 0x0)
utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x77359400}})
setns(r1, 0x66020000)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={'\x00', 0x6, 0x2, 0x1, 0x200, 0x0, <r2=>0x0})
ptrace$setregset(0x4205, r2, 0x6, &(0x7f0000000100)={&(0x7f00000003c0)="c59f68eb3da97c9b3090102ab3f0971eb7e047e6127b487442e9ad628d4d9108edec37d91067981b1b76e8e7ed2664b672b102542b2ee9fcaa0388c6c9f56570b32f9a0cdf0e207930cb13ba60f4151755e56ba20f7d70a2d1df94ed2f720f1bb1300b243293e80d6a762f84fcfc6b576204b1050bb8e036970c6e2db0277e28", 0x80})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x1002}, 0x18)
r3 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0)
mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r3, 0x1e67e000)
ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0xc397e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x0)

7m53.448702585s ago: executing program 1 (id=8408):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_open_dev$loop(&(0x7f0000001700), 0x9, 0x4000)
dup2(r1, r0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000001540)={'gre0\x00', 0x0, 0x10, 0x80, 0xa0, 0x8000, {{0x2f, 0x4, 0x3, 0x3e, 0xbc, 0x65, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast1, {[@timestamp={0x44, 0x8, 0xf5, 0x0, 0xf, [0xb70]}, @generic={0x86, 0x5, "5e3dd2"}, @timestamp_addr={0x44, 0x24, 0xf9, 0x1, 0xc, [{@broadcast, 0x6}, {@local, 0x2}, {@local, 0x4}, {@multicast1, 0xc3}]}, @ssrr={0x89, 0x7, 0xc7, [@rand_addr=0x64010100]}, @end, @ssrr={0x89, 0x7, 0x95, [@dev={0xac, 0x14, 0x14, 0x42}]}, @timestamp_addr={0x44, 0x44, 0xb3, 0x1, 0x7, [{@remote, 0xc}, {@rand_addr=0x64010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x3}, {@loopback, 0x9}, {@local, 0x6}, {@local, 0xdec}]}, @timestamp_addr={0x44, 0x24, 0x20, 0x1, 0x4, [{@private=0xa010100, 0x6}, {@multicast1, 0x5}, {@multicast2, 0xfffffff3}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x7}]}]}}}}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000016c0)={0x3}, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="1b000000000000000000000008000000000000000f534a021fd5106f307aad3c3d107c0958016f50310fc3b89bf86dc7ad268ee670527ff05919d4467ac1bcd966d52f8b84523935109e2fdca7f5ded974b819faef9ae03214880752e3850ef0841f167aace6ae64528bf6f5b6cfb55bc7d506521212cbc0df3995accc7c366c4b47cd57973748bc108983b4a0fcb240f30b96350e5d99089f5970f4851533bbab10c51dece47ae97ba25b2e57db5dbe30aa2c0786b76054dbb40b7f74965b2931afc52f0cae39b2f080e2e4c300ce7b0bf883a9c0a5a018caebaa12ed52ed651b6298e58947", @ANYRES32=r2, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000000001000500"/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800001400000000000000000000000018010000f0d9de49f5a7f1ec39fd05527b0ee61f8c59f320b8baeef74e0dbc80da50ad4e0738e9f73c3b6894b54eabc1a6a4b39a613622055f07606567a836d573bd6e731670403383b07ff440f49a17b03c7a06a1a1ecdfb3eade51238346a3d5138539577a6843713956badc1f7f715d46110bc20fceb3dd1cc9e55d000000800000000052f2653b2898a4afe90cd713138d1c7db8d418864a430fcb9471771496bf8d6736b3a48f584e2cd4b5", @ANYRESOCT=r0, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0xf)
unshare(0x20000400)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

7m53.429920566s ago: executing program 1 (id=8409):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8000000008}, 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)

7m53.409656507s ago: executing program 1 (id=8410):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

7m53.391642257s ago: executing program 1 (id=8411):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2, 0x7, 0x5, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', 0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c60000/0x4000)=nil, &(0x7f0000e01000/0x8000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ee7000/0x2000)=nil, 0x0, 0x0, r1}, 0x68)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000001c0))

7m53.348227299s ago: executing program 1 (id=8413):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x800000000006}, 0x18)
memfd_secret(0x0)

7m53.326586011s ago: executing program 1 (id=8415):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4800)
acct(&(0x7f0000000180)='./file0\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="801b9b878aea13a0198543a159bb080000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = semget(0x1, 0x4, 0x39c)
semop(r4, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2)
semop(r4, &(0x7f00000001c0)=[{0x3, 0x3, 0x400}, {0x1, 0xbbdd, 0x1000}, {0x1, 0x1000, 0x1800}], 0x3)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])
semop(r4, &(0x7f0000000200)=[{0x4, 0x4, 0x800}, {0x3, 0x739, 0x800}, {0x2, 0x6, 0x800}], 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}})

7m38.243420036s ago: executing program 35 (id=8415):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4800)
acct(&(0x7f0000000180)='./file0\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="801b9b878aea13a0198543a159bb080000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = semget(0x1, 0x4, 0x39c)
semop(r4, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2)
semop(r4, &(0x7f00000001c0)=[{0x3, 0x3, 0x400}, {0x1, 0xbbdd, 0x1000}, {0x1, 0x1000, 0x1800}], 0x3)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])
semop(r4, &(0x7f0000000200)=[{0x4, 0x4, 0x800}, {0x3, 0x739, 0x800}, {0x2, 0x6, 0x800}], 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}})

2.248126663s ago: executing program 2 (id=16030):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ustat(0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1a4, r4, 0x1, 0x70bd29, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x17c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0x88, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d454d5dd835fff58334762251fb458c0abd16089d30d58ca66a1769b8a83772c"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4004840}, 0x44000)
ioctl$TUNSETIFF(r0, 0x8004b708, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b})
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x134, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3ff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0xb0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffff01}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4040800}, 0x800)

2.178609825s ago: executing program 2 (id=16034):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='fsi_slave_init\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007001c0007800c00018008000140ffffffff0c000280080001409300000182499198e889d94f3a171f3048e7d2cd7f8b19678cfdd874"], 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000007060104000000000000c0000000000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000)
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080)
r6 = accept(r2, &(0x7f0000000340)=@phonet, &(0x7f0000000180)=0x80)
getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000440), 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)

1.84196891s ago: executing program 2 (id=16050):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x80000, 0x1})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4050)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_create(0x2, &(0x7f0000000140)={0x0, 0x1e, 0x4}, &(0x7f00000000c0))
timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', 0xffffffffffffffff, 0x0, 0x20}, 0x18)
r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffe, r8, 0x1)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)

1.83314549s ago: executing program 7 (id=16052):
r0 = socket$pppoe(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r1=>0x0})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x20, 0x1405, 0x131, 0x0, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x20}}, 0x4c050)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e00000004000000060000000800000000000000", @ANYRES32, @ANYBLOB="aba2b01f908d38760be2e282ab4e56e0000000ff7f00000000f6c6ecd7bb426b3d0a14c3fb02a7f282250e2ca491ac843ccd5d812aabb5710d1c66652d1e0996a0753742f90f57accd786322eac5e02775466282b80901c6ea3b", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0500000001000000040000000600"/28], 0x50)
ioctl$int_out(r3, 0x0, &(0x7f0000000080))
sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)

1.749241314s ago: executing program 5 (id=16055):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18)

1.749005114s ago: executing program 7 (id=16056):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})
close(0x3)
socket$igmp(0x2, 0x3, 0x2)

1.737517184s ago: executing program 5 (id=16057):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000004ffffffff000000000200000000000000000000000000000604"], 0x0, 0x3e}, 0x28)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000006d00000426bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000005000080000008000f000700000008001b00000000000a000200aaaaaaaaaa2400000800200002000000600016805c0001800c000900ff0f0000010400000c000900ea030000100000000c000900e0000000060000002800010007000000aaaaaaaaaa0c00000000000000000000000000000000000000000000000000000c000300fcffffff050000000a000200694dbe2a8c10000008001c00", @ANYRES32, @ANYBLOB="2b28a631d3f599043d7a216981ff29e4317c7351f05facd830ee5315cc69b487137e469859006ce3ec97a7d3653974547037673b1bf5ef41068b478ffb4018be4e08411657b4dbc93bdcd8d6974ce9c813320000000000000000000000000000675cb9f18410f5d97d85a4f54fe4d9ba5f123c99ad18227db669e29bbc50a372e315f774d2b481a67c6ba755acc6a61703580a5cb43a8264c18bf65b9dca2420240d1763a9a9edf38fc59f47acf46783bb333b624e2ffdf6898dc3d369ca"], 0xb8}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000000)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000200))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e26, 0xb1, @mcast2, 0x6}]}, &(0x7f0000000280)=0x10)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800b040f01ed876efa538ab31ebe82f00001039042abd050000000000000003e4007b01940b0c915beb6584db", @ANYRES32=0x0, @ANYBLOB="03000000c31006003800128008000100736974002c00028006000e000010000008000300ac1414bb08000200ac14142d08000c00ee00000008001400"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="71d212ae"], 0x1c}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0xfff8, 0x4, 0x0, 0x6}, {0x3, 0x4, 0x7f, 0x16640}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r8, 0x0, 0x9}, 0x18)
r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x9, 0x0, 0xa0, 0x0, 0x2, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xffffffffffffffde}, 0x2000, 0x37, 0x7, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x40000c0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu<20\t||')
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="61030204010103133308e71a8bc224292f88bc3afc7c0b9a52b9c152"], 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00')
preadv(r11, &(0x7f0000000040)=[{&(0x7f0000002240)=""/13, 0xd}], 0x1, 0x3a, 0x3)

1.628344949s ago: executing program 5 (id=16060):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x8c, 0x24, 0xd0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0xfffd]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

1.627886189s ago: executing program 0 (id=16061):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = fspick(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x59, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff97}, 0x94)
bpf$ENABLE_STATS(0x20, &(0x7f0000000380), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
read(r2, &(0x7f0000003c00)=""/4096, 0x1000)
preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0xcd}], 0x1, 0xa6, 0x200)
setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000040)={{&(0x7f0000002c00)=""/4096, 0x1000}, &(0x7f0000000000), 0x4e}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000004c00)={{r0}, r3, 0xa, @unused=[0x20000, 0x34, 0x100000000000006, 0x8000], @name="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"})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r5 = dup(r4)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000003c0))
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}})

1.61508225s ago: executing program 7 (id=16062):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0xb00, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28)

1.6106422s ago: executing program 5 (id=16063):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ff6000/0x2000)=nil)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

1.537252993s ago: executing program 0 (id=16064):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48a40, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]})

1.528295193s ago: executing program 7 (id=16065):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x80000, 0x1})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4050)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_create(0x2, &(0x7f0000000140)={0x0, 0x1e, 0x4}, &(0x7f00000000c0))
timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', 0xffffffffffffffff, 0x0, 0x20}, 0x18)
r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffe, r8, 0x1)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)

1.275249044s ago: executing program 8 (id=16067):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18)

1.243594356s ago: executing program 8 (id=16068):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
mq_open(0x0, 0x42, 0x0, 0x0)

1.222325797s ago: executing program 8 (id=16069):
perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x81, 0x8, 0x4, 0x8, 0x0, 0x2, 0x40000, 0x56c717451f3297d2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x1af, 0x307}, 0x10000, 0xd, 0x4eeea2ac, 0x3, 0x2, 0x8, 0x4, 0x0, 0x80000000, 0x0, 0xf0d}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
r1 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r1, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x12, 0x20000019, 0x0)
r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x8010, r2, 0x46924000)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
timer_settime(r3, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000240))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="b9dc258cf526e4ed29affe8e9993ea37", @ANYRESDEC=r2, @ANYRES16=r0, @ANYRESDEC=r2], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000400), &(0x7f0000000500)=r5}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="201f02de090002"], 0x28}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000003c0), 0x0, &(0x7f0000000340)}, 0x1)
readahead(0xffffffffffffffff, 0x0, 0xfffffffffffffffd)
r8 = syz_open_pts(0xffffffffffffffff, 0x180000)
ioctl$TCGETS(r8, 0x5401, &(0x7f0000000040))

972.416148ms ago: executing program 2 (id=16070):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
lstat(&(0x7f0000001800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 '], 0x79)

896.197781ms ago: executing program 2 (id=16071):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33, 0x1, [{0xfe, 0x40000}]}})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = dup(r3)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40841}, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r6=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000ff00000000000000", @ANYRES32=r2, @ANYBLOB="0300"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="030000000000000004000000"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18)
mq_open(0x0, 0x42, 0x0, 0x0)

844.905053ms ago: executing program 8 (id=16072):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000090000000600000000000011030000000800000000005f2e00302e00fed19851b867ea01b402384be200"], &(0x7f0000000200)=""/114, 0x31, 0x72, 0x0, 0x6, 0x10000}, 0x28)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095", @ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC=r1, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000500)={0x1, 0x3, 0x1000, 0x2f, &(0x7f00000004c0)="fba1248448607a66ae08e10d451107b96e8b8eff0d4b15cc06cb66ba919feee9a2b223a021acea5d5311539ef3bb93", 0xf2, 0x0, &(0x7f00000007c0)="8cc4221311f0b27e7a53bb0b6ddc58c0157af07bceeb770bf02b41dec45478f0d1e8bed6ac90dfc7599e49f2b03983a3a007e38c75cbc2be27eb639caa271996bb2b03e8462e57f9d91591eb1aba96218a6ef9de0f2757f6ea407f06ca0ae896a5eddc6bd2ba8a073cda03a20af084ffb5ba903f51c192d27ab5db28f73863270efd2d0e8afe793fd97a369694ea51df1dd2031395cf9ddbe95c72131f98126c7d81d149717bbcd9767d92f9396146293ca508c045ffa5f5fedf972c8f60e38e3584a876cecb7a0a16f86809b256a735cb330da033747d66f38692d805619bd548ee5ae5bea19ee3721e8f4d069e7132cdc7"})
recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000340)=@x25={0x9, @remote}, 0x80, 0x0}, 0x2}, {{&(0x7f0000000700)=@xdp, 0x80, 0x0}, 0x8}], 0x2, 0x2, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010)

797.942465ms ago: executing program 8 (id=16073):
socket$inet(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x9c, 0x24, 0xd0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3bdf0}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

775.409986ms ago: executing program 8 (id=16074):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, 0x0, 0xff}, 0xe)
shutdown(r0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r3, @ANYRES8=r5, @ANYRES8=r6], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x65}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r9}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000959c09c13953f859f986b9602293fc809379372eac21d06ad7db5e29f995cbbf8c9c22cf877f7bf5abd0950a5a4258b912739e104f7145d7aa110604106b4c26f8131b2bfadd3f5a6865dfa065b0fad8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r10}, 0x18)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

703.246849ms ago: executing program 7 (id=16075):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x3c, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc810) (fail_nth: 4)

577.383024ms ago: executing program 0 (id=16076):
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4a9c1, 0x6)
r0 = socket(0x11, 0x3, 0x8000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
mount$bpf(0x0, 0x0, 0x0, 0x50a5840, &(0x7f0000000100)={[{@gid={'gid', 0x3d, r1}}]})
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (fail_nth: 3)

419.957771ms ago: executing program 7 (id=16077):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={<r5=>0x0, @in={{0x2, 0x4e23, @local}}, 0x9, 0x4, 0x1, 0xffff, 0x9}, &(0x7f00000001c0)=0x98)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000300)={r5}, 0x8)
bind$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0xffffd8ee}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x24, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118)
sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, &(0x7f00000006c0)=<r10=>0x0, &(0x7f00000000c0)=<r11=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1})
io_uring_enter(r9, 0x47ba, 0x0, 0x28, 0x0, 0x0)

176.357122ms ago: executing program 5 (id=16078):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18)

175.741312ms ago: executing program 2 (id=16079):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES8, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000800)='./bus\x00', 0x1001a, &(0x7f0000000080)={[{@inlinecrypt}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x43b, &(0x7f00000003c0)="$eJzs28tvG8UfAPDvruP019cvoZRHH0CgICIeSZMW6IELCCQuSEhwKMeQuFWp26AmSLSqoCDEFVXijjgi8RdwggsCTkhc+QNQpQr10sIBGa29m9qO49SJExf8+UjbzuyMPfP17tizO9kAhtZE9k8SsScifouIsUa2tcJE479bNy7P/3nj8nwStdqbfyT1ejdvXJ4vqhav251nJtOI9NMkDnVod+nipbNz1WrlQp6fXj733vTSxUvPnjk3d7pyunJ+9sSJ48dmXnh+9rm+xJn16ebBDxcPH3jt7auvz5+8+s5P3yRF/G1x9MlEt8InarU+NzdYe5vSycgAO0JPShGRHa5yffyPRSluH7yxePWTgXYO2FK1Wq22e+3iKzXgPyyJQfcAGIzihz67/i22bZp63BWuv9S4AMrivpVvjZKRSPM65bbr236aiIiTV/76Mttia+5DAAC0+C6b/zzTaf6Xxv1N9f6frw2NR8Q9EbEvIu6NiP0RcV9Eve4DEfFgj+23L5Ksnv+k11aS5R7f/A5k878X87Wt1vlfMfuL8VKe21uPv5ycOlOtHM0/k8ko78jyM13a+P6VXz9fq6x5/pdtWfvFXDDvx7WRHa2vWZhbnttMzM2ufxxxcKRT/MnKSkASEQci4uAG2zjz1NeH1ypbP/4u+rDOVPsq4snG8b8SbfEXku7rk9P/i2rl6HRxVqz28y+fvbFW+5uKvw+y47+r4/m/Ev940rxeu9Tb++9Yp3yj5/9o8lY9PZrv+2BuefnCTMTo2daTor5/dnW+qJ/FP3mk8/jfF7c/iUMRkZ3ED0XEwxHxSN73RyPisYg40iXGH19+/N2Nx7+1svgXejr+txOj0b6nc6J09odvWxod7yX+7Pgfr6cm8z138v1XrVzIvp7X7eBmPz8AAAD4N0gjYk8k6dRKOv27+NOA/bErrS4uLT99avH98wuNZwTGo5wWd7rGmu6HzuSX9UV+ti1/LL9v/EVpZz0/Nb9YXRh08DDkdq8e/+nUVKPs99KgewdsOc9rwfAy/mF4Gf8wvIx/GF4dxv/OQfQD2H6dfv8/GkA/gO3XNv4t+8EQcf0Pw8v4h+Fl/MNQWtoZ3R/el5DomIj0ruiGxBYlBv3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0B//BAAA//8leepq")
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r11 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r12 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x10)
sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5)
writev(r11, &(0x7f0000000d40)=[{&(0x7f0000000840)="72fbc4f1d5ede215392c29411e00d6b300212d38cda09c9912d2268071e4ca416dfcc7f5112863742dfc8f50d9854e5ba62a826becea6200b35d4bfe7ab1042b375e9a7689b3aca13100003b1911dcf953d486809f1969a34805bbceeb672630b977497d5ac4c443d4ef0d23a414a5d7f9b56f48bb99b5abc7776acc000dd83c2473ef391f1b7bdf407675fad58cbf3815c294725131f4934bef2a92a6122fec86290e15e096272f83e51e12143ab32b1bacf708a43a544ecd7663a18b10c47b591a1bbe4fa90db5c597dfa80561ec4f608c96b569c323427a3a3aec62ec68aa550c", 0xe2}, {&(0x7f0000000940)="a00b205dc172f9d1e2a228ae08ce6376b7eac6c28a0f8a2464c8239893d9f35e4cfbfa04832120f132bd3458c30674a2299522f7fdfad7337560ab17a16a8a8cf35b9d18f08da361a48fdf72b9a2a2d4d252c3d5e24f248479e5e464c82290716bdd9f2f4ce57815be69ae6030071b9c68c6e62cf181a0dcb0d2e106544384e2837517502c774c8f5ca2a2cdbb4016902d4bb7830b3d03e7341dfc50630c4f18f11cac3e8e4cfc601c9c1cadddd0", 0xae}, {&(0x7f0000000a00)="d325ba8aa1532b75e89a6e52939cc86138e633e74c45d2d0572624f9b285f60307e68fd621b3bc2a017f141a0783573ad029c56bf234ff5156624bfe7d0a6f624111c39f2c5a2f53a3387639c5884cef55e13a6028a410736200183a27e40275dd0651bccd8b114160447fb9d7b385378a", 0x71}, {&(0x7f0000000a80)="3158b6ceeb5de023cd5c58f57907e868ef0660fefd88f75ab065fe98b2a3fc6859337213b48d3fac3e0377e99f12221eb8263f5f6b72910d3a3eb2b464507792bff2f6d7db071adddb42294fa392fab7f6d9be38a1dba92422dc087e7e00125533", 0x61}, {&(0x7f0000000b00)="63d303338d11257e1d87e976ade931599d0f9e94b0523ff4a178b4135b1789358fc326d2cff93a7bf1d0098a8cc6ae6548d37b47545a5a32120525bac5ba65076e3c6ef5d333b5310580ebeeb537acf900119d6d770c4abb47dcd69dfac6c76202fa348463c31c0de598a13038f342d88d7bd53a389c26eb428187389901e6ee8cb8fb0aab17ba4182a0d164f2cfb64060e929264f077b29a560ec70cfe1c5c46c7cf176c27beeda865758e902bc697b494478", 0xb3}, {&(0x7f0000000200)="0665ab3e9fc711f4684c4e5d148d101a2922db2ddd3654bc20dabd0a", 0x1c}, {&(0x7f00000002c0)="eda48309fdd395188909e2871a7b5f71b1f59c7a27db871de357bffa", 0x1c}, {&(0x7f0000000bc0)="d13a8f2449a7161cd8e70b7b6cfa9fb099c4069da076fd0c2d6614005e7b756ebe1a04811c3678761a0e8ec03810c94136852491b8765b0438e0916e1af38c48634064171b211def02a2851713a8038263f0c321183ef6a75aa26a38e97490b27ab5b62b4955ad633b44944f9bceccde8408399573cae713a0e1fae45e535e41d47cb439b92426ed2c990fdef43b58a6e1bf0dfa11fc0b288bc576cf89fb0b8ea77478f227b5871daac59f0e6685e3dbab460a831034370d238c0cc7438197f8f919b6be044bc34a1e010ec0dd9543f506517f47766edecb2240470b85c597da155c097e04168d06db653083dbd644c1691e62", 0xf3}, {&(0x7f0000000cc0)="baa12029cb692706d45213f6e8807e00880ce0d3b2431ddb9768502930082b3210052238e6090463545015985db8419cde56409f79c98e9d28b4713603a4933f54309d5a6dfa33ca1e047fe93989e22f091af62eb76c7634d1688b", 0x5b}, {&(0x7f0000000340)="aa15d913c9c1da", 0x7}], 0xa)

89.359596ms ago: executing program 0 (id=16080):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
execveat(r0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000000b03000000000000000000030000060500010000000000080003400000000108000340000000000500010000000000080002"], 0x7c}}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
r3 = epoll_create1(0x80000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x22, 0xae, &(0x7f0000000200)="6f4f897baa05de673251d2c4d29b19421b1c0d27dda80c2eba6bb9c7ec0ba202f7cc", &(0x7f0000000240)=""/174, 0x51800, 0x0, 0x57, 0x9d, &(0x7f0000000340)="6cf0dd8faec74426869a60695b649048be35255953451de502d429a36875d4d0fc7e0a85ca7e16c6c044a06852af3e5183eb68ca624ab834da5b9109cd3e2905abb15f56703d304e3cebe3c7b723ba3d3681db0eac6244", &(0x7f00000003c0)="6856dacb3cf8ce7a4e80f032493ff38b7e20e48e768aeaa6c5318ddbdd9a5b46e990009305702ac508a1ee06c1bd41a302fc1f740bc89250d4b0b3648665f506e19b4211cb91951ae87e2c7ad129d84f9adece75888345db64af298e99a171eb4f50d2b051c71e34aeea920b47ef9f330cb841a06c19aad938995e4b0b58ed26e19b2c15cd887c3a123291cea1725fab2daf0e154dbf81cad2870afcdd", 0x4, 0x0, 0x7f}, 0x50)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001100)={0x10000000})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0xed, r5, 0x0, 0x0, 0x1}}, 0x20)

88.950496ms ago: executing program 5 (id=16081):
r0 = socket(0x3, 0xa, 0x18)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0xfffffffc}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0xe, 0x7, 0x7, 0x64, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x8, 0x711e, 0xff}})
lstat(&(0x7f0000001800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5, 0x0, 0xffffffffffffffff}, 0x18)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r6, 0x15b4}, 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
sendfile(r8, r9, 0x0, 0x20000023896)
write$selinux_validatetrans(r4, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x190, 0x24, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xc}, {0xe, 0xfff4}, {0xf, 0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1b}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x7}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x1e}]}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xa, 0x1, 0x6, 0x2, 0x5, 0x7, 0x8}}, {0x14, 0x2, [0x3ff, 0x3, 0x0, 0x5, 0x5, 0x1ae9, 0x920d, 0xa]}}, {{0x1c, 0x1, {0x9, 0x0, 0x1bb, 0x400, 0x1, 0xffffffff, 0xfffffffa}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x4, 0x9, 0xffffffff, 0x0, 0x1031, 0x10, 0x6}}, {0x10, 0x2, [0xe47, 0x7fff, 0x9, 0x80, 0x3, 0x5]}}, {{0x1c, 0x1, {0x4, 0xd4, 0x8, 0x6, 0x1, 0x0, 0xa90, 0x5}}, {0xe, 0x2, [0x9, 0x7, 0xa, 0x3, 0x3]}}]}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0x80, 0x6, 0x0, 0xa00, 0x6, 0x7}}, {0x12, 0x2, [0x8, 0x9, 0xfc92, 0x2, 0x1, 0xffff, 0xaf64]}}, {{0x1c, 0x1, {0x2, 0x0, 0x9, 0x6, 0x1, 0x9, 0x8, 0x2}}, {0x8, 0x2, [0x3, 0xb]}}]}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x4, 0xfffc, 0x1, 0x1, 0x3, 0x10000, 0xa}}, {0x18, 0x2, [0x3, 0x1, 0x5, 0x0, 0xbed2, 0x200, 0x1, 0x8, 0xff97, 0x2]}}]}]}, 0x190}}, 0x0)

52.294377ms ago: executing program 0 (id=16082):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000000000006911ba000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffff8001}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006000000050005000200000005000400030000000900020073797a310000000012000300686173683a6e65742c706f7274000000"], 0x60}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xc, [@func={0xf, 0x0, 0x0, 0xc, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0xe, 0x8}, {0x2, 0x5}, {0x8, 0x4}, {0x9}, {0x1, 0x3}, {0x1, 0x1}, {0xd, 0x1}]}, @float={0x10, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x0, 0x30, 0x5f, 0x5f, 0x5f, 0x30, 0x61, 0x61, 0x2e]}}, &(0x7f0000000040)=""/30, 0x88, 0x1e, 0x0, 0x3ff, 0x10000}, 0x28)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="c13585f5b800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r8}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

0s ago: executing program 0 (id=16083):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
r2 = syz_open_procfs(0x0, &(0x7f0000000840)='net/packet\x00')
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x1d, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x11c1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x1, &(0x7f00000002c0)=""/1, 0x40f00, 0x1, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x9, 0x2d, 0xd4f9}, 0x10, 0x358, r3, 0x2, &(0x7f0000000540)=[r4, r0], &(0x7f0000000600)=[{0x0, 0x3, 0x4, 0xc}, {0x1, 0x4, 0x6, 0x8}]}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000340)="0000000000000000ac95db74841b", 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mincore(&(0x7f000049b000/0x3000)=nil, 0x3000, &(0x7f0000000c80)=""/4096)
vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2)

kernel console output (not intermixed with test programs):

4 bytes leftover after parsing attributes in process `syz.8.15286'.
[  977.630845][ T3354] hid-generic 0000:3000000:0000.0058: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  977.674659][T13510] x_tables: duplicate underflow at hook 4
[  978.115671][T13518] netlink: 'syz.0.15293': attribute type 3 has an invalid length.
[  978.403067][T14535] Bluetooth: hci0: command 0x1003 tx timeout
[  978.409516][T31517] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  978.485241][T14798] hid-generic 0000:3000000:0000.0059: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  978.567887][T13550] netlink: 360 bytes leftover after parsing attributes in process `syz.0.15306'.
[  978.743188][ T1370] Bluetooth: hci0: Frame reassembly failed (-84)
[  978.931875][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15316'.
[  978.941230][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15316'.
[  979.114800][T13601] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15324'.
[  979.161528][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15327'.
[  979.194804][ T6757] Bluetooth: hci1: Frame reassembly failed (-84)
[  979.361255][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15331'.
[  979.370420][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15331'.
[  979.544082][T13628] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15335'.
[  979.630436][T14798] hid_parser_main: 16 callbacks suppressed
[  979.630459][T14798] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x4
[  979.644211][T14798] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x2
[  979.652170][T14798] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x3
[  979.660661][T14798] hid-generic 0000:3000000:0000.005A: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  979.677124][   T29] kauditd_printk_skb: 319 callbacks suppressed
[  979.677144][   T29] audit: type=1326 audit(979.653:109124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.5.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f694d772005 code=0x7ffc0000
[  979.706751][   T29] audit: type=1326 audit(979.663:109125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.5.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f694d772005 code=0x7ffc0000
[  979.730240][   T29] audit: type=1326 audit(979.663:109126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.5.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f694d772005 code=0x7ffc0000
[  979.753786][   T29] audit: type=1326 audit(979.663:109127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.5.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f694d772005 code=0x7ffc0000
[  979.777052][   T29] audit: type=1326 audit(979.663:109128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.5.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f694d772005 code=0x7ffc0000
[  979.800389][   T29] audit: type=1326 audit(979.663:109129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.5.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f694d772005 code=0x7ffc0000
[  979.831402][   T29] audit: type=1326 audit(979.683:109130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.5.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f694d772005 code=0x7ffc0000
[  979.854753][   T29] audit: type=1326 audit(979.683:109131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.5.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f694d772005 code=0x7ffc0000
[  979.878180][   T29] audit: type=1326 audit(979.683:109132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.5.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f694d772005 code=0x7ffc0000
[  979.901538][   T29] audit: type=1326 audit(979.683:109133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.5.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f694d772005 code=0x7ffc0000
[  980.240997][    T9] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x4
[  980.249116][    T9] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x2
[  980.257796][    T9] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x3
[  980.271547][    T9] hid-generic 0000:3000000:0000.005B: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  980.289241][T13679] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  980.300357][T13679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  980.309390][T13681] pim6reg1: entered promiscuous mode
[  980.314887][T13681] pim6reg1: entered allmulticast mode
[  980.757662][T13710] netlink: 'syz.5.15366': attribute type 3 has an invalid length.
[  980.803135][T31517] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  981.015884][T13740] netlink: 'syz.7.15377': attribute type 3 has an invalid length.
[  981.203065][T14535] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  981.203121][T31517] Bluetooth: hci1: command 0x1003 tx timeout
[  981.576605][T13786] bridge25: entered promiscuous mode
[  981.897620][    T9] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x4
[  981.905536][    T9] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x2
[  981.914868][    T9] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x3
[  981.924591][    T9] hid-generic 0000:3000000:0000.005C: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  981.960974][T13819] bridge6: entered promiscuous mode
[  982.188921][T13835] FAULT_INJECTION: forcing a failure.
[  982.188921][T13835] name failslab, interval 1, probability 0, space 0, times 0
[  982.201718][T13835] CPU: 1 UID: 0 PID: 13835 Comm: syz.8.15412 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  982.201784][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  982.201796][T13835] Call Trace:
[  982.201801][T13835]  <TASK>
[  982.201807][T13835]  __dump_stack+0x1d/0x30
[  982.201832][T13835]  dump_stack_lvl+0xe8/0x140
[  982.201849][T13835]  dump_stack+0x15/0x1b
[  982.201930][T13835]  should_fail_ex+0x265/0x280
[  982.201959][T13835]  ? nci_allocate_device+0x95/0x200
[  982.201979][T13835]  should_failslab+0x8c/0xb0
[  982.202004][T13835]  __kmalloc_cache_noprof+0x4c/0x4a0
[  982.202082][T13835]  ? should_failslab+0x8c/0xb0
[  982.202135][T13835]  ? __pfx_virtual_nci_send+0x10/0x10
[  982.202201][T13835]  nci_allocate_device+0x95/0x200
[  982.202220][T13835]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  982.202242][T13835]  virtual_ncidev_open+0x55/0x140
[  982.202287][T13835]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  982.202362][T13835]  misc_open+0x1df/0x220
[  982.202390][T13835]  chrdev_open+0x2eb/0x3a0
[  982.202416][T13835]  do_dentry_open+0x649/0xa20
[  982.202432][T13835]  ? __pfx_chrdev_open+0x10/0x10
[  982.202533][T13835]  vfs_open+0x37/0x1e0
[  982.202549][T13835]  path_openat+0x1c5e/0x2170
[  982.202580][T13835]  do_filp_open+0x109/0x230
[  982.202609][T13835]  do_sys_openat2+0xa6/0x110
[  982.202722][T13835]  __x64_sys_openat+0xf2/0x120
[  982.202741][T13835]  x64_sys_call+0x2eab/0x3000
[  982.202822][T13835]  do_syscall_64+0xd2/0x200
[  982.202841][T13835]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  982.202867][T13835]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  982.202983][T13835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.203011][T13835] RIP: 0033:0x7f1f94daf749
[  982.203054][T13835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  982.203073][T13835] RSP: 002b:00007f1f9380f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  982.203165][T13835] RAX: ffffffffffffffda RBX: 00007f1f95005fa0 RCX: 00007f1f94daf749
[  982.203181][T13835] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  982.203196][T13835] RBP: 00007f1f9380f090 R08: 0000000000000000 R09: 0000000000000000
[  982.203211][T13835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  982.203224][T13835] R13: 00007f1f95006038 R14: 00007f1f95005fa0 R15: 00007ffff8b9e938
[  982.203246][T13835]  </TASK>
[  982.462511][T13837] __nla_validate_parse: 13 callbacks suppressed
[  982.462532][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15414'.
[  982.524417][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15415'.
[  982.539311][T13839] FAULT_INJECTION: forcing a failure.
[  982.539311][T13839] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  982.552577][T13839] CPU: 1 UID: 0 PID: 13839 Comm: syz.2.15415 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  982.552658][T13839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  982.552675][T13839] Call Trace:
[  982.552685][T13839]  <TASK>
[  982.552695][T13839]  __dump_stack+0x1d/0x30
[  982.552792][T13839]  dump_stack_lvl+0xe8/0x140
[  982.552830][T13839]  dump_stack+0x15/0x1b
[  982.552851][T13839]  should_fail_ex+0x265/0x280
[  982.552913][T13839]  should_fail+0xb/0x20
[  982.552935][T13839]  should_fail_usercopy+0x1a/0x20
[  982.552963][T13839]  _copy_from_user+0x1c/0xb0
[  982.553000][T13839]  ___sys_sendmsg+0xc1/0x1d0
[  982.553043][T13839]  __x64_sys_sendmsg+0xd4/0x160
[  982.553110][T13839]  x64_sys_call+0x191e/0x3000
[  982.553140][T13839]  do_syscall_64+0xd2/0x200
[  982.553167][T13839]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  982.553203][T13839]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  982.553323][T13839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.553350][T13839] RIP: 0033:0x7f37f79bf749
[  982.553381][T13839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  982.553408][T13839] RSP: 002b:00007f37f6427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  982.553501][T13839] RAX: ffffffffffffffda RBX: 00007f37f7c15fa0 RCX: 00007f37f79bf749
[  982.553519][T13839] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000003
[  982.553536][T13839] RBP: 00007f37f6427090 R08: 0000000000000000 R09: 0000000000000000
[  982.553552][T13839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  982.553568][T13839] R13: 00007f37f7c16038 R14: 00007f37f7c15fa0 R15: 00007ffd593c0648
[  982.553593][T13839]  </TASK>
[  982.741936][T13848] netlink: 360 bytes leftover after parsing attributes in process `syz.8.15418'.
[  983.025203][T13866] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  983.063536][T13868] netlink: 'syz.0.15424': attribute type 3 has an invalid length.
[  983.073923][T13866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  983.123188][T14535] Bluetooth: hci0: command 0x1003 tx timeout
[  983.153073][T10890] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  983.232101][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15433'.
[  983.241629][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15433'.
[  983.423484][T13899] pim6reg1: entered promiscuous mode
[  983.429032][T13899] pim6reg1: entered allmulticast mode
[  983.677074][T13909] netlink: 360 bytes leftover after parsing attributes in process `syz.2.15440'.
[  983.714274][T13911] FAULT_INJECTION: forcing a failure.
[  983.714274][T13911] name failslab, interval 1, probability 0, space 0, times 0
[  983.727045][T13911] CPU: 1 UID: 0 PID: 13911 Comm: syz.2.15441 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  983.727079][T13911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  983.727136][T13911] Call Trace:
[  983.727143][T13911]  <TASK>
[  983.727151][T13911]  __dump_stack+0x1d/0x30
[  983.727178][T13911]  dump_stack_lvl+0xe8/0x140
[  983.727203][T13911]  dump_stack+0x15/0x1b
[  983.727256][T13911]  should_fail_ex+0x265/0x280
[  983.727300][T13911]  should_failslab+0x8c/0xb0
[  983.727334][T13911]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[  983.727392][T13911]  ? sidtab_sid2str_get+0xa0/0x130
[  983.727427][T13911]  kmemdup_noprof+0x2b/0x70
[  983.727519][T13911]  sidtab_sid2str_get+0xa0/0x130
[  983.727556][T13911]  security_sid_to_context_core+0x1eb/0x2e0
[  983.727595][T13911]  security_sid_to_context+0x27/0x40
[  983.727628][T13911]  selinux_lsmprop_to_secctx+0x67/0xf0
[  983.727728][T13911]  security_lsmprop_to_secctx+0x1a3/0x1c0
[  983.727757][T13911]  audit_log_subj_ctx+0xa4/0x3e0
[  983.727783][T13911]  ? skb_put+0xa9/0xf0
[  983.727818][T13911]  audit_log_task_context+0x48/0x70
[  983.727846][T13911]  audit_log_task+0xf4/0x250
[  983.727966][T13911]  ? kstrtouint+0x76/0xc0
[  983.728007][T13911]  audit_seccomp+0x61/0x100
[  983.728046][T13911]  ? __seccomp_filter+0x82d/0x1250
[  983.728137][T13911]  __seccomp_filter+0x83e/0x1250
[  983.728216][T13911]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  983.728255][T13911]  ? vfs_write+0x7e8/0x960
[  983.728291][T13911]  __secure_computing+0x82/0x150
[  983.728395][T13911]  syscall_trace_enter+0xcf/0x1e0
[  983.728431][T13911]  do_syscall_64+0xac/0x200
[  983.728456][T13911]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  983.728573][T13911]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  983.728660][T13911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.728686][T13911] RIP: 0033:0x7f37f79bf749
[  983.728704][T13911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  983.728727][T13911] RSP: 002b:00007f37f6427038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  983.728752][T13911] RAX: ffffffffffffffda RBX: 00007f37f7c15fa0 RCX: 00007f37f79bf749
[  983.728767][T13911] RDX: 0000000000000000 RSI: 00000000000048e9 RDI: 0000000000000004
[  983.728842][T13911] RBP: 00007f37f6427090 R08: 0000000000000000 R09: 0000000000000000
[  983.728854][T13911] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  983.728866][T13911] R13: 00007f37f7c16038 R14: 00007f37f7c15fa0 R15: 00007ffd593c0648
[  983.728885][T13911]  </TASK>
[  984.025754][T13884] syz.8.15431 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  984.040576][T13884] CPU: 0 UID: 0 PID: 13884 Comm: syz.8.15431 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  984.040611][T13884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  984.040629][T13884] Call Trace:
[  984.040636][T13884]  <TASK>
[  984.040653][T13884]  __dump_stack+0x1d/0x30
[  984.040688][T13884]  dump_stack_lvl+0xe8/0x140
[  984.040707][T13884]  dump_stack+0x15/0x1b
[  984.040723][T13884]  dump_header+0x81/0x220
[  984.040739][T13884]  oom_kill_process+0x342/0x400
[  984.040874][T13884]  out_of_memory+0x979/0xb80
[  984.040902][T13884]  try_charge_memcg+0x610/0xa10
[  984.040932][T13884]  obj_cgroup_charge_pages+0xa6/0x150
[  984.040969][T13884]  __memcg_kmem_charge_page+0x9f/0x170
[  984.041036][T13884]  __alloc_frozen_pages_noprof+0x188/0x360
[  984.041083][T13884]  alloc_pages_mpol+0xb3/0x260
[  984.041103][T13884]  alloc_pages_noprof+0x90/0x130
[  984.041224][T13884]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  984.041264][T13884]  __kvmalloc_node_noprof+0x483/0x670
[  984.041291][T13884]  ? ip_set_alloc+0x24/0x30
[  984.041326][T13884]  ? ip_set_alloc+0x24/0x30
[  984.041351][T13884]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  984.041385][T13884]  ip_set_alloc+0x24/0x30
[  984.041414][T13884]  hash_netiface_create+0x282/0x740
[  984.041469][T13884]  ? __pfx_hash_netiface_create+0x10/0x10
[  984.041500][T13884]  ip_set_create+0x3cc/0x970
[  984.041526][T13884]  ? __nla_parse+0x40/0x60
[  984.041595][T13884]  nfnetlink_rcv_msg+0x4c6/0x590
[  984.041666][T13884]  netlink_rcv_skb+0x123/0x220
[  984.041705][T13884]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  984.041740][T13884]  nfnetlink_rcv+0x167/0x16c0
[  984.041795][T13884]  ? kmem_cache_free+0xe4/0x3d0
[  984.041826][T13884]  ? __kfree_skb+0x109/0x150
[  984.041855][T13884]  ? nlmon_xmit+0x4f/0x60
[  984.041877][T13884]  ? consume_skb+0x49/0x150
[  984.041931][T13884]  ? nlmon_xmit+0x4f/0x60
[  984.041952][T13884]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  984.042024][T13884]  ? __dev_queue_xmit+0x1200/0x2000
[  984.042040][T13884]  ? __dev_queue_xmit+0x182/0x2000
[  984.042057][T13884]  ? ref_tracker_free+0x37d/0x3e0
[  984.042102][T13884]  ? __netlink_deliver_tap+0x4dc/0x500
[  984.042124][T13884]  netlink_unicast+0x5c0/0x690
[  984.042155][T13884]  netlink_sendmsg+0x58b/0x6b0
[  984.042175][T13884]  ? __pfx_netlink_sendmsg+0x10/0x10
[  984.042261][T13884]  __sock_sendmsg+0x145/0x180
[  984.042285][T13884]  ____sys_sendmsg+0x31e/0x4e0
[  984.042322][T13884]  ___sys_sendmsg+0x17b/0x1d0
[  984.042353][T13884]  __x64_sys_sendmsg+0xd4/0x160
[  984.042375][T13884]  x64_sys_call+0x191e/0x3000
[  984.042397][T13884]  do_syscall_64+0xd2/0x200
[  984.042495][T13884]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  984.042565][T13884]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  984.042596][T13884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  984.042721][T13884] RIP: 0033:0x7f1f94daf749
[  984.042742][T13884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  984.042791][T13884] RSP: 002b:00007f1f9380f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  984.042813][T13884] RAX: ffffffffffffffda RBX: 00007f1f95005fa0 RCX: 00007f1f94daf749
[  984.042825][T13884] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  984.042836][T13884] RBP: 00007f1f94e33f91 R08: 0000000000000000 R09: 0000000000000000
[  984.042847][T13884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  984.042868][T13884] R13: 00007f1f95006038 R14: 00007f1f95005fa0 R15: 00007ffff8b9e938
[  984.042939][T13884]  </TASK>
[  984.042946][T13884] memory: usage 307200kB, limit 307200kB, failcnt 438
[  984.206090][T13915] bridge40: entered promiscuous mode
[  984.208285][T13884] memory+swap: usage 307348kB, limit 9007199254740988kB, failcnt 0
[  984.378846][T13918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15444'.
[  984.382324][T13884] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0
[  984.382344][T13884] Memory cgroup stats for /syz8:
[  984.422530][T13884] cache 0
[  984.430568][T13884] rss 4096
[  984.433641][T13884] shmem 0
[  984.436766][T13884] mapped_file 0
[  984.440392][T13884] dirty 0
[  984.443377][T13884] writeback 0
[  984.446686][T13884] workingset_refault_anon 1185
[  984.451466][T13884] workingset_refault_file 0
[  984.456012][T13884] swap 151552
[  984.459319][T13884] swapcached 32768
[  984.463094][T13884] pgpgin 577419
[  984.466637][T13884] pgpgout 577411
[  984.470724][T13884] pgfault 673137
[  984.474414][T13884] pgmajfault 183
[  984.478495][T13884] inactive_anon 16384
[  984.482570][T13884] active_anon 16384
[  984.486433][T13884] inactive_file 0
[  984.489753][T13922] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  984.490252][T13884] active_file 0
[  984.490264][T13884] unevictable 0
[  984.501659][T13922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  984.504129][T13884] hierarchical_memory_limit 314572800
[  984.520303][T13884] hierarchical_memsw_limit 9223372036854771712
[  984.526890][T13884] total_cache 0
[  984.530391][T13884] total_rss 4096
[  984.530406][T13924] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  984.534187][T13884] total_shmem 0
[  984.534201][T13884] total_mapped_file 0
[  984.534211][T13884] total_dirty 0
[  984.534226][T13884] total_writeback 0
[  984.534236][T13884] total_workingset_refault_anon 1185
[  984.534248][T13884] total_workingset_refault_file 0
[  984.534259][T13884] total_swap 151552
[  984.534269][T13884] total_swapcached 32768
[  984.534326][T13884] total_pgpgin 577419
[  984.547673][T13924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  984.548493][T13884] total_pgpgout 577411
[  984.594132][T13884] total_pgfault 673137
[  984.598258][T13884] total_pgmajfault 183
[  984.602352][T13884] total_inactive_anon 16384
[  984.607043][T13884] total_active_anon 16384
[  984.611527][T13884] total_inactive_file 0
[  984.616240][T13884] total_active_file 0
[  984.620505][T13884] total_unevictable 0
[  984.624568][T13884] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.15431,pid=13882,uid=0
[  984.639456][T13884] Memory cgroup out of memory: Killed process 13882 (syz.8.15431) total-vm:93836kB, anon-rss:1132kB, file-rss:22092kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  984.700458][   T29] kauditd_printk_skb: 941 callbacks suppressed
[  984.700478][   T29] audit: type=1326 audit(984.673:110074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13929 comm="syz.7.15449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[  984.730715][   T29] audit: type=1326 audit(984.673:110075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13929 comm="syz.7.15449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[  984.826366][   T29] audit: type=1326 audit(984.733:110076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13929 comm="syz.7.15449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[  984.850006][   T29] audit: type=1326 audit(984.733:110077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13929 comm="syz.7.15449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[  984.873315][   T29] audit: type=1326 audit(984.743:110078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13929 comm="syz.7.15449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[  984.896922][   T29] audit: type=1326 audit(984.743:110079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13929 comm="syz.7.15449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[  984.921072][   T29] audit: type=1326 audit(984.743:110080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13929 comm="syz.7.15449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[  984.944687][   T29] audit: type=1326 audit(984.743:110081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13929 comm="syz.7.15449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[  984.968284][   T29] audit: type=1326 audit(984.743:110082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13929 comm="syz.7.15449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[  984.992032][   T29] audit: type=1326 audit(984.743:110083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13929 comm="syz.7.15449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[  985.078736][T13927] chnl_net:caif_netlink_parms(): no params data found
[  985.216008][T13927] bridge0: port 1(bridge_slave_0) entered blocking state
[  985.223688][T13927] bridge0: port 1(bridge_slave_0) entered disabled state
[  985.235776][T13927] bridge_slave_0: entered allmulticast mode
[  985.385291][T13927] bridge_slave_0: entered promiscuous mode
[  985.396111][T13927] bridge0: port 2(bridge_slave_1) entered blocking state
[  985.403386][T13927] bridge0: port 2(bridge_slave_1) entered disabled state
[  985.411227][T13927] bridge_slave_1: entered allmulticast mode
[  986.191979][T14535] Bluetooth: hci0: command 0x1003 tx timeout
[  986.206431][T10890] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  986.223678][T13927] bridge_slave_1: entered promiscuous mode
[  986.236922][T13967] netlink: 360 bytes leftover after parsing attributes in process `syz.0.15454'.
[  986.258220][T13965] nfs: Unknown parameter 'X'
[  986.277373][T13927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  986.289863][T13969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15455'.
[  986.299364][T13969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15455'.
[  986.336176][T13927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  986.411625][T13927] team0: Port device team_slave_0 added
[  986.420272][T13927] team0: Port device team_slave_1 added
[  987.055439][T13979] syz.2.15459 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  987.071010][T13979] CPU: 0 UID: 0 PID: 13979 Comm: syz.2.15459 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  987.071040][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  987.071053][T13979] Call Trace:
[  987.071131][T13979]  <TASK>
[  987.071142][T13979]  __dump_stack+0x1d/0x30
[  987.071165][T13979]  dump_stack_lvl+0xe8/0x140
[  987.071223][T13979]  dump_stack+0x15/0x1b
[  987.071321][T13979]  dump_header+0x81/0x220
[  987.071339][T13979]  oom_kill_process+0x342/0x400
[  987.071379][T13979]  out_of_memory+0x979/0xb80
[  987.071414][T13979]  try_charge_memcg+0x610/0xa10
[  987.071504][T13979]  obj_cgroup_charge_pages+0xa6/0x150
[  987.071596][T13979]  __memcg_kmem_charge_page+0x9f/0x170
[  987.071618][T13979]  __alloc_frozen_pages_noprof+0x188/0x360
[  987.071668][T13979]  alloc_pages_mpol+0xb3/0x260
[  987.071695][T13979]  ? alloc_pages_noprof+0xf4/0x130
[  987.071727][T13979]  alloc_pages_noprof+0x90/0x130
[  987.071756][T13979]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  987.071804][T13979]  __kvmalloc_node_noprof+0x483/0x670
[  987.071879][T13979]  ? ip_set_alloc+0x24/0x30
[  987.071946][T13979]  ? ip_set_alloc+0x24/0x30
[  987.071976][T13979]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  987.072065][T13979]  ip_set_alloc+0x24/0x30
[  987.072095][T13979]  hash_netiface_create+0x282/0x740
[  987.072143][T13979]  ? __pfx_hash_netiface_create+0x10/0x10
[  987.072228][T13979]  ip_set_create+0x3cc/0x970
[  987.072257][T13979]  ? __nla_parse+0x40/0x60
[  987.072345][T13979]  nfnetlink_rcv_msg+0x4c6/0x590
[  987.072407][T13979]  netlink_rcv_skb+0x123/0x220
[  987.072447][T13979]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  987.072565][T13979]  nfnetlink_rcv+0x167/0x16c0
[  987.072625][T13979]  ? kmem_cache_free+0xe4/0x3d0
[  987.072663][T13979]  ? __kfree_skb+0x109/0x150
[  987.072693][T13979]  ? nlmon_xmit+0x4f/0x60
[  987.072725][T13979]  ? consume_skb+0x49/0x150
[  987.072816][T13979]  ? nlmon_xmit+0x4f/0x60
[  987.072848][T13979]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  987.072892][T13979]  ? __dev_queue_xmit+0x1200/0x2000
[  987.072983][T13979]  ? __dev_queue_xmit+0x182/0x2000
[  987.073012][T13979]  ? ref_tracker_free+0x37d/0x3e0
[  987.073140][T13979]  ? __netlink_deliver_tap+0x4dc/0x500
[  987.073163][T13979]  netlink_unicast+0x5c0/0x690
[  987.073203][T13979]  netlink_sendmsg+0x58b/0x6b0
[  987.073309][T13979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  987.073328][T13979]  __sock_sendmsg+0x145/0x180
[  987.073405][T13979]  ____sys_sendmsg+0x31e/0x4e0
[  987.073433][T13979]  ___sys_sendmsg+0x17b/0x1d0
[  987.073466][T13979]  __x64_sys_sendmsg+0xd4/0x160
[  987.073492][T13979]  x64_sys_call+0x191e/0x3000
[  987.073631][T13979]  do_syscall_64+0xd2/0x200
[  987.073690][T13979]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  987.073721][T13979]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  987.073826][T13979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  987.073849][T13979] RIP: 0033:0x7f37f79bf749
[  987.073864][T13979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  987.073888][T13979] RSP: 002b:00007f37f6427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  987.073976][T13979] RAX: ffffffffffffffda RBX: 00007f37f7c15fa0 RCX: 00007f37f79bf749
[  987.073992][T13979] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  987.074009][T13979] RBP: 00007f37f7a43f91 R08: 0000000000000000 R09: 0000000000000000
[  987.074025][T13979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  987.074037][T13979] R13: 00007f37f7c16038 R14: 00007f37f7c15fa0 R15: 00007ffd593c0648
[  987.074056][T13979]  </TASK>
[  987.429663][T13979] memory: usage 307200kB, limit 307200kB, failcnt 2310
[  987.436687][T13979] memory+swap: usage 307324kB, limit 9007199254740988kB, failcnt 0
[  987.444831][T13979] kmem: usage 307136kB, limit 9007199254740988kB, failcnt 0
[  987.452161][T13979] Memory cgroup stats for /syz2:
[  987.470397][ T3397] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x4
[  987.483981][ T3397] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x2
[  987.492487][ T3397] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x3
[  987.500903][T13979] cache 8192
[  987.504240][T13979] rss 32768
[  987.507381][T13979] shmem 0
[  987.510470][T13979] mapped_file 8192
[  987.514331][T13979] dirty 0
[  987.517433][T13979] writeback 0
[  987.520738][T13979] workingset_refault_anon 244
[  987.525722][T13979] workingset_refault_file 2887
[  987.531076][T13979] swap 135168
[  987.534746][T13979] swapcached 45056
[  987.538483][T13979] pgpgin 1564187
[  987.542146][T13979] pgpgout 1564173
[  987.546427][T13979] pgfault 1645791
[  987.550994][T13979] pgmajfault 156
[  987.554884][T13979] inactive_anon 0
[  987.558677][T13979] active_anon 49152
[  987.562758][T13979] inactive_file 0
[  987.566443][T13979] active_file 8192
[  987.570430][T13979] unevictable 0
[  987.574546][T13979] hierarchical_memory_limit 314572800
[  987.580241][T13979] hierarchical_memsw_limit 9223372036854771712
[  987.586495][T13979] total_cache 8192
[  987.590235][T13979] total_rss 32768
[  987.594187][T13979] total_shmem 0
[  987.597842][T13979] total_mapped_file 8192
[  987.602486][T13979] total_dirty 0
[  987.606146][T13979] total_writeback 0
[  987.610022][T13979] total_workingset_refault_anon 244
[  987.615349][T13979] total_workingset_refault_file 2887
[  987.620779][T13979] total_swap 135168
[  987.624824][T13979] total_swapcached 45056
[  987.629272][T13979] total_pgpgin 1564187
[  987.633459][T13979] total_pgpgout 1564173
[  987.637639][T13979] total_pgfault 1645791
[  987.642018][T13979] total_pgmajfault 156
[  987.646888][T13979] total_inactive_anon 0
[  987.651855][T13979] total_active_anon 49152
[  987.652060][T13995] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  987.656346][T13979] total_inactive_file 0
[  987.656403][T13979] total_active_file 8192
[  987.656414][T13979] total_unevictable 0
[  987.656426][T13979] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.15459,pid=13978,uid=0
[  987.656523][T13979] Memory cgroup out of memory: Killed process 13978 (syz.2.15459) total-vm:93764kB, anon-rss:1132kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  987.657865][ T3397] hid-generic 0000:3000000:0000.005D: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  987.703351][T13998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  987.732868][T13927] batman_adv: batadv0: Adding interface: batadv_slave_0
[  987.740053][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  987.766425][T13927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  987.815271][T13927] batman_adv: batadv0: Adding interface: batadv_slave_1
[  987.822504][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  987.850693][T13927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  987.957477][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15468'.
[  987.966990][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15468'.
[  988.017241][ T1367] Bluetooth: hci0: Frame reassembly failed (-84)
[  988.225860][T14011] hub 2-0:1.0: USB hub found
[  988.230677][T14011] hub 2-0:1.0: 8 ports detected
[  989.964797][ T1370] bond0 (unregistering): Released all slaves
[  989.973903][ T1370] bond1 (unregistering): Released all slaves
[  989.982113][ T1370] bond2 (unregistering): Released all slaves
[  989.990261][ T1370] bond3 (unregistering): Released all slaves
[  989.998861][ T1370] bond4 (unregistering): Released all slaves
[  990.007236][ T1370] bond5 (unregistering): Released all slaves
[  990.015548][ T1370] bond6 (unregistering): Released all slaves
[  990.023961][ T1370] bond7 (unregistering): Released all slaves
[  990.032668][ T1370] bond8 (unregistering): Released all slaves
[  990.041308][ T1370] bond9 (unregistering): Released all slaves
[  990.049794][ T1370] bond10 (unregistering): Released all slaves
[  990.058610][ T1370] bond11 (unregistering): Released all slaves
[  990.068931][ T1370] bond12 (unregistering): Released all slaves
[  990.077882][ T1370] bond13 (unregistering): Released all slaves
[  990.084114][T14535] Bluetooth: hci0: command 0x1003 tx timeout
[  990.087393][ T1370] bond14 (unregistering): Released all slaves
[  990.090177][T10890] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  990.099341][ T1370] bond15 (unregistering): Released all slaves
[  990.112136][ T1370] bond16 (unregistering): Released all slaves
[  990.121048][ T1370] bond17 (unregistering): Released all slaves
[  990.130063][ T1370] bond18 (unregistering): Released all slaves
[  990.138812][ T1370] bond19 (unregistering): Released all slaves
[  990.194162][T14026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  990.207415][T14026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  990.220022][T13927] hsr_slave_0: entered promiscuous mode
[  990.226871][T13927] hsr_slave_1: entered promiscuous mode
[  990.242133][T13927] debugfs: 'hsr0' already exists in 'hsr'
[  990.242728][   T10] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x4
[  990.248219][T13927] Cannot create hsr debugfs directory
[  990.256202][   T10] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x2
[  990.265644][T14023] infiniband syz!: set active
[  990.270636][   T10] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x3
[  990.274268][T14023] infiniband syz!: added team_slave_0
[  990.290531][   T10] hid-generic 0000:3000000:0000.005E: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  990.301287][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15474'.
[  990.339103][T14023] RDS/IB: syz!: added
[  990.347094][ T1370] hsr_slave_0: left promiscuous mode
[  990.353475][ T1370] hsr_slave_1: left promiscuous mode
[  990.360772][T14023] smc: adding ib device syz! with port count 1
[  990.386275][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15478'.
[  990.395621][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15478'.
[  990.408271][T14023] smc:    ib device syz! port 1 has no pnetid
[  990.656872][T13236] Bluetooth: hci0: Frame reassembly failed (-84)
[  990.665368][T14051] Bluetooth: hci0: Frame reassembly failed (-90)
[  991.092335][T14047] syz.2.15479 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  991.106815][T14047] CPU: 0 UID: 0 PID: 14047 Comm: syz.2.15479 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  991.106844][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  991.106857][T14047] Call Trace:
[  991.106866][T14047]  <TASK>
[  991.106877][T14047]  __dump_stack+0x1d/0x30
[  991.106903][T14047]  dump_stack_lvl+0xe8/0x140
[  991.106925][T14047]  dump_stack+0x15/0x1b
[  991.107002][T14047]  dump_header+0x81/0x220
[  991.107028][T14047]  oom_kill_process+0x342/0x400
[  991.107137][T14047]  out_of_memory+0x979/0xb80
[  991.107178][T14047]  try_charge_memcg+0x610/0xa10
[  991.107214][T14047]  obj_cgroup_charge_pages+0xa6/0x150
[  991.107239][T14047]  __memcg_kmem_charge_page+0x9f/0x170
[  991.107330][T14047]  __alloc_frozen_pages_noprof+0x188/0x360
[  991.107381][T14047]  alloc_pages_mpol+0xb3/0x260
[  991.107404][T14047]  ? alloc_pages_noprof+0xf4/0x130
[  991.107443][T14047]  alloc_pages_noprof+0x90/0x130
[  991.107493][T14047]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  991.107553][T14047]  __kvmalloc_node_noprof+0x483/0x670
[  991.107593][T14047]  ? ip_set_alloc+0x24/0x30
[  991.107635][T14047]  ? ip_set_alloc+0x24/0x30
[  991.107743][T14047]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  991.107866][T14047]  ip_set_alloc+0x24/0x30
[  991.107896][T14047]  hash_netiface_create+0x282/0x740
[  991.107942][T14047]  ? __pfx_hash_netiface_create+0x10/0x10
[  991.107981][T14047]  ip_set_create+0x3cc/0x970
[  991.108194][T14047]  ? __nla_parse+0x40/0x60
[  991.108225][T14047]  nfnetlink_rcv_msg+0x4c6/0x590
[  991.108369][T14047]  netlink_rcv_skb+0x123/0x220
[  991.108457][T14047]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  991.108503][T14047]  nfnetlink_rcv+0x167/0x16c0
[  991.108611][T14047]  ? kmem_cache_free+0xe4/0x3d0
[  991.108646][T14047]  ? __kfree_skb+0x109/0x150
[  991.108729][T14047]  ? nlmon_xmit+0x4f/0x60
[  991.108754][T14047]  ? consume_skb+0x49/0x150
[  991.108848][T14047]  ? nlmon_xmit+0x4f/0x60
[  991.108900][T14047]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  991.108945][T14047]  ? __dev_queue_xmit+0x1200/0x2000
[  991.108967][T14047]  ? __dev_queue_xmit+0x182/0x2000
[  991.109069][T14047]  ? ref_tracker_free+0x37d/0x3e0
[  991.109122][T14047]  ? __netlink_deliver_tap+0x4dc/0x500
[  991.109149][T14047]  netlink_unicast+0x5c0/0x690
[  991.109188][T14047]  netlink_sendmsg+0x58b/0x6b0
[  991.109235][T14047]  ? __pfx_netlink_sendmsg+0x10/0x10
[  991.109262][T14047]  __sock_sendmsg+0x145/0x180
[  991.109296][T14047]  ____sys_sendmsg+0x31e/0x4e0
[  991.109332][T14047]  ___sys_sendmsg+0x17b/0x1d0
[  991.109363][T14047]  __x64_sys_sendmsg+0xd4/0x160
[  991.109386][T14047]  x64_sys_call+0x191e/0x3000
[  991.109475][T14047]  do_syscall_64+0xd2/0x200
[  991.109503][T14047]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  991.109540][T14047]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  991.109583][T14047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.109612][T14047] RIP: 0033:0x7f37f79bf749
[  991.109632][T14047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  991.109657][T14047] RSP: 002b:00007f37f6427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  991.109682][T14047] RAX: ffffffffffffffda RBX: 00007f37f7c15fa0 RCX: 00007f37f79bf749
[  991.109698][T14047] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  991.109715][T14047] RBP: 00007f37f7a43f91 R08: 0000000000000000 R09: 0000000000000000
[  991.109727][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  991.109778][T14047] R13: 00007f37f7c16038 R14: 00007f37f7c15fa0 R15: 00007ffd593c0648
[  991.109804][T14047]  </TASK>
[  991.109813][T14047] memory: usage 307200kB, limit 307200kB, failcnt 2605
[  991.230359][T14053] random: crng reseeded on system resumption
[  991.231340][T14047] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0
[  991.231360][T14047] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  991.231418][T14047] Memory cgroup stats for /syz2:
[  991.232268][T14047] cache 0
[  991.238487][   T29] kauditd_printk_skb: 750 callbacks suppressed
[  991.238583][   T29] audit: type=1400 audit(991.213:110834): avc:  denied  { ioctl } for  pid=14052 comm="syz.8.15482" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  991.242907][T14047] rss 0
[  991.242917][T14047] shmem 0
[  991.242923][T14047] mapped_file 0
[  991.242930][T14047] dirty 0
[  991.242952][T14047] writeback 0
[  991.542713][T14047] workingset_refault_anon 257
[  991.547535][T14047] workingset_refault_file 3042
[  991.552298][T14047] swap 172032
[  991.555623][T14047] swapcached 12288
[  991.559356][T14047] pgpgin 1568437
[  991.562915][T14047] pgpgout 1568434
[  991.566592][T14047] pgfault 1651265
[  991.570227][T14047] pgmajfault 167
[  991.574368][T14047] inactive_anon 12288
[  991.578364][T14047] active_anon 0
[  991.581856][T14047] inactive_file 0
[  991.585649][T14047] active_file 0
[  991.589158][T14047] unevictable 0
[  991.592754][T14047] hierarchical_memory_limit 314572800
[  991.598356][T14047] hierarchical_memsw_limit 9223372036854771712
[  991.604630][T14047] total_cache 0
[  991.608103][T14047] total_rss 0
[  991.611400][T14047] total_shmem 0
[  991.614984][T14047] total_mapped_file 0
[  991.618980][T14047] total_dirty 0
[  991.622494][T14047] total_writeback 0
[  991.626525][T14047] total_workingset_refault_anon 257
[  991.631847][T14047] total_workingset_refault_file 3042
[  991.637334][T14047] total_swap 172032
[  991.641187][T14047] total_swapcached 12288
[  991.645524][T14047] total_pgpgin 1568437
[  991.649771][T14047] total_pgpgout 1568434
[  991.654011][T14047] total_pgfault 1651265
[  991.658252][T14047] total_pgmajfault 167
[  991.662729][T14047] total_inactive_anon 12288
[  991.667297][T14047] total_active_anon 0
[  991.671669][T14047] total_inactive_file 0
[  991.676424][T14047] total_active_file 0
[  991.680417][T14047] total_unevictable 0
[  991.684460][T14047] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.15479,pid=14046,uid=0
[  991.699348][T14047] Memory cgroup out of memory: Killed process 14046 (syz.2.15479) total-vm:93764kB, anon-rss:1132kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  991.722849][T14053] netlink: 'syz.8.15482': attribute type 12 has an invalid length.
[  991.730954][T14053] netlink: 132 bytes leftover after parsing attributes in process `syz.8.15482'.
[  991.746646][T14053] netdevsim netdevsim8: Direct firmware load for < failed with error -2
[  992.022931][T13927] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  992.059691][T13927] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  992.083546][T13927] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  992.103419][T13927] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  992.154112][T13927] 8021q: adding VLAN 0 to HW filter on device bond0
[  992.168158][T13927] 8021q: adding VLAN 0 to HW filter on device team0
[  992.178836][ T1369] bridge0: port 1(bridge_slave_0) entered blocking state
[  992.186608][ T1369] bridge0: port 1(bridge_slave_0) entered forwarding state
[  992.200614][T13260] bridge0: port 2(bridge_slave_1) entered blocking state
[  992.209576][T13260] bridge0: port 2(bridge_slave_1) entered forwarding state
[  992.227578][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15488'.
[  992.285000][T13927] 8021q: adding VLAN 0 to HW filter on device batadv0
[  992.397634][T13927] veth0_vlan: entered promiscuous mode
[  992.407003][T13927] veth1_vlan: entered promiscuous mode
[  992.422926][T13927] veth0_macvtap: entered promiscuous mode
[  992.430686][T13927] veth1_macvtap: entered promiscuous mode
[  992.441648][T13927] batman_adv: batadv0: Interface activated: batadv_slave_0
[  992.453242][T13927] batman_adv: batadv0: Interface activated: batadv_slave_1
[  992.464847][ T1369] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  992.474333][ T1369] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  992.484976][ T1369] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  992.495426][ T1369] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  992.536446][T14098] pim6reg1: entered promiscuous mode
[  992.541798][T14098] pim6reg1: entered allmulticast mode
[  992.694701][   T29] audit: type=1326 audit(992.673:110835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.8.15489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94daf749 code=0x7ffc0000
[  992.728439][T10890] Bluetooth: hci0: command 0x1003 tx timeout
[  992.734905][T14535] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  992.737832][T14102] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15490'.
[  992.757562][   T29] audit: type=1326 audit(992.673:110836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.8.15489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94daf749 code=0x7ffc0000
[  992.781959][   T29] audit: type=1326 audit(992.673:110837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.8.15489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94daf749 code=0x7ffc0000
[  992.805884][   T29] audit: type=1326 audit(992.673:110838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.8.15489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94daf749 code=0x7ffc0000
[  992.829187][   T29] audit: type=1326 audit(992.673:110839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.8.15489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94daf749 code=0x7ffc0000
[  992.847579][T14105] FAULT_INJECTION: forcing a failure.
[  992.847579][T14105] name failslab, interval 1, probability 0, space 0, times 0
[  992.853080][   T29] audit: type=1326 audit(992.673:110840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.8.15489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f94daf749 code=0x7ffc0000
[  992.865698][T14105] CPU: 0 UID: 0 PID: 14105 Comm: syz.0.15491 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  992.865810][T14105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  992.865830][T14105] Call Trace:
[  992.865840][T14105]  <TASK>
[  992.865853][T14105]  __dump_stack+0x1d/0x30
[  992.865885][T14105]  dump_stack_lvl+0xe8/0x140
[  992.865998][T14105]  dump_stack+0x15/0x1b
[  992.866061][T14105]  should_fail_ex+0x265/0x280
[  992.866127][T14105]  ? bpf_prog_alloc_no_stats+0xc4/0x3b0
[  992.866175][T14105]  should_failslab+0x8c/0xb0
[  992.866214][T14105]  __kmalloc_cache_noprof+0x4c/0x4a0
[  992.866265][T14105]  bpf_prog_alloc_no_stats+0xc4/0x3b0
[  992.866345][T14105]  bpf_prog_alloc+0x3c/0x150
[  992.866419][T14105]  bpf_prog_load+0x506/0x1100
[  992.866578][T14105]  ? security_bpf+0x2b/0x90
[  992.866618][T14105]  __sys_bpf+0x469/0x7c0
[  992.866655][T14105]  __x64_sys_bpf+0x41/0x50
[  992.866777][T14105]  x64_sys_call+0x2aee/0x3000
[  992.866807][T14105]  do_syscall_64+0xd2/0x200
[  992.866839][T14105]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  992.866998][T14105]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  992.867045][T14105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  992.867156][T14105] RIP: 0033:0x7fe34eb2f749
[  992.867179][T14105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  992.867205][T14105] RSP: 002b:00007fe34d58f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  992.867233][T14105] RAX: ffffffffffffffda RBX: 00007fe34ed85fa0 RCX: 00007fe34eb2f749
[  992.867251][T14105] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  992.867270][T14105] RBP: 00007fe34d58f090 R08: 0000000000000000 R09: 0000000000000000
[  992.867287][T14105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  992.867351][T14105] R13: 00007fe34ed86038 R14: 00007fe34ed85fa0 R15: 00007ffedb38c7d8
[  992.867423][T14105]  </TASK>
[  992.962387][T14110] Bluetooth: hci0: Frame reassembly failed (-90)
[  992.966568][   T29] audit: type=1326 audit(992.673:110841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.8.15489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94daf749 code=0x7ffc0000
[  993.053393][T14114] bridge_slave_0: left allmulticast mode
[  993.057507][   T29] audit: type=1326 audit(992.673:110842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.8.15489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94daf749 code=0x7ffc0000
[  993.065561][T14114] bridge_slave_0: left promiscuous mode
[  993.073772][   T29] audit: type=1326 audit(992.673:110843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.8.15489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94daf749 code=0x7ffc0000
[  993.081920][T14114] bridge0: port 1(bridge_slave_0) entered disabled state
[  993.173419][T14116] netlink: 'syz.7.15495': attribute type 10 has an invalid length.
[  993.193744][T14116] netlink: 40 bytes leftover after parsing attributes in process `syz.7.15495'.
[  993.217025][T14114] bridge_slave_1: left allmulticast mode
[  993.223093][T14114] bridge_slave_1: left promiscuous mode
[  993.229059][T14114] bridge0: port 2(bridge_slave_1) entered disabled state
[  993.239561][T14121] FAULT_INJECTION: forcing a failure.
[  993.239561][T14121] name failslab, interval 1, probability 0, space 0, times 0
[  993.253099][T14121] CPU: 0 UID: 0 PID: 14121 Comm: syz.2.15497 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  993.253144][T14121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  993.253161][T14121] Call Trace:
[  993.253168][T14121]  <TASK>
[  993.253255][T14121]  __dump_stack+0x1d/0x30
[  993.253284][T14121]  dump_stack_lvl+0xe8/0x140
[  993.253307][T14121]  dump_stack+0x15/0x1b
[  993.253394][T14121]  should_fail_ex+0x265/0x280
[  993.253436][T14121]  should_failslab+0x8c/0xb0
[  993.253472][T14121]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[  993.253512][T14121]  ? sidtab_sid2str_get+0xa0/0x130
[  993.253628][T14121]  kmemdup_noprof+0x2b/0x70
[  993.253660][T14121]  sidtab_sid2str_get+0xa0/0x130
[  993.253696][T14121]  security_sid_to_context_core+0x1eb/0x2e0
[  993.253755][T14121]  security_sid_to_context+0x27/0x40
[  993.253791][T14121]  avc_audit_post_callback+0x10f/0x520
[  993.253885][T14121]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  993.253950][T14121]  common_lsm_audit+0x1bb/0x230
[  993.253985][T14121]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  993.254104][T14121]  ? avc_denied+0xe4/0x100
[  993.254177][T14121]  slow_avc_audit+0x104/0x140
[  993.254231][T14121]  avc_has_perm+0x13a/0x180
[  993.254253][T14121]  selinux_lsm_setattr+0x121/0x660
[  993.254307][T14121]  selinux_setprocattr+0x4f/0x70
[  993.254398][T14121]  security_setprocattr+0x1a7/0x1d0
[  993.254504][T14121]  proc_pid_attr_write+0x1eb/0x220
[  993.254571][T14121]  ? __pfx_proc_pid_attr_write+0x10/0x10
[  993.254600][T14121]  vfs_write+0x269/0x960
[  993.254684][T14121]  ? __rcu_read_unlock+0x4f/0x70
[  993.254733][T14121]  ? __fget_files+0x184/0x1c0
[  993.254841][T14121]  ksys_write+0xda/0x1a0
[  993.254874][T14121]  __x64_sys_write+0x40/0x50
[  993.254941][T14121]  x64_sys_call+0x2802/0x3000
[  993.254978][T14121]  do_syscall_64+0xd2/0x200
[  993.255005][T14121]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  993.255033][T14121]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  993.255075][T14121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.255184][T14121] RIP: 0033:0x7f37f79bf749
[  993.255204][T14121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  993.255228][T14121] RSP: 002b:00007f37f6427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  993.255253][T14121] RAX: ffffffffffffffda RBX: 00007f37f7c15fa0 RCX: 00007f37f79bf749
[  993.255340][T14121] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000003
[  993.255352][T14121] RBP: 00007f37f6427090 R08: 0000000000000000 R09: 0000000000000000
[  993.255364][T14121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  993.255376][T14121] R13: 00007f37f7c16038 R14: 00007f37f7c15fa0 R15: 00007ffd593c0648
[  993.255395][T14121]  </TASK>
[  993.258551][T14114] bond0: (slave bond_slave_0): Releasing backup interface
[  993.546544][T14114] bond0: (slave bond_slave_1): Releasing backup interface
[  993.559655][T14114] team0: Port device team_slave_0 removed
[  993.569354][T14114] team0: Port device team_slave_1 removed
[  993.580156][T14114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  993.641155][T14116] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  993.676063][ T3422] syz!: Port: 1 Link DOWN
[  993.706105][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15502'.
[  993.727765][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15501'.
[  993.736415][    T9] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x4
[  993.745341][    T9] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x2
[  993.756873][    T9] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x3
[  993.773574][    T9] hid-generic 0000:3000000:0000.005F: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  993.995449][T14147] FAULT_INJECTION: forcing a failure.
[  993.995449][T14147] name failslab, interval 1, probability 0, space 0, times 0
[  994.008422][T14147] CPU: 0 UID: 0 PID: 14147 Comm: syz.8.15506 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  994.008453][T14147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  994.008469][T14147] Call Trace:
[  994.008537][T14147]  <TASK>
[  994.008547][T14147]  __dump_stack+0x1d/0x30
[  994.008576][T14147]  dump_stack_lvl+0xe8/0x140
[  994.008603][T14147]  dump_stack+0x15/0x1b
[  994.008678][T14147]  should_fail_ex+0x265/0x280
[  994.008720][T14147]  should_failslab+0x8c/0xb0
[  994.008812][T14147]  __kvmalloc_node_noprof+0x12e/0x670
[  994.008855][T14147]  ? alloc_fdtable+0x115/0x1d0
[  994.008886][T14147]  alloc_fdtable+0x115/0x1d0
[  994.008910][T14147]  dup_fd+0x4c7/0x540
[  994.008956][T14147]  ? _raw_spin_unlock+0x26/0x50
[  994.008984][T14147]  ksys_unshare+0x346/0x6d0
[  994.009025][T14147]  ? ksys_write+0x192/0x1a0
[  994.009056][T14147]  __x64_sys_unshare+0x1f/0x30
[  994.009163][T14147]  x64_sys_call+0x2915/0x3000
[  994.009193][T14147]  do_syscall_64+0xd2/0x200
[  994.009251][T14147]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  994.009284][T14147]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  994.009316][T14147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  994.009344][T14147] RIP: 0033:0x7f1f94daf749
[  994.009409][T14147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  994.009490][T14147] RSP: 002b:00007f1f937ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  994.009513][T14147] RAX: ffffffffffffffda RBX: 00007f1f95006090 RCX: 00007f1f94daf749
[  994.009554][T14147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400
[  994.009570][T14147] RBP: 00007f1f937ee090 R08: 0000000000000000 R09: 0000000000000000
[  994.009585][T14147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  994.009602][T14147] R13: 00007f1f95006128 R14: 00007f1f95006090 R15: 00007ffff8b9e938
[  994.009634][T14147]  </TASK>
[  994.363982][T14158] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15510'.
[  994.642149][T14184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15521'.
[  994.723933][T14798] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x4
[  994.731657][T14798] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x2
[  994.745894][T14798] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x3
[  994.755744][T14798] hid-generic 0000:3000000:0000.0060: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  994.769013][T14200] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  994.781320][T14200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  994.928966][T14213] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15534'.
[  994.954718][T14216] random: crng reseeded on system resumption
[  994.968464][T14216] netlink: 'syz.8.15535': attribute type 12 has an invalid length.
[  994.976696][T14216] netlink: 132 bytes leftover after parsing attributes in process `syz.8.15535'.
[  994.986723][T14216] netdevsim netdevsim8: Direct firmware load for < failed with error -2
[  995.009830][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15537'.
[  995.036468][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15539'.
[  995.045942][T14535] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  995.078822][T14222] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15538'.
[  995.114006][ T3397] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x4
[  995.121752][ T3397] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x2
[  995.132262][ T3397] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x3
[  995.142009][ T3397] hid-generic 0000:3000000:0000.0061: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  995.162858][T14234] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  995.174201][T14234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  995.256479][T14246] random: crng reseeded on system resumption
[  995.269817][T14246] netlink: 'syz.0.15549': attribute type 12 has an invalid length.
[  995.318700][T14251] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  995.326423][T14251] batman_adv: batadv0: Removing interface: batadv_slave_0
[  995.334562][T14251] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  995.342261][T14251] batman_adv: batadv0: Removing interface: batadv_slave_1
[  995.626277][T14267] bridge13: entered promiscuous mode
[  995.773755][T14798] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x4
[  995.782336][T14798] hid-generic 0000:3000000:0000.0062: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  995.995350][T14287] loop5: detected capacity change from 0 to 512
[  996.052236][T14295] bridge11: entered promiscuous mode
[  996.128687][T14301] team0 (unregistering): Port device team_slave_0 removed
[  996.144239][T14301] team0 (unregistering): Port device team_slave_1 removed
[  996.215425][T14798] hid-generic 0000:3000000:0000.0063: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  996.564053][   T29] kauditd_printk_skb: 609 callbacks suppressed
[  996.564148][   T29] audit: type=1326 audit(996.543:111453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.5.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1eae86b829 code=0x7ffc0000
[  996.601709][   T29] audit: type=1326 audit(996.543:111454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.5.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eae8cf749 code=0x7ffc0000
[  996.626675][   T29] audit: type=1326 audit(996.543:111455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.5.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eae8cf749 code=0x7ffc0000
[  996.709303][T14330] bridge14: entered promiscuous mode
[  996.753583][T13260] Bluetooth: hci0: Frame reassembly failed (-90)
[  996.781132][T13260] Bluetooth: hci1: Frame reassembly failed (-84)
[  997.129440][T14798] hid-generic 0000:3000000:0000.0064: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  997.141904][T14347] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  997.152784][T14347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  997.228433][   T29] audit: type=1326 audit(997.203:111456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.2.15594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[  997.252460][   T29] audit: type=1326 audit(997.203:111457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.2.15594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[  997.276273][T14353] bridge27: entered promiscuous mode
[  997.276925][   T29] audit: type=1326 audit(997.203:111458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.2.15594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[  997.306309][   T29] audit: type=1326 audit(997.203:111459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.2.15594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[  997.311862][T14355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  997.330463][   T29] audit: type=1326 audit(997.203:111460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.2.15594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[  997.330502][   T29] audit: type=1326 audit(997.203:111461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14350 comm="syz.2.15594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[  997.338285][T14355] batman_adv: batadv0: Removing interface: batadv_slave_0
[  997.394195][T14355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  997.401996][T14355] batman_adv: batadv0: Removing interface: batadv_slave_1
[  997.653138][   T29] audit: type=1326 audit(997.623:111462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14367 comm="syz.0.15601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34eb2f749 code=0x7ffc0000
[  997.696005][T14786] hid-generic 0000:3000000:0000.0065: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  997.709616][T14370] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  997.721678][T14370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  997.862197][T14786] hid-generic 0000:3000000:0000.0066: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  997.907107][ T3354] hid-generic 0000:3000000:0000.0067: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  997.921018][T14393] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  997.935789][T14393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  998.225562][T14786] hid-generic 0000:3000000:0000.0068: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  998.238596][T14409] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  998.249700][T14409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  998.515237][T14418] __nla_validate_parse: 13 callbacks suppressed
[  998.515265][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15621'.
[  998.803142][T10890] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  998.809516][T14535] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  998.810453][ T3539] Bluetooth: hci1: command 0x1003 tx timeout
[  998.826519][T14424] random: crng reseeded on system resumption
[  998.848855][T14424] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[  999.123106][T31517] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  999.336953][ T1350] Bluetooth: hci0: Frame reassembly failed (-84)
[  999.862691][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15643'.
[  999.872037][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15643'.
[  999.922276][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15645'.
[  999.931748][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15645'.
[ 1000.164392][T14500] hub 5-0:1.0: USB hub found
[ 1000.169240][T14500] hub 5-0:1.0: 8 ports detected
[ 1000.218724][T14504] random: crng reseeded on system resumption
[ 1000.308738][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15657'.
[ 1000.340447][T14512] bridge12: entered promiscuous mode
[ 1000.365184][T14514] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15659'.
[ 1000.620192][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15664'.
[ 1000.661640][T14545] bridge28: entered promiscuous mode
[ 1000.695841][T14549] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15671'.
[ 1000.727322][T13249] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1000.983629][T14578] bridge13: entered promiscuous mode
[ 1001.014200][T14580] netlink: '+}[@': attribute type 1 has an invalid length.
[ 1001.021760][T14580] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[ 1001.363044][T10890] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1001.364505][ T3539] Bluetooth: hci0: command 0x1003 tx timeout
[ 1001.469091][T14613] bridge14: entered promiscuous mode
[ 1001.496469][T14615] hub 5-0:1.0: USB hub found
[ 1001.501699][T14615] hub 5-0:1.0: 8 ports detected
[ 1001.588597][   T29] kauditd_printk_skb: 621 callbacks suppressed
[ 1001.588621][   T29] audit: type=1400 audit(1001.563:112084): avc:  denied  { execmem } for  pid=14621 comm="syz.7.15697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1002.063768][T14596] delete_channel: no stack
[ 1002.099385][T14625] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1002.106896][T14625] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1002.114991][T14625] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1002.122963][T14625] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1002.137606][   T29] audit: type=1326 audit(1002.113:112085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.8.15700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94daf749 code=0x7ffc0000
[ 1002.162729][   T29] audit: type=1326 audit(1002.113:112086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.8.15700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f1f94daf749 code=0x7ffc0000
[ 1002.189407][   T29] audit: type=1326 audit(1002.113:112087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.8.15700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94daf749 code=0x7ffc0000
[ 1002.214963][   T29] audit: type=1326 audit(1002.113:112088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.8.15700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94daf749 code=0x7ffc0000
[ 1002.297266][   T29] audit: type=1400 audit(1002.273:112089): avc:  denied  { associate } for  pid=14630 comm="syz.8.15701" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1002.326071][   T29] audit: type=1326 audit(1002.303:112090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14614 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34eb2f749 code=0x7ffc0000
[ 1002.351874][   T29] audit: type=1326 audit(1002.303:112091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14614 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34eb2f749 code=0x7ffc0000
[ 1002.428534][   T29] audit: type=1400 audit(1002.403:112092): avc:  denied  { read write } for  pid=14636 comm="syz.8.15703" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1002.454012][   T29] audit: type=1400 audit(1002.403:112093): avc:  denied  { ioctl open } for  pid=14636 comm="syz.8.15703" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1002.454179][T14637] random: crng reseeded on system resumption
[ 1002.530233][T14637] netdevsim netdevsim8: Direct firmware load for  failed with error -2
[ 1002.598016][ T3397] hid_parser_main: 20 callbacks suppressed
[ 1002.598037][ T3397] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x4
[ 1002.615088][ T3397] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x2
[ 1002.624899][ T3397] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x3
[ 1002.654955][ T3397] hid-generic 0000:3000000:0000.0069: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1002.677465][T14654] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1002.701416][T14649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1002.771349][T14660] dummy0: entered promiscuous mode
[ 1002.803053][T31517] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1002.916287][T14667] dummy0 (unregistering): left promiscuous mode
[ 1004.296340][T14696] __nla_validate_parse: 11 callbacks suppressed
[ 1004.296403][T14696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15723'.
[ 1004.342417][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15725'.
[ 1004.523213][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15733'.
[ 1004.532407][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15733'.
[ 1004.586457][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15733'.
[ 1004.607872][T14732] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15736'.
[ 1004.631768][T14734] pim6reg: entered allmulticast mode
[ 1004.661273][T14734] pim6reg: left allmulticast mode
[ 1004.813860][ T3397] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x4
[ 1004.821809][ T3397] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x2
[ 1004.856063][ T3397] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x3
[ 1004.873731][ T3397] hid-generic 0000:3000000:0000.006A: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1004.924954][T14775] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15750'.
[ 1004.968268][ T1370] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1005.012270][T14781] SELinux: failed to load policy
[ 1005.056074][T14794] netlink: 'syz.8.15759': attribute type 1 has an invalid length.
[ 1005.064048][T14794] netlink: 224 bytes leftover after parsing attributes in process `syz.8.15759'.
[ 1005.096164][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15760'.
[ 1005.112845][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15758'.
[ 1005.205068][T14798] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x4
[ 1005.212869][T14798] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x2
[ 1005.223165][T14798] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x3
[ 1005.232376][T14798] hid-generic 0000:3000000:0000.006B: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1005.705191][T14835] bridge29: entered promiscuous mode
[ 1005.731747][ T3422] hid-generic 0000:3000000:0000.006C: unknown main item tag 0x4
[ 1005.740874][ T3422] hid-generic 0000:3000000:0000.006C: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1005.753775][T14837] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1005.766404][T14837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1006.002160][T14857] can0: slcan on ttyS3.
[ 1006.167412][T14867] bridge2: entered promiscuous mode
[ 1006.180065][T14867] bridge3: entered promiscuous mode
[ 1006.185685][T14856] can0 (unregistered): slcan off ttyS3.
[ 1006.190223][T14867] bridge4: entered promiscuous mode
[ 1006.202429][T14867] bridge5: entered promiscuous mode
[ 1006.212214][T14867] bridge6: entered promiscuous mode
[ 1006.230742][T14867] bridge7: entered promiscuous mode
[ 1006.231196][T14798] hid-generic 0000:3000000:0000.006D: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1006.249398][T14874] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1006.250644][T14867] bridge8: entered promiscuous mode
[ 1006.260664][T14874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1006.272328][T14867] bridge9: entered promiscuous mode
[ 1006.294125][T14867] bridge10: entered promiscuous mode
[ 1006.307434][T14867] bridge11: entered promiscuous mode
[ 1006.323528][T14867] bridge12: entered promiscuous mode
[ 1006.337875][T14867] bridge13: entered promiscuous mode
[ 1006.350085][T14867] bridge14: entered promiscuous mode
[ 1006.360594][T14867] bridge15: entered promiscuous mode
[ 1006.386202][T14867] bridge16: entered promiscuous mode
[ 1006.400452][T14867] bridge17: entered promiscuous mode
[ 1006.445864][T14867] bridge18: entered promiscuous mode
[ 1006.463799][T14867] bridge19: entered promiscuous mode
[ 1006.474875][T14867] bridge20: entered promiscuous mode
[ 1006.490843][T14867] bridge21: entered promiscuous mode
[ 1006.509500][T14867] bridge22: entered promiscuous mode
[ 1006.524493][T14867] bridge23: entered promiscuous mode
[ 1006.535247][T14867] bridge24: entered promiscuous mode
[ 1006.546219][T14867] bridge25: entered promiscuous mode
[ 1006.556618][T14867] bridge26: entered promiscuous mode
[ 1006.577431][T14867] bridge27: entered promiscuous mode
[ 1006.590183][T14867] bridge28: entered promiscuous mode
[ 1006.602845][T14867] bridge29: entered promiscuous mode
[ 1006.617305][T14867] bridge30: entered promiscuous mode
[ 1006.628439][T14867] bridge31: entered promiscuous mode
[ 1006.641776][T14867] bridge32: entered promiscuous mode
[ 1006.655247][T14867] bridge33: entered promiscuous mode
[ 1006.677032][T14867] bridge34: entered promiscuous mode
[ 1006.686141][   T29] kauditd_printk_skb: 658 callbacks suppressed
[ 1006.686212][   T29] audit: type=1326 audit(1006.663:112752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.7.15793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[ 1006.717026][T14897] FAULT_INJECTION: forcing a failure.
[ 1006.717026][T14897] name failslab, interval 1, probability 0, space 0, times 0
[ 1006.720170][   T29] audit: type=1326 audit(1006.663:112753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.7.15793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[ 1006.729865][T14897] CPU: 1 UID: 0 PID: 14897 Comm: syz.7.15793 Not tainted syzkaller #0 PREEMPT(voluntary) 
[ 1006.729905][T14897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1006.729973][T14897] Call Trace:
[ 1006.729982][T14897]  <TASK>
[ 1006.729993][T14897]  __dump_stack+0x1d/0x30
[ 1006.730024][T14897]  dump_stack_lvl+0xe8/0x140
[ 1006.730052][T14897]  dump_stack+0x15/0x1b
[ 1006.730077][T14897]  should_fail_ex+0x265/0x280
[ 1006.730124][T14897]  should_failslab+0x8c/0xb0
[ 1006.730242][T14897]  kmem_cache_alloc_noprof+0x50/0x480
[ 1006.730281][T14897]  ? audit_log_start+0x342/0x720
[ 1006.730313][T14897]  audit_log_start+0x342/0x720
[ 1006.730368][T14897]  ? bpf_trace_run3+0x12c/0x1d0
[ 1006.730412][T14897]  audit_seccomp+0x48/0x100
[ 1006.730455][T14897]  ? __seccomp_filter+0x82d/0x1250
[ 1006.730520][T14897]  __seccomp_filter+0x83e/0x1250
[ 1006.730568][T14897]  ? mntput+0x52/0x80
[ 1006.730585][T14897]  ? path_put+0x2f/0x40
[ 1006.730623][T14897]  __secure_computing+0x82/0x150
[ 1006.730669][T14897]  syscall_trace_enter+0xcf/0x1e0
[ 1006.730710][T14897]  do_syscall_64+0xac/0x200
[ 1006.730739][T14897]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1006.730833][T14897]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1006.730880][T14897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1006.730914][T14897] RIP: 0033:0x7f210d6fe15c
[ 1006.730936][T14897] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1006.731109][T14897] RSP: 002b:00007f210c15f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1006.731181][T14897] RAX: ffffffffffffffda RBX: 00007f210d955fa0 RCX: 00007f210d6fe15c
[ 1006.731200][T14897] RDX: 000000000000000f RSI: 00007f210c15f0a0 RDI: 0000000000000006
[ 1006.731217][T14897] RBP: 00007f210c15f090 R08: 0000000000000000 R09: 0000000000000000
[ 1006.731234][T14897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1006.731252][T14897] R13: 00007f210d956038 R14: 00007f210d955fa0 R15: 00007ffc78f861a8
[ 1006.731280][T14897]  </TASK>
[ 1006.731291][T14897] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64
[ 1006.753148][   T29] audit: type=1326 audit(1006.693:112754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.7.15793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f210d6fdf90 code=0x7ffc0000
[ 1006.753186][   T29] audit: type=1326 audit(1006.693:112755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.7.15793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f210d6fe1ff code=0x7ffc0000
[ 1006.763204][T14897] audit: out of memory in audit_log_start
[ 1006.773351][   T29] audit: type=1326 audit(1006.693:112756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.7.15793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[ 1007.043769][T10890] Bluetooth: hci0: command 0x1003 tx timeout
[ 1007.047213][   T29] audit: type=1326 audit(1006.863:112757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.7.15793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f210d6fe1ff code=0x7ffc0000
[ 1007.074568][T31517] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1007.074583][   T29] audit: type=1326 audit(1006.863:112758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.7.15793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f210d6fe3aa code=0x7ffc0000
[ 1007.074619][   T29] audit: type=1326 audit(1006.863:112759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.7.15793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[ 1007.179851][ T1350] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1007.307177][T14923] netlink: 'syz.7.15802': attribute type 1 has an invalid length.
[ 1007.398616][T14935] bridge15: entered promiscuous mode
[ 1007.416313][ T1350] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1007.591371][T14957] netlink: 'syz.7.15817': attribute type 1 has an invalid length.
[ 1007.747027][T14966] bridge30: entered promiscuous mode
[ 1007.778624][T14964] FAULT_INJECTION: forcing a failure.
[ 1007.778624][T14964] name failslab, interval 1, probability 0, space 0, times 0
[ 1007.791513][T14964] CPU: 1 UID: 0 PID: 14964 Comm: syz.7.15818 Not tainted syzkaller #0 PREEMPT(voluntary) 
[ 1007.791548][T14964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1007.791564][T14964] Call Trace:
[ 1007.791573][T14964]  <TASK>
[ 1007.791582][T14964]  __dump_stack+0x1d/0x30
[ 1007.791609][T14964]  dump_stack_lvl+0xe8/0x140
[ 1007.791690][T14964]  dump_stack+0x15/0x1b
[ 1007.791714][T14964]  should_fail_ex+0x265/0x280
[ 1007.791758][T14964]  should_failslab+0x8c/0xb0
[ 1007.791793][T14964]  kmem_cache_alloc_noprof+0x50/0x480
[ 1007.791958][T14964]  ? alloc_empty_file+0x76/0x200
[ 1007.792030][T14964]  alloc_empty_file+0x76/0x200
[ 1007.792093][T14964]  alloc_file_pseudo+0xc6/0x160
[ 1007.792191][T14964]  hugetlb_file_setup+0x2a6/0x3d0
[ 1007.792228][T14964]  ksys_mmap_pgoff+0x157/0x310
[ 1007.792252][T14964]  x64_sys_call+0x14a3/0x3000
[ 1007.792285][T14964]  do_syscall_64+0xd2/0x200
[ 1007.792310][T14964]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1007.792344][T14964]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1007.792384][T14964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1007.792417][T14964] RIP: 0033:0x7f210d6ff749
[ 1007.792436][T14964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1007.792457][T14964] RSP: 002b:00007f210c13e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1007.792511][T14964] RAX: ffffffffffffffda RBX: 00007f210d956090 RCX: 00007f210d6ff749
[ 1007.792526][T14964] RDX: 0000000000000003 RSI: 0000000000800000 RDI: 0000200000800000
[ 1007.792541][T14964] RBP: 00007f210c13e090 R08: ffffffffffffffff R09: 0000000000000000
[ 1007.792556][T14964] R10: 0000000000042032 R11: 0000000000000246 R12: 0000000000000001
[ 1007.792620][T14964] R13: 00007f210d956128 R14: 00007f210d956090 R15: 00007ffc78f861a8
[ 1007.792643][T14964]  </TASK>
[ 1008.146371][ T3397] hid_parser_main: 5 callbacks suppressed
[ 1008.146394][ T3397] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x4
[ 1008.160406][ T3397] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x2
[ 1008.168648][ T3397] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x3
[ 1008.177729][ T3397] hid-generic 0000:3000000:0000.006E: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1008.431658][T14998] bridge35: entered promiscuous mode
[ 1008.492553][T15006] bridge36: entered promiscuous mode
[ 1008.520024][T15011] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1008.531698][T15011] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1008.540357][T15011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1008.548370][T15011] IPv6: NLM_F_CREATE should be set when creating new route
[ 1008.628859][T15027] netlink: '+}[@': attribute type 1 has an invalid length.
[ 1008.810430][T15044] netdevsim netdevsim5: Direct firmware load for ÿÿÿÿ failed with error -2
[ 1008.839036][T15046] bridge37: entered promiscuous mode
[ 1009.203195][ T3539] Bluetooth: hci0: command 0x1003 tx timeout
[ 1009.203197][T31517] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1009.255441][T15054] hub 5-0:1.0: USB hub found
[ 1009.261965][T15054] hub 5-0:1.0: 8 ports detected
[ 1009.370013][T15050] syz.5.15849 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0
[ 1009.384430][T15050] CPU: 0 UID: 0 PID: 15050 Comm: syz.5.15849 Not tainted syzkaller #0 PREEMPT(voluntary) 
[ 1009.384464][T15050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1009.384520][T15050] Call Trace:
[ 1009.384528][T15050]  <TASK>
[ 1009.384539][T15050]  __dump_stack+0x1d/0x30
[ 1009.384638][T15050]  dump_stack_lvl+0xe8/0x140
[ 1009.384665][T15050]  dump_stack+0x15/0x1b
[ 1009.384746][T15050]  dump_header+0x81/0x220
[ 1009.384767][T15050]  oom_kill_process+0x342/0x400
[ 1009.384810][T15050]  out_of_memory+0x979/0xb80
[ 1009.384917][T15050]  try_charge_memcg+0x610/0xa10
[ 1009.384960][T15050]  obj_cgroup_charge_pages+0xa6/0x150
[ 1009.385051][T15050]  __memcg_kmem_charge_page+0x9f/0x170
[ 1009.385075][T15050]  __alloc_frozen_pages_noprof+0x188/0x360
[ 1009.385201][T15050]  alloc_pages_mpol+0xb3/0x260
[ 1009.385237][T15050]  ? alloc_pages_noprof+0xf4/0x130
[ 1009.385334][T15050]  alloc_pages_noprof+0x90/0x130
[ 1009.385354][T15050]  __vmalloc_node_range_noprof+0x7a5/0xed0
[ 1009.385410][T15050]  __kvmalloc_node_noprof+0x483/0x670
[ 1009.385501][T15050]  ? ip_set_alloc+0x24/0x30
[ 1009.385536][T15050]  ? ip_set_alloc+0x24/0x30
[ 1009.385618][T15050]  ? __kmalloc_cache_noprof+0x249/0x4a0
[ 1009.385651][T15050]  ip_set_alloc+0x24/0x30
[ 1009.385685][T15050]  hash_netiface_create+0x282/0x740
[ 1009.385731][T15050]  ? __pfx_hash_netiface_create+0x10/0x10
[ 1009.385777][T15050]  ip_set_create+0x3cc/0x970
[ 1009.385817][T15050]  ? nfnetlink_rcv_msg+0x4a7/0x590
[ 1009.385964][T15050]  nfnetlink_rcv_msg+0x4c6/0x590
[ 1009.386056][T15050]  netlink_rcv_skb+0x123/0x220
[ 1009.386099][T15050]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1009.386133][T15050]  nfnetlink_rcv+0x167/0x16c0
[ 1009.386191][T15050]  ? kmem_cache_free+0xe4/0x3d0
[ 1009.386241][T15050]  ? __kfree_skb+0x109/0x150
[ 1009.386378][T15050]  ? nlmon_xmit+0x4f/0x60
[ 1009.386410][T15050]  ? consume_skb+0x49/0x150
[ 1009.386465][T15050]  ? nlmon_xmit+0x4f/0x60
[ 1009.386496][T15050]  ? dev_hard_start_xmit+0x3b0/0x3e0
[ 1009.386537][T15050]  ? __dev_queue_xmit+0x1200/0x2000
[ 1009.386608][T15050]  ? __dev_queue_xmit+0x182/0x2000
[ 1009.386628][T15050]  ? ref_tracker_free+0x37d/0x3e0
[ 1009.386732][T15050]  ? __netlink_deliver_tap+0x4dc/0x500
[ 1009.386771][T15050]  netlink_unicast+0x5c0/0x690
[ 1009.386903][T15050]  netlink_sendmsg+0x58b/0x6b0
[ 1009.386932][T15050]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1009.386958][T15050]  __sock_sendmsg+0x145/0x180
[ 1009.386992][T15050]  ____sys_sendmsg+0x31e/0x4e0
[ 1009.387092][T15050]  ___sys_sendmsg+0x17b/0x1d0
[ 1009.387134][T15050]  __x64_sys_sendmsg+0xd4/0x160
[ 1009.387164][T15050]  x64_sys_call+0x191e/0x3000
[ 1009.387207][T15050]  do_syscall_64+0xd2/0x200
[ 1009.387248][T15050]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1009.387286][T15050]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1009.387322][T15050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1009.387348][T15050] RIP: 0033:0x7f1eae8cf749
[ 1009.387371][T15050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1009.387404][T15050] RSP: 002b:00007f1ead337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1009.387523][T15050] RAX: ffffffffffffffda RBX: 00007f1eaeb25fa0 RCX: 00007f1eae8cf749
[ 1009.387541][T15050] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[ 1009.387558][T15050] RBP: 00007f1eae953f91 R08: 0000000000000000 R09: 0000000000000000
[ 1009.387572][T15050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1009.387584][T15050] R13: 00007f1eaeb26038 R14: 00007f1eaeb25fa0 R15: 00007ffeda04fd58
[ 1009.387603][T15050]  </TASK>
[ 1009.387610][T15050] memory: usage 307200kB, limit 307200kB, failcnt 330
[ 1009.443420][T10890] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1009.443610][T15050] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[ 1009.467474][T15059] netlink: 'syz.7.15853': attribute type 1 has an invalid length.
[ 1009.471038][T15050] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[ 1009.471057][T15050] Memory cgroup stats for /syz5
[ 1009.476487][T15059] __nla_validate_parse: 22 callbacks suppressed
[ 1009.476505][T15059] netlink: 224 bytes leftover after parsing attributes in process `syz.7.15853'.
[ 1009.481603][T15050] :
[ 1009.611634][T15071] 9pnet: Could not find request transport: r
[ 1009.612776][T15050] cache 0
[ 1009.819284][T15050] rss 0
[ 1009.822104][T15050] shmem 0
[ 1009.825334][T15050] mapped_file 0
[ 1009.829160][T15050] dirty 0
[ 1009.833202][T15050] writeback 0
[ 1009.837670][T15050] workingset_refault_anon 716
[ 1009.842663][T15050] workingset_refault_file 5752
[ 1009.848002][T15050] swap 192512
[ 1009.852455][T15050] swapcached 4096
[ 1009.856156][T15050] pgpgin 1505150
[ 1009.859860][T15050] pgpgout 1505147
[ 1009.864470][T15050] pgfault 1492207
[ 1009.868134][T15050] pgmajfault 150
[ 1009.871968][T15050] inactive_anon 0
[ 1009.876898][T15050] active_anon 4096
[ 1009.881178][T15050] inactive_file 0
[ 1009.884913][T15050] active_file 8192
[ 1009.888663][T15050] unevictable 0
[ 1009.892211][T15050] hierarchical_memory_limit 314572800
[ 1009.897734][T15050] hierarchical_memsw_limit 9223372036854771712
[ 1009.904018][T15050] total_cache 0
[ 1009.907504][T15050] total_rss 0
[ 1009.910813][T15050] total_shmem 0
[ 1009.914980][T15050] total_mapped_file 0
[ 1009.919239][T15050] total_dirty 0
[ 1009.922892][T15050] total_writeback 0
[ 1009.927090][T15050] total_workingset_refault_anon 716
[ 1009.932482][T15050] total_workingset_refault_file 5752
[ 1009.939164][T15050] total_swap 192512
[ 1009.943304][T15050] total_swapcached 4096
[ 1009.948981][T15050] total_pgpgin 1505150
[ 1009.953833][T15050] total_pgpgout 1505147
[ 1009.958096][T15050] total_pgfault 1492207
[ 1009.962277][T15050] total_pgmajfault 150
[ 1009.966396][T15050] total_inactive_anon 0
[ 1009.970579][T15050] total_active_anon 4096
[ 1009.974961][T15050] total_inactive_file 0
[ 1009.979225][T15050] total_active_file 8192
[ 1009.981958][T15086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15860'.
[ 1009.983642][T15050] total_unevictable 0
[ 1009.999291][T15050] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.15849,pid=15049,uid=0
[ 1010.015281][T15050] Memory cgroup out of memory: Killed process 15049 (syz.5.15849) total-vm:93836kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0
[ 1010.088693][T15087] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15861'.
[ 1010.186669][ T1369] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1010.284804][T15077] Cannot find del_set index 2 as target
[ 1010.284803][T15076] Cannot find del_set index 2 as target
[ 1010.393073][T15120] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15870'.
[ 1010.590255][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15877'.
[ 1010.601066][T15143] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15877'.
[ 1010.612023][T15143] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15877'.
[ 1010.946277][T15153] bridge38: entered promiscuous mode
[ 1011.291567][ T3422] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x4
[ 1011.299457][ T3422] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x2
[ 1011.317907][ T3422] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x3
[ 1011.328982][ T3422] hid-generic 0000:3000000:0000.006F: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1011.352097][T15165] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1011.412717][T15167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1011.635949][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15887'.
[ 1011.697747][   T29] kauditd_printk_skb: 223 callbacks suppressed
[ 1011.697785][   T29] audit: type=1326 audit(1011.673:112981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.7.15890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[ 1011.708760][T15181] sctp: [Deprecated]: syz.7.15890 (pid 15181) Use of int in max_burst socket option.
[ 1011.708760][T15181] Use struct sctp_assoc_value instead
[ 1011.740242][   T29] audit: type=1326 audit(1011.683:112982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.7.15890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[ 1011.766428][   T29] audit: type=1326 audit(1011.683:112983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.7.15890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[ 1011.790076][   T29] audit: type=1326 audit(1011.683:112984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.7.15890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[ 1011.813716][   T29] audit: type=1326 audit(1011.683:112985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.7.15890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[ 1011.821346][T14786] hid-generic 0000:3000000:0000.0070: unknown main item tag 0x4
[ 1011.837679][   T29] audit: type=1326 audit(1011.683:112986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.7.15890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[ 1011.845739][T14786] hid-generic 0000:3000000:0000.0070: unknown main item tag 0x2
[ 1011.846272][T14786] hid-generic 0000:3000000:0000.0070: unknown main item tag 0x3
[ 1011.869671][   T29] audit: type=1326 audit(1011.683:112987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.7.15890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[ 1011.908697][   T29] audit: type=1326 audit(1011.683:112988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.7.15890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[ 1011.932275][   T29] audit: type=1400 audit(1011.683:112989): avc:  denied  { getopt } for  pid=15180 comm="syz.7.15890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1011.964295][T14786] hid-generic 0000:3000000:0000.0070: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1011.979238][   T29] audit: type=1326 audit(1011.743:112990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.7.15890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210d6ff749 code=0x7ffc0000
[ 1012.032557][T15192] bridge39: entered promiscuous mode
[ 1012.059675][ T3422] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x4
[ 1012.068472][ T3422] hid-generic 0000:3000000:0000.0071: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1012.081982][T15198] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1012.093088][T15198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1012.104403][T15203] netdevsim netdevsim5: Direct firmware load for ÿÿÿÿ failed with error -2
[ 1012.132370][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15897'.
[ 1012.244381][T31517] Bluetooth: hci0: command 0x1003 tx timeout
[ 1012.250604][T10890] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1012.358487][T15216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15902'.
[ 1012.603420][T15238] hub 5-0:1.0: USB hub found
[ 1012.608808][T15238] hub 5-0:1.0: 8 ports detected
[ 1012.763908][T15210] syz.5.15900 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0
[ 1012.777952][T15210] CPU: 1 UID: 0 PID: 15210 Comm: syz.5.15900 Not tainted syzkaller #0 PREEMPT(voluntary) 
[ 1012.778045][T15210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1012.778062][T15210] Call Trace:
[ 1012.778069][T15210]  <TASK>
[ 1012.778076][T15210]  __dump_stack+0x1d/0x30
[ 1012.778105][T15210]  dump_stack_lvl+0xe8/0x140
[ 1012.778201][T15210]  dump_stack+0x15/0x1b
[ 1012.778231][T15210]  dump_header+0x81/0x220
[ 1012.778257][T15210]  oom_kill_process+0x342/0x400
[ 1012.778296][T15210]  out_of_memory+0x979/0xb80
[ 1012.778384][T15210]  try_charge_memcg+0x610/0xa10
[ 1012.778427][T15210]  obj_cgroup_charge_pages+0xa6/0x150
[ 1012.778454][T15210]  __memcg_kmem_charge_page+0x9f/0x170
[ 1012.778556][T15210]  __alloc_frozen_pages_noprof+0x188/0x360
[ 1012.778595][T15210]  alloc_pages_mpol+0xb3/0x260
[ 1012.778623][T15210]  alloc_pages_noprof+0x90/0x130
[ 1012.778651][T15210]  __vmalloc_node_range_noprof+0x7a5/0xed0
[ 1012.778774][T15210]  __kvmalloc_node_noprof+0x483/0x670
[ 1012.778815][T15210]  ? ip_set_alloc+0x24/0x30
[ 1012.778857][T15210]  ? ip_set_alloc+0x24/0x30
[ 1012.778903][T15210]  ? __kmalloc_cache_noprof+0x249/0x4a0
[ 1012.778935][T15210]  ip_set_alloc+0x24/0x30
[ 1012.779010][T15210]  hash_netiface_create+0x282/0x740
[ 1012.779104][T15210]  ? __pfx_hash_netiface_create+0x10/0x10
[ 1012.779151][T15210]  ip_set_create+0x3cc/0x970
[ 1012.779192][T15210]  ? __nla_parse+0x40/0x60
[ 1012.779227][T15210]  nfnetlink_rcv_msg+0x4c6/0x590
[ 1012.779362][T15210]  netlink_rcv_skb+0x123/0x220
[ 1012.779407][T15210]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1012.779443][T15210]  nfnetlink_rcv+0x167/0x16c0
[ 1012.779469][T15210]  ? kmem_cache_free+0xe4/0x3d0
[ 1012.779511][T15210]  ? __kfree_skb+0x109/0x150
[ 1012.779553][T15210]  ? nlmon_xmit+0x4f/0x60
[ 1012.779583][T15210]  ? consume_skb+0x49/0x150
[ 1012.779625][T15210]  ? nlmon_xmit+0x4f/0x60
[ 1012.779658][T15210]  ? dev_hard_start_xmit+0x3b0/0x3e0
[ 1012.779752][T15210]  ? __dev_queue_xmit+0x1200/0x2000
[ 1012.779777][T15210]  ? __dev_queue_xmit+0x182/0x2000
[ 1012.779810][T15210]  ? ref_tracker_free+0x37d/0x3e0
[ 1012.779905][T15210]  ? __netlink_deliver_tap+0x4dc/0x500
[ 1012.779935][T15210]  netlink_unicast+0x5c0/0x690
[ 1012.779971][T15210]  netlink_sendmsg+0x58b/0x6b0
[ 1012.780013][T15210]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1012.780041][T15210]  __sock_sendmsg+0x145/0x180
[ 1012.780095][T15210]  ____sys_sendmsg+0x31e/0x4e0
[ 1012.780167][T15210]  ___sys_sendmsg+0x17b/0x1d0
[ 1012.780214][T15210]  __x64_sys_sendmsg+0xd4/0x160
[ 1012.780242][T15210]  x64_sys_call+0x191e/0x3000
[ 1012.780273][T15210]  do_syscall_64+0xd2/0x200
[ 1012.780321][T15210]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1012.780361][T15210]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1012.780408][T15210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1012.780429][T15210] RIP: 0033:0x7f1eae8cf749
[ 1012.780450][T15210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1012.780475][T15210] RSP: 002b:00007f1ead337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1012.780552][T15210] RAX: ffffffffffffffda RBX: 00007f1eaeb25fa0 RCX: 00007f1eae8cf749
[ 1012.780570][T15210] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[ 1012.780588][T15210] RBP: 00007f1eae953f91 R08: 0000000000000000 R09: 0000000000000000
[ 1012.780600][T15210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1012.780612][T15210] R13: 00007f1eaeb26038 R14: 00007f1eaeb25fa0 R15: 00007ffeda04fd58
[ 1012.780664][T15210]  </TASK>
[ 1012.780672][T15210] memory: usage 307200kB, limit 307200kB, failcnt 501
[ 1013.137412][T15210] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[ 1013.145371][T15210] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1013.152671][T15210] Memory cgroup stats for /syz5:
[ 1013.153208][T15210] cache 0
[ 1013.161199][T15210] rss 0
[ 1013.164559][T15210] shmem 0
[ 1013.167496][T15210] mapped_file 0
[ 1013.170966][T15210] dirty 0
[ 1013.174179][T15210] writeback 0
[ 1013.177465][T15210] workingset_refault_anon 747
[ 1013.182187][T15210] workingset_refault_file 5752
[ 1013.187051][T15210] swap 188416
[ 1013.190376][T15210] swapcached 8192
[ 1013.194058][T15210] pgpgin 1509674
[ 1013.197622][T15210] pgpgout 1509670
[ 1013.201316][T15210] pgfault 1498630
[ 1013.205125][T15210] pgmajfault 164
[ 1013.208687][T15210] inactive_anon 8192
[ 1013.212681][T15210] active_anon 0
[ 1013.216236][T15210] inactive_file 8192
[ 1013.220191][T15210] active_file 0
[ 1013.223827][T15210] unevictable 0
[ 1013.227303][T15210] hierarchical_memory_limit 314572800
[ 1013.232816][T15210] hierarchical_memsw_limit 9223372036854771712
[ 1013.239090][T15210] total_cache 0
[ 1013.242575][T15210] total_rss 0
[ 1013.245936][T15210] total_shmem 0
[ 1013.249528][T15210] total_mapped_file 0
[ 1013.253728][T15210] total_dirty 0
[ 1013.257482][T15210] total_writeback 0
[ 1013.261452][T15210] total_workingset_refault_anon 747
[ 1013.266823][T15210] total_workingset_refault_file 5752
[ 1013.272338][T15210] total_swap 188416
[ 1013.276182][T15210] total_swapcached 8192
[ 1013.280594][T15210] total_pgpgin 1509674
[ 1013.284879][T15210] total_pgpgout 1509670
[ 1013.289145][T15210] total_pgfault 1498630
[ 1013.293472][T15210] total_pgmajfault 164
[ 1013.297803][T15210] total_inactive_anon 8192
[ 1013.302306][T15210] total_active_anon 0
[ 1013.306310][T15210] total_inactive_file 8192
[ 1013.310721][T15210] total_active_file 0
[ 1013.314786][T15210] total_unevictable 0
[ 1013.318800][T15210] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.15900,pid=15209,uid=0
[ 1013.333591][T15210] Memory cgroup out of memory: Killed process 15209 (syz.5.15900) total-vm:93836kB, anon-rss:1132kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0
[ 1013.419917][T15257] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 1013.575642][T15274] SELinux: failed to load policy
[ 1013.705368][T15297] netlink: 'syz.7.15933': attribute type 1 has an invalid length.
[ 1013.725156][T15300] netlink: 'syz.2.15934': attribute type 1 has an invalid length.
[ 1013.882237][ T3422] hid_parser_main: 2 callbacks suppressed
[ 1013.882260][ T3422] hid-generic 0000:3000000:0000.0072: unknown main item tag 0x4
[ 1013.896055][ T3422] hid-generic 0000:3000000:0000.0072: unknown main item tag 0x2
[ 1013.905019][ T3422] hid-generic 0000:3000000:0000.0072: unknown main item tag 0x3
[ 1013.913517][ T3422] hid-generic 0000:3000000:0000.0072: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1013.928759][T15313] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1013.940693][T15313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1014.205110][T15333] bridge16: entered promiscuous mode
[ 1014.216866][T15331] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1014.309347][T15331] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1014.312911][T11557] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 1014.331209][T11557] CPU: 1 UID: 0 PID: 11557 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[ 1014.331289][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1014.331313][T11557] Call Trace:
[ 1014.331319][T11557]  <TASK>
[ 1014.331328][T11557]  __dump_stack+0x1d/0x30
[ 1014.331356][T11557]  dump_stack_lvl+0xe8/0x140
[ 1014.331410][T11557]  dump_stack+0x15/0x1b
[ 1014.331427][T11557]  dump_header+0x81/0x220
[ 1014.331445][T11557]  oom_kill_process+0x342/0x400
[ 1014.331483][T11557]  out_of_memory+0x979/0xb80
[ 1014.331594][T11557]  try_charge_memcg+0x610/0xa10
[ 1014.331633][T11557]  charge_memcg+0x51/0xc0
[ 1014.331655][T11557]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[ 1014.331696][T11557]  __read_swap_cache_async+0x17b/0x2d0
[ 1014.331727][T11557]  swap_cluster_readahead+0x262/0x3c0
[ 1014.331756][T11557]  swapin_readahead+0xde/0x800
[ 1014.331793][T11557]  ? css_rstat_updated+0xb7/0x240
[ 1014.331884][T11557]  ? mod_memcg_lruvec_state+0x1fc/0x2c0
[ 1014.331944][T11557]  ? __rcu_read_unlock+0x4f/0x70
[ 1014.332036][T11557]  ? __rcu_read_unlock+0x4f/0x70
[ 1014.332078][T11557]  ? swap_cache_get_folio+0x277/0x280
[ 1014.332148][T11557]  do_swap_page+0x2ae/0x2370
[ 1014.332178][T11557]  ? _raw_spin_unlock+0x26/0x50
[ 1014.332210][T11557]  ? finish_task_switch+0xad/0x2b0
[ 1014.332251][T11557]  ? __pfx_default_wake_function+0x10/0x10
[ 1014.332278][T11557]  handle_mm_fault+0x9a5/0x2be0
[ 1014.332303][T11557]  ? vma_start_read+0x141/0x1f0
[ 1014.332346][T11557]  do_user_addr_fault+0x630/0x1080
[ 1014.332419][T11557]  ? fpregs_restore_userregs+0xe2/0x1d0
[ 1014.332454][T11557]  ? switch_fpu_return+0xe/0x20
[ 1014.332482][T11557]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1014.332521][T11557]  exc_page_fault+0x62/0xa0
[ 1014.332562][T11557]  asm_exc_page_fault+0x26/0x30
[ 1014.332659][T11557] RIP: 0033:0x7f1f94de1fc5
[ 1014.332697][T11557] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[ 1014.332745][T11557] RSP: 002b:00007ffff8b9ec78 EFLAGS: 00010246
[ 1014.332766][T11557] RAX: 0000000000000000 RBX: 0000000000000265 RCX: 00007f1f94de1fc3
[ 1014.332783][T11557] RDX: 00007ffff8b9ec90 RSI: 0000000000000000 RDI: 0000000000000000
[ 1014.332795][T11557] RBP: 00007ffff8b9ecfc R08: 0000000010476fa1 R09: 0000000000000000
[ 1014.332844][T11557] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[ 1014.332907][T11557] R13: 00000000000927c0 R14: 00000000000f77a6 R15: 00007ffff8b9ed50
[ 1014.332928][T11557]  </TASK>
[ 1014.332937][T11557] memory: usage 307200kB, limit 307200kB, failcnt 699
[ 1014.590751][T11557] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0
[ 1014.600206][T11557] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[ 1014.608324][T11557] Memory cgroup stats for /syz8:
[ 1014.609013][T11557] cache 0
[ 1014.617581][T11557] rss 0
[ 1014.621077][T11557] shmem 0
[ 1014.624599][T11557] mapped_file 0
[ 1014.629172][T11557] dirty 0
[ 1014.632579][T11557] writeback 0
[ 1014.636073][T11557] workingset_refault_anon 1239
[ 1014.640979][T11557] workingset_refault_file 0
[ 1014.645779][T11557] swap 184320
[ 1014.649159][T11557] swapcached 8192
[ 1014.652840][T11557] pgpgin 607555
[ 1014.656518][T11557] pgpgout 607553
[ 1014.660171][T11557] pgfault 703645
[ 1014.663728][T11557] pgmajfault 213
[ 1014.667337][T11557] inactive_anon 8192
[ 1014.671383][T11557] active_anon 0
[ 1014.675241][T11557] inactive_file 0
[ 1014.679114][T11557] active_file 0
[ 1014.683025][T11557] unevictable 0
[ 1014.686768][T11557] hierarchical_memory_limit 314572800
[ 1014.692285][T11557] hierarchical_memsw_limit 9223372036854771712
[ 1014.698783][T11557] total_cache 0
[ 1014.702367][T11557] total_rss 0
[ 1014.705706][T11557] total_shmem 0
[ 1014.709241][T11557] total_mapped_file 0
[ 1014.713299][T11557] total_dirty 0
[ 1014.716817][T11557] total_writeback 0
[ 1014.720681][T11557] total_workingset_refault_anon 1239
[ 1014.726105][T11557] total_workingset_refault_file 0
[ 1014.731272][T11557] total_swap 184320
[ 1014.735217][T11557] total_swapcached 8192
[ 1014.739586][T11557] total_pgpgin 607555
[ 1014.743793][T11557] total_pgpgout 607553
[ 1014.748136][T11557] total_pgfault 703645
[ 1014.752751][T11557] total_pgmajfault 213
[ 1014.756966][T11557] total_inactive_anon 8192
[ 1014.763697][T11557] total_active_anon 0
[ 1014.767814][T11557] total_inactive_file 0
[ 1014.772519][T11557] total_active_file 0
[ 1014.776726][T11557] total_unevictable 0
[ 1014.781867][T11557] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.15931,pid=15292,uid=0
[ 1014.798456][T11557] Memory cgroup out of memory: Killed process 15292 (syz.8.15931) total-vm:93836kB, anon-rss:1260kB, file-rss:22248kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1014.845918][T15331] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1014.889309][T15366] bridge8: entered promiscuous mode
[ 1014.910574][T15368] random: crng reseeded on system resumption
[ 1014.937746][T15331] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1014.952742][T15368] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[ 1014.974152][T15374] __nla_validate_parse: 11 callbacks suppressed
[ 1014.974168][T15374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15963'.
[ 1014.990267][T15374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15963'.
[ 1015.052990][T13260] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.095933][T13260] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.107053][T13260] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.124447][T13260] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.147791][T15392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15970'.
[ 1015.163805][T15393] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15969'.
[ 1015.208973][T15403] netlink: 'syz.2.15975': attribute type 1 has an invalid length.
[ 1015.217258][T15403] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15975'.
[ 1015.367003][T15418] random: crng reseeded on system resumption
[ 1015.399593][T15423] netlink: 68 bytes leftover after parsing attributes in process `syz.5.15982'.
[ 1015.413976][T15418] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[ 1015.432088][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15982'.
[ 1015.441281][T15423] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1015.610379][T15448] netlink: '+}[@': attribute type 1 has an invalid length.
[ 1015.617951][T15448] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[ 1015.756429][T15460] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15998'.
[ 1015.922188][T13260] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1016.222148][T15410] syz.7.15978 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[ 1016.236667][T15410] CPU: 0 UID: 0 PID: 15410 Comm: syz.7.15978 Not tainted syzkaller #0 PREEMPT(voluntary) 
[ 1016.236705][T15410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1016.236723][T15410] Call Trace:
[ 1016.236806][T15410]  <TASK>
[ 1016.236816][T15410]  __dump_stack+0x1d/0x30
[ 1016.236847][T15410]  dump_stack_lvl+0xe8/0x140
[ 1016.236875][T15410]  dump_stack+0x15/0x1b
[ 1016.236965][T15410]  dump_header+0x81/0x220
[ 1016.236987][T15410]  oom_kill_process+0x342/0x400
[ 1016.237025][T15410]  out_of_memory+0x979/0xb80
[ 1016.237110][T15410]  try_charge_memcg+0x610/0xa10
[ 1016.237170][T15410]  obj_cgroup_charge_pages+0xa6/0x150
[ 1016.237191][T15410]  __memcg_kmem_charge_page+0x9f/0x170
[ 1016.237216][T15410]  __alloc_frozen_pages_noprof+0x188/0x360
[ 1016.237256][T15410]  alloc_pages_mpol+0xb3/0x260
[ 1016.237278][T15410]  ? alloc_pages_noprof+0xf4/0x130
[ 1016.237303][T15410]  alloc_pages_noprof+0x90/0x130
[ 1016.237323][T15410]  __vmalloc_node_range_noprof+0x7a5/0xed0
[ 1016.237394][T15410]  __kvmalloc_node_noprof+0x483/0x670
[ 1016.237434][T15410]  ? ip_set_alloc+0x24/0x30
[ 1016.237532][T15410]  ? ip_set_alloc+0x24/0x30
[ 1016.237572][T15410]  ? __kmalloc_cache_noprof+0x249/0x4a0
[ 1016.237612][T15410]  ip_set_alloc+0x24/0x30
[ 1016.237717][T15410]  hash_netiface_create+0x282/0x740
[ 1016.237751][T15410]  ? __pfx_hash_netiface_create+0x10/0x10
[ 1016.237820][T15410]  ip_set_create+0x3cc/0x970
[ 1016.237855][T15410]  ? __nla_parse+0x40/0x60
[ 1016.237885][T15410]  nfnetlink_rcv_msg+0x4c6/0x590
[ 1016.237947][T15410]  netlink_rcv_skb+0x123/0x220
[ 1016.238020][T15410]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1016.238067][T15410]  nfnetlink_rcv+0x167/0x16c0
[ 1016.238105][T15410]  ? kmem_cache_free+0xe4/0x3d0
[ 1016.238137][T15410]  ? __kfree_skb+0x109/0x150
[ 1016.238202][T15410]  ? nlmon_xmit+0x4f/0x60
[ 1016.238235][T15410]  ? consume_skb+0x49/0x150
[ 1016.238276][T15410]  ? nlmon_xmit+0x4f/0x60
[ 1016.238309][T15410]  ? dev_hard_start_xmit+0x3b0/0x3e0
[ 1016.238416][T15410]  ? __dev_queue_xmit+0x1200/0x2000
[ 1016.238436][T15410]  ? __dev_queue_xmit+0x182/0x2000
[ 1016.238455][T15410]  ? ref_tracker_free+0x37d/0x3e0
[ 1016.238552][T15410]  ? __netlink_deliver_tap+0x4dc/0x500
[ 1016.238645][T15410]  netlink_unicast+0x5c0/0x690
[ 1016.238686][T15410]  netlink_sendmsg+0x58b/0x6b0
[ 1016.238715][T15410]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1016.238767][T15410]  __sock_sendmsg+0x145/0x180
[ 1016.238802][T15410]  ____sys_sendmsg+0x31e/0x4e0
[ 1016.238830][T15410]  ___sys_sendmsg+0x17b/0x1d0
[ 1016.238871][T15410]  __x64_sys_sendmsg+0xd4/0x160
[ 1016.238902][T15410]  x64_sys_call+0x191e/0x3000
[ 1016.238997][T15410]  do_syscall_64+0xd2/0x200
[ 1016.239025][T15410]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1016.239064][T15410]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1016.239163][T15410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1016.239192][T15410] RIP: 0033:0x7f210d6ff749
[ 1016.239213][T15410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1016.239238][T15410] RSP: 002b:00007f210c15f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1016.239276][T15410] RAX: ffffffffffffffda RBX: 00007f210d955fa0 RCX: 00007f210d6ff749
[ 1016.239294][T15410] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[ 1016.239311][T15410] RBP: 00007f210d783f91 R08: 0000000000000000 R09: 0000000000000000
[ 1016.239327][T15410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1016.239343][T15410] R13: 00007f210d956038 R14: 00007f210d955fa0 R15: 00007ffc78f861a8
[ 1016.239368][T15410]  </TASK>
[ 1016.239377][T15410] memory: usage 307200kB, limit 307200kB, failcnt 195
[ 1016.298829][T15485] bridge9: entered promiscuous mode
[ 1016.299354][T15410] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0
[ 1016.612471][T15410] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[ 1016.619818][T15410] Memory cgroup stats for /syz7:
[ 1016.620310][T15410] cache 0
[ 1016.620711][T15488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16009'.
[ 1016.625285][T15410] rss 0
[ 1016.625296][T15410] shmem 0
[ 1016.625304][T15410] mapped_file 0
[ 1016.646663][T15410] dirty 0
[ 1016.649637][T15410] writeback 0
[ 1016.652949][T15410] workingset_refault_anon 162
[ 1016.657697][T15410] workingset_refault_file 0
[ 1016.662259][T15410] swap 180224
[ 1016.665673][T15410] swapcached 12288
[ 1016.669420][T15410] pgpgin 580253
[ 1016.673340][T15410] pgpgout 580250
[ 1016.676920][T15410] pgfault 673599
[ 1016.680467][T15410] pgmajfault 75
[ 1016.683933][T15410] inactive_anon 0
[ 1016.687594][T15410] active_anon 12288
[ 1016.691446][T15410] inactive_file 0
[ 1016.695379][T15410] active_file 0
[ 1016.698900][T15410] unevictable 0
[ 1016.702374][T15410] hierarchical_memory_limit 314572800
[ 1016.707869][T15410] hierarchical_memsw_limit 9223372036854771712
[ 1016.714148][T15410] total_cache 0
[ 1016.717634][T15410] total_rss 0
[ 1016.720936][T15410] total_shmem 0
[ 1016.724595][T15410] total_mapped_file 0
[ 1016.728612][T15410] total_dirty 0
[ 1016.732080][T15410] total_writeback 0
[ 1016.736209][T15410] total_workingset_refault_anon 162
[ 1016.741421][T15410] total_workingset_refault_file 0
[ 1016.747185][T15410] total_swap 180224
[ 1016.751228][T15410] total_swapcached 12288
[ 1016.756123][T15410] total_pgpgin 580253
[ 1016.760221][T15410] total_pgpgout 580250
[ 1016.764414][T15410] total_pgfault 673599
[ 1016.768552][T15410] total_pgmajfault 75
[ 1016.772684][T15410] total_inactive_anon 0
[ 1016.776958][T15410] total_active_anon 12288
[ 1016.781400][T15410] total_inactive_file 0
[ 1016.785827][T15410] total_active_file 0
[ 1016.790122][T15410] total_unevictable 0
[ 1016.794265][T15410] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.15978,pid=15408,uid=0
[ 1016.810579][T15410] Memory cgroup out of memory: Killed process 15408 (syz.7.15978) total-vm:93836kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1017.065530][T15501] futex_wake_op: syz.5.16013 tries to shift op by -3; fix this program
[ 1017.078889][T15503] random: crng reseeded on system resumption
[ 1017.254512][    T9] hid-generic 0000:3000000:0000.0073: unknown main item tag 0x4
[ 1017.262621][    T9] hid-generic 0000:3000000:0000.0073: unknown main item tag 0x2
[ 1017.271033][    T9] hid-generic 0000:3000000:0000.0073: unknown main item tag 0x3
[ 1017.291760][    T9] hid-generic 0000:3000000:0000.0073: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1017.315660][T15510] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1017.341414][T15510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1017.413658][   T29] kauditd_printk_skb: 581 callbacks suppressed
[ 1017.413677][   T29] audit: type=1326 audit(1017.382:113572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.16023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[ 1017.444485][   T29] audit: type=1326 audit(1017.382:113573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.16023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[ 1017.477477][   T29] audit: type=1326 audit(1017.392:113574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.16023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[ 1017.501521][   T29] audit: type=1326 audit(1017.392:113575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.16023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[ 1017.525587][   T29] audit: type=1326 audit(1017.442:113576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.16023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[ 1017.549863][   T29] audit: type=1326 audit(1017.442:113577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.16023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[ 1017.573825][   T29] audit: type=1326 audit(1017.442:113578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.16023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[ 1017.598064][   T29] audit: type=1326 audit(1017.442:113579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.16023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[ 1017.622336][   T29] audit: type=1326 audit(1017.442:113580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.16023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[ 1017.646228][   T29] audit: type=1326 audit(1017.442:113581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.16023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f79bf749 code=0x7ffc0000
[ 1017.887938][T15538] netlink: 'syz.0.16027': attribute type 6 has an invalid length.
[ 1017.924395][T31517] Bluetooth: hci0: command 0x1003 tx timeout
[ 1017.930637][T10890] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1018.287750][T15576] netlink: 'syz.0.16041': attribute type 1 has an invalid length.
[ 1018.491371][    T9] hid-generic 0000:3000000:0000.0074: unknown main item tag 0x4
[ 1018.499324][    T9] hid-generic 0000:3000000:0000.0074: unknown main item tag 0x2
[ 1018.534549][    T9] hid-generic 0000:3000000:0000.0074: unknown main item tag 0x3
[ 1018.555042][    T9] hid-generic 0000:3000000:0000.0074: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1018.742119][T15637] FAULT_INJECTION: forcing a failure.
[ 1018.742119][T15637] name failslab, interval 1, probability 0, space 0, times 0
[ 1018.754901][T15637] CPU: 1 UID: 0 PID: 15637 Comm: syz.8.16066 Not tainted syzkaller #0 PREEMPT(voluntary) 
[ 1018.754937][T15637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1018.754954][T15637] Call Trace:
[ 1018.754963][T15637]  <TASK>
[ 1018.755025][T15637]  __dump_stack+0x1d/0x30
[ 1018.755049][T15637]  dump_stack_lvl+0xe8/0x140
[ 1018.755100][T15637]  dump_stack+0x15/0x1b
[ 1018.755121][T15637]  should_fail_ex+0x265/0x280
[ 1018.755166][T15637]  should_failslab+0x8c/0xb0
[ 1018.755199][T15637]  kmem_cache_alloc_noprof+0x50/0x480
[ 1018.755270][T15637]  ? getname_flags+0x80/0x3b0
[ 1018.755306][T15637]  ? get_pid_task+0x96/0xd0
[ 1018.755361][T15637]  getname_flags+0x80/0x3b0
[ 1018.755406][T15637]  do_mq_open+0xd9/0x4f0
[ 1018.755496][T15637]  ? __rcu_read_unlock+0x4f/0x70
[ 1018.755522][T15637]  ? __fget_files+0x184/0x1c0
[ 1018.755560][T15637]  __x64_sys_mq_open+0xcb/0x100
[ 1018.755644][T15637]  x64_sys_call+0x8c6/0x3000
[ 1018.755668][T15637]  do_syscall_64+0xd2/0x200
[ 1018.755689][T15637]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1018.755804][T15637]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1018.755847][T15637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1018.755869][T15637] RIP: 0033:0x7f1f94daf749
[ 1018.755954][T15637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1018.755977][T15637] RSP: 002b:00007f1f9380f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[ 1018.755998][T15637] RAX: ffffffffffffffda RBX: 00007f1f95005fa0 RCX: 00007f1f94daf749
[ 1018.756011][T15637] RDX: 0000000000000000 RSI: 0000000000000042 RDI: 0000000000000000
[ 1018.756034][T15637] RBP: 00007f1f9380f090 R08: 0000000000000000 R09: 0000000000000000
[ 1018.756048][T15637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1018.756065][T15637] R13: 00007f1f95006038 R14: 00007f1f95005fa0 R15: 00007ffff8b9e938
[ 1018.756090][T15637]  </TASK>
[ 1019.362730][T15657] netdevsim netdevsim2: Direct firmware load for þ failed with error -2
[ 1019.586982][T15669] FAULT_INJECTION: forcing a failure.
[ 1019.586982][T15669] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1019.601104][T15669] CPU: 0 UID: 0 PID: 15669 Comm: syz.7.16075 Not tainted syzkaller #0 PREEMPT(voluntary) 
[ 1019.601178][T15669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1019.601196][T15669] Call Trace:
[ 1019.601206][T15669]  <TASK>
[ 1019.601217][T15669]  __dump_stack+0x1d/0x30
[ 1019.601245][T15669]  dump_stack_lvl+0xe8/0x140
[ 1019.601267][T15669]  dump_stack+0x15/0x1b
[ 1019.601298][T15669]  should_fail_ex+0x265/0x280
[ 1019.601342][T15669]  should_fail+0xb/0x20
[ 1019.601358][T15669]  should_fail_usercopy+0x1a/0x20
[ 1019.601379][T15669]  _copy_from_iter+0xd2/0xe80
[ 1019.601425][T15669]  ? __build_skb_around+0x1ab/0x200
[ 1019.601472][T15669]  ? __alloc_skb+0x223/0x320
[ 1019.601512][T15669]  netlink_sendmsg+0x471/0x6b0
[ 1019.601606][T15669]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1019.601627][T15669]  __sock_sendmsg+0x145/0x180
[ 1019.601653][T15669]  ____sys_sendmsg+0x31e/0x4e0
[ 1019.601747][T15669]  ___sys_sendmsg+0x17b/0x1d0
[ 1019.601787][T15669]  __x64_sys_sendmsg+0xd4/0x160
[ 1019.601865][T15669]  x64_sys_call+0x191e/0x3000
[ 1019.601896][T15669]  do_syscall_64+0xd2/0x200
[ 1019.601919][T15669]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1019.602084][T15669]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1019.602148][T15669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1019.602202][T15669] RIP: 0033:0x7f210d6ff749
[ 1019.602222][T15669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1019.602346][T15669] RSP: 002b:00007f210c15f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1019.602387][T15669] RAX: ffffffffffffffda RBX: 00007f210d955fa0 RCX: 00007f210d6ff749
[ 1019.602402][T15669] RDX: 000000000000c810 RSI: 0000200000000280 RDI: 0000000000000003
[ 1019.602415][T15669] RBP: 00007f210c15f090 R08: 0000000000000000 R09: 0000000000000000
[ 1019.602434][T15669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1019.602450][T15669] R13: 00007f210d956038 R14: 00007f210d955fa0 R15: 00007ffc78f861a8
[ 1019.602470][T15669]  </TASK>
[ 1019.878022][T15674] FAULT_INJECTION: forcing a failure.
[ 1019.878022][T15674] name failslab, interval 1, probability 0, space 0, times 0
[ 1019.891573][T15674] CPU: 0 UID: 0 PID: 15674 Comm: syz.0.16076 Not tainted syzkaller #0 PREEMPT(voluntary) 
[ 1019.891609][T15674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1019.891622][T15674] Call Trace:
[ 1019.891687][T15674]  <TASK>
[ 1019.891698][T15674]  __dump_stack+0x1d/0x30
[ 1019.891723][T15674]  dump_stack_lvl+0xe8/0x140
[ 1019.891766][T15674]  dump_stack+0x15/0x1b
[ 1019.891788][T15674]  should_fail_ex+0x265/0x280
[ 1019.891829][T15674]  ? __se_sys_mount+0xef/0x2e0
[ 1019.891914][T15674]  should_failslab+0x8c/0xb0
[ 1019.891951][T15674]  __kmalloc_cache_noprof+0x4c/0x4a0
[ 1019.891986][T15674]  ? memdup_user+0x99/0xd0
[ 1019.892037][T15674]  __se_sys_mount+0xef/0x2e0
[ 1019.892068][T15674]  ? fput+0x8f/0xc0
[ 1019.892089][T15674]  ? ksys_write+0x192/0x1a0
[ 1019.892187][T15674]  __x64_sys_mount+0x67/0x80
[ 1019.892234][T15674]  x64_sys_call+0x2b51/0x3000
[ 1019.892263][T15674]  do_syscall_64+0xd2/0x200
[ 1019.892287][T15674]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[ 1019.892346][T15674]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[ 1019.892385][T15674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1019.892412][T15674] RIP: 0033:0x7fe34eb2f749
[ 1019.892427][T15674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1019.892473][T15674] RSP: 002b:00007fe34d58f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1019.892497][T15674] RAX: ffffffffffffffda RBX: 00007fe34ed85fa0 RCX: 00007fe34eb2f749
[ 1019.892513][T15674] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000
[ 1019.892576][T15674] RBP: 00007fe34d58f090 R08: 0000200000000100 R09: 0000000000000000
[ 1019.892599][T15674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1019.892612][T15674] R13: 00007fe34ed86038 R14: 00007fe34ed85fa0 R15: 00007ffedb38c7d8
[ 1019.892704][T15674]  </TASK>
[ 1020.144219][T15681] __nla_validate_parse: 12 callbacks suppressed
[ 1020.144237][T15681] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16080'.
[ 1020.161279][T15678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16079'.
[ 1020.216245][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16079'.
[ 1020.274158][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16079'.
[ 1020.291271][T15675] ==================================================================
[ 1020.299616][T15675] BUG: KCSAN: data-race in __io_queue_proc / io_poll_wake
[ 1020.307515][T15675] 
[ 1020.309955][T15675] write to 0xffff88817b26a428 of 8 bytes by task 1350 on cpu 1:
[ 1020.318305][T15675]  io_poll_wake+0x1f9/0x3b0
[ 1020.323077][T15675]  __wake_up+0x66/0xb0
[ 1020.327182][T15675]  n_tty_receive_buf_common+0x735/0xbe0
[ 1020.332855][T15675]  n_tty_receive_buf2+0x33/0x40
[ 1020.338013][T15675]  tty_ldisc_receive_buf+0x66/0xf0
[ 1020.344464][T15675]  tty_port_default_receive_buf+0x59/0x90
[ 1020.350623][T15675]  flush_to_ldisc+0x148/0x340
[ 1020.357891][T15675]  process_scheduled_works+0x4ce/0x9d0
[ 1020.363864][T15675]  worker_thread+0x582/0x770
[ 1020.368572][T15675]  kthread+0x489/0x510
[ 1020.372864][T15675]  ret_from_fork+0x122/0x1b0
[ 1020.377735][T15675]  ret_from_fork_asm+0x1a/0x30
[ 1020.382625][T15675] 
[ 1020.385361][T15675] read to 0xffff88817b26a428 of 8 bytes by task 15675 on cpu 0:
[ 1020.393454][T15675]  __io_queue_proc+0x10a/0x280
[ 1020.398332][T15675]  io_async_queue_proc+0x43/0x50
[ 1020.403387][T15675]  n_tty_poll+0x7a/0x450
[ 1020.410545][T15675]  tty_poll+0x79/0xf0
[ 1020.415004][T15675]  __io_arm_poll_handler+0x1ee/0xb70
[ 1020.422042][T15675]  io_arm_apoll+0x2e8/0x420
[ 1020.426686][T15675]  io_arm_poll_handler+0x131/0x160
[ 1020.433656][T15675]  io_queue_async+0x25d/0x2d0
[ 1020.438714][T15675]  io_req_task_submit+0xf6/0x100
[ 1020.444611][T15675]  io_poll_task_func+0x5fc/0x7c0
[ 1020.450860][T15675]  io_handle_tw_list+0xcc/0x1c0
[ 1020.456959][T15675]  tctx_task_work_run+0x6d/0x1a0
[ 1020.463634][T15675]  tctx_task_work+0x3f/0x80
[ 1020.468620][T15675]  task_work_run+0x131/0x1a0
[ 1020.473615][T15675]  get_signal+0xe12/0xf70
[ 1020.478048][T15675]  arch_do_signal_or_restart+0x96/0x440
[ 1020.483986][T15675]  exit_to_user_mode_loop+0x77/0x110
[ 1020.490362][T15675]  do_syscall_64+0x1d6/0x200
[ 1020.495074][T15675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1020.500996][T15675] 
[ 1020.503499][T15675] value changed: 0xffff888118df7208 -> 0x0000000000000000
[ 1020.510724][T15675] 
[ 1020.513151][T15675] Reported by Kernel Concurrency Sanitizer on:
[ 1020.519312][T15675] CPU: 0 UID: 0 PID: 15675 Comm: syz.7.16077 Not tainted syzkaller #0 PREEMPT(voluntary) 
[ 1020.529484][T15675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1020.539908][T15675] ==================================================================