last executing test programs:

1.838849266s ago: executing program 1 (id=1445):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[], 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4}, &(0x7f00000014c0), &(0x7f0000000280)=r0}, 0x20)
futimesat(0xffffffffffffffff, &(0x7f0000000300)='./bus\x00', 0x0)

1.805185898s ago: executing program 1 (id=1447):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0)
alarm(0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f00000005c0)=""/28, 0x1c}], 0x2, 0x6, 0xa)
ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f00000001c0))
r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000400)='ext4_load_inode\x00', r3, 0x0, 0x16}, 0x18)
write$binfmt_misc(r2, &(0x7f0000000180)="e502", 0x2)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000190a001c0000001458", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r4 = gettid()
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r5, 0x545c, 0x200000000000000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4)

1.771388899s ago: executing program 3 (id=1448):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
r0 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c)
execve(&(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021800cb", @ANYRES32=r4, @ANYBLOB="0800040064010102080001007f00009008000200ac"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
r7 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x10, 0x6, @remote}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', <r8=>0x0, 0x20, 0x700, 0x400, 0x6ab0, {{0x18, 0x4, 0x0, 0xf, 0x60, 0x67, 0x0, 0x10, 0x2f, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x4b, 0x3, [{0x5, 0x4, "23d9"}, {0x5, 0x9, "8b1158918fb028"}, {0x6, 0x9, "14eb362b0fac7b"}, {0x5, 0x2}, {0x5, 0x11, "6378f939b681e16fd3142feeba697e"}, {0x2, 0x12, "f281d2ad0bdc2f3917c8920de7610f39"}, {0x1, 0xa, "f41ae538e21c57ef"}]}, @end]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)={0x14fc, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1010, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x410, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nobarrier'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0xc7, 0x5, "a5af68625b496a903fe44413bcb94f080e25fc8ca9e13efcd640529620057596d0cc61ad0a1364cea85755a91e612ac811a710300b1efc9bcf36a09885493073aa557602199212d9c77be6638353bf567c5e07093d639b5d01e3ada2c976c84d741e0db1bb8abbb19c222ef98b730ba4c974844703044443a3652d5da7b24aa7742c226a7a03db534f8cd05a1af802a7ade8e60b9e20697cf5db85fd3e72eddca07c2789a8dd45af86bb033a347f537f71e45a852d35b0aa1f7ead74518f7e6f80b1e3"}, @ETHTOOL_A_BITSET_MASK={0xf0, 0x5, "d2730ea4f8dd331d795d889b8322107c7984ebe7dd3c44cd60799af05bebc55f6558a729e23de7b57eaae6cd613796cab6f605d17d399c4aaf28618e4563f3fde115bddf1ed244bdece849a8aba99917e2260e683ce73ccbe08a5929132e045ed944ba9d17f230a076080ec9c541199e73f22c452e4200017fc725bf558b990399e22a7663b37bcf2ff9bb00fcaf3b796713a65090501ef875bfec145213d64ec5d1abbcdf7101281f174a9857f07fca00790cf50aa713742f821f2b4b01e88c63f4a1196904f9b254c27cba3de96b3a87a4c85a355d8d2b0e73e3a10866821f65b9354376daa14e2ed48000"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bsddf'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'grpquota'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "3f81ce9a6157dbee07c7e5d6474d8da834b4e80acbb000a371313b182195ab38d115a6c875ebc2129a65b2a50bdfcfb6a16f9adc81731482e68ce03f1a5f47ada86d69e90927592b389154046a8cef20be7acf5fa0995f43f40168ce534ee917a15cf2b0317642ce8acc225efc2699d61fa9986d20d3b8bb845f8e3d27e6d11e2dfc79eb4adcae4f2956db0ecd16b0e620eb281b198bdaeb3317b1463c666766cc0782ab0bc44fc05cdf8f0bbb7123096acb8b24e5b6f60325da19ff1b7fd8b49a06d4648d61a97b67022756af5bbbc62b5df695b57bede454b065307820bbae8b9cf34e9aef9489ba46b43f0c013184c0b17ec1"}, @ETHTOOL_A_BITSET_VALUE={0xc6, 0x4, "3ed835e43e7fa501c56c79ed2496d74e249a0c278ff3684e25c7779474544c906369f858ca062d1f9bc646107d601d0c229704e6f41090783e88055ca041bc803213dda1a986ada74018151ebec4aa471b26a30d5d29c3654d87bc4de54513813900ae04a3d246cde20c47dc653fce4e2a7cfd57adc35b5bf909a36117b8d69896e79f16c50dc94cefc6b021d43882aa1ee4c8c1e96b005872dd9fc6acdd48e457d8be099017f9c73cb86c37844faa202c045a13b42c3777c4621c0ced6fd8a777e7"}]}, @ETHTOOL_A_DEBUG_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x14fc}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00')
cachestat(r9, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0xee)
waitid(0x0, 0x0, 0x0, 0xe, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=<r12=>0x0)
ioctl$BINDER_GET_FROZEN_INFO(r11, 0xc00c620f, &(0x7f0000000240)={r12})
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r10)

1.653515734s ago: executing program 2 (id=1452):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r2], 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000040)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)

1.507229511s ago: executing program 3 (id=1455):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380))
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x24fa, 0x0, &(0x7f0000000100), &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x340, 0x240, 0x2f8, 0xffffffff, 0x2f8, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'bond0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000600)=ANY=[@ANYRES64=0x0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
unshare(0x2c060000)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2c020400)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0xf0, 0xd215)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
getrandom(&(0x7f00000004c0)=""/228, 0xe4, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x18)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
set_mempolicy(0x8006, 0x0, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800cfeed684073fad56271748ae60000000181200", @ANYRES32, @ANYBLOB="00030000000000000003000000030000854000001b000000b70000100000000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

1.392677186s ago: executing program 2 (id=1456):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[], 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4}, &(0x7f00000014c0), &(0x7f0000000280)=r0}, 0x20)
futimesat(0xffffffffffffffff, &(0x7f0000000300)='./bus\x00', 0x0)

1.364046017s ago: executing program 2 (id=1457):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, 0x94)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000200), 0xc, &(0x7f0000000780)={&(0x7f0000000a00)={0x1b8, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1b8}}, 0x20000005)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10)
pipe2$9p(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x1000800, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
clock_adjtime(0x6, &(0x7f0000000580)={0x0, 0x4, 0x1, 0xffffffffffffff04, 0x6, 0x6, 0x42a, 0x6, 0x8, 0x8, 0x6, 0x3, 0x9, 0x5, 0x10, 0x5, 0x7, 0x6, 0x400, 0xfffffffffffffffe, 0xa6a9, 0x8, 0x6, 0x101, 0x9, 0x8})
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x4c, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xda}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x10001}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
connect$packet(r7, &(0x7f00000001c0)={0x11, 0x7, r11, 0x1, 0x8, 0x6, @random="7fc1cf4b85b6"}, 0x14)

1.362850437s ago: executing program 3 (id=1458):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x28}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x13)
unshare(0x20060400)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
listen(r3, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
io_setup(0x5, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
openat$tun(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.220641034s ago: executing program 4 (id=1459):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380))
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x24fa, 0x0, &(0x7f0000000100), &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x340, 0x240, 0x2f8, 0xffffffff, 0x2f8, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'bond0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000600)=ANY=[@ANYRES64=0x0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
unshare(0x2c060000)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2c020400)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0xf0, 0xd215)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
getrandom(&(0x7f00000004c0)=""/228, 0xe4, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x18)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
set_mempolicy(0x8006, 0x0, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800cfeed684073fad56271748ae6000000018120000", @ANYRES32, @ANYBLOB="00030000000000000003000000030000854000001b000000b70000100000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

1.169613516s ago: executing program 2 (id=1460):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000000400000008"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}})

929.080497ms ago: executing program 1 (id=1461):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[], 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0)
sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4}, &(0x7f00000014c0), &(0x7f0000000280)=r0}, 0x20)
futimesat(0xffffffffffffffff, &(0x7f0000000300)='./bus\x00', 0x0)

797.470473ms ago: executing program 1 (id=1462):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000000344000226bd7000fbdbdf250900020073797a3200000000080041007278650014003300627269646765300000000000000000000900020073797a3000000000080041007369770014003300627269646765300000000000000000000900020073797a32000000000800410073697700140033006e657464657673696d300000000000000900020073797a31000000000800410072786500140033007465616d5f736c6176655f30040000000900020073797a320000000008004100736977001400330076657468315f746f5f62726964676500"], 0xd8}, 0x1, 0x0, 0x0, 0x40004}, 0xd13d3b4de25b77a1)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
ftruncate(r1, 0x4000000000000a75)

683.780848ms ago: executing program 4 (id=1463):
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x80}, 0x18)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

632.343181ms ago: executing program 4 (id=1465):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f00000001c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@resuid}]}, 0x1, 0x625, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4G4IvN71UWgihUEJrYpHEkuhN48WDiScP4l9hJPHqP+DBiydDQozhIIbImpmdbaftbunb7pT280mGzsvuPN8Bvn2effZ5ZgLYt0bSPyoRhyLiWhIxVDhWjfzgSP119/+6eT5dkqjV3v0ziZufJovFcyX5zwP5m/8diiR9+8GJH9eUO7dw4/LkzMz09WyrN9+7cOPYpSuTF6cvTl+deG3i1MkTJ0+NH9/+9RUvJ+L97799mIz/8NvZJE7Ho676zvS6Vr+3d1slp2WPRK3uQXF/GsipbZ57t/h7aPkvtq4/kmpp4bBJF/L/j90R8WwMRVfhX3MoPn+71OCAtqol0aijgH0n2VL+9+18IECHNdoBjc/2zT4Hr1Vpc6sE6IR7Z+odAPXc746IRv5X876zvqxvYOB+sqKfJ4mI7fXM1aVl/PLz2c/SJVr0wwHtsXirN++3X13/J1luDkdftjVwv7Ii/yuFJd3/zhbLH1m1Lf+hcxZvRcRzef3fE5vK/5FC/n+4xfLlPwAAAAAAAOycO2ci4pVm4/8qS+N/epqM/xmMiNM7UP7jv/+r3M1Xkh0oDii4dybijabjf5fG+A535Vv/z8YDdCcXLs1MH4+IpyLiaHT3ptvjq85bHCF87MuD37Qqvzj+L13S8htjAfMz3a2umog7NTk/ud3rBiLu3Yp4Phv/ezjfs3L8T1r/J03q/zS/r22wjIMv3T7X6tjj8x9ol9p3EUea1v/Lze10bWz+yrWxuab35xjL2gNjjVZBw3IL4IVPvhpsVf46+e8uEtBmaf0/sH7+9ybF+/XMbe78PRHx6kK11ur4Vtv/Pcl7XY3zpz6enJ+/Ph7Rk7y1dv/E5mKGvaqRD418SfP/6Ivr9/8ttf8LedgfEYurT96ih+6ZR4O/t4pH+x/Kk+b/1Pr1//DK+n/zKxO3h39qVf65DdX/J7I6/Wi+R/8fFK29H8eaLByIpglaSrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ISrRMT/IqmMLq1XKqOjEYMR8XQMVGZm5+ZfvjD70dWp9Fj2/P9K40m/Q/XtpPH8/+HC9sTK7f60rAMR8XVXf3Z89PzszFTZFw8AAAAAAAAAAAAAAAAAAAC7xGA257/Wu3r+f+qPrrKjA9qumv9czvee0mIBOivP/y8+2PQ7a707Hw3QSdWyAwBKs/H8725rHEDntc7/Bw9rmY6GA3SQ9j/sX1vMf18Pwh6g/of9aoN9en3tjgMog/ofAAAAAAD2lAOH7/yaRMTi6/3ZEoXJvwb7w95WKTsAoDTG8ML+VZ0tOwKgLD7jA8nS2j9NJ/u3Hv2ftCcgAAAAAAAAAAAAAGCNI4fM/4f9av35/8b2w162zvz/LPmzRwM8rG3g5cCTpvWjP9T9sNet8xnfA79gn3hcbW/+PwAAAAAAAAAAAADsAn03Lk/OzExfn1t48lbe3B1hbG5lcXJXhLHdlf6IWNrzqD1ldUdE+Ve6cyvViMrGXty4BUeJMZf8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjyXwAAAP//CHogwg==")
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000040), 0x10)
sendmsg$netlink(r2, 0x0, 0x4)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x0, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xffffff00, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x23}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'dvmrp0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x228, 0x248, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@empty, [0xaaab4584fd44661c, 0xffffff00, 0x0, 0xffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], 0x4d4, 0x3506, 0xff, 0x1, 0x6, 0x9}, {@ipv4=@broadcast, [0xffffff00, 0x1fe, 0xffffff00, 0xff000000], @ipv4=@rand_addr=0x64010101, [0xff, 0x0, 0x0, 0xffffff00], 0x4d5, 0x3505, 0x32, 0x0, 0x4e8535f9bc1af85f, 0x10}, {@ipv6=@loopback, [0xff000000, 0x0, 0x0, 0xff000000], @ipv4=@private=0xa010102, [0xffffff00, 0xffffff00, 0xff, 0xff000000], 0x4d6, 0x0, 0x5c, 0x1, 0x12, 0x17}, {@ipv6=@remote, [0xff000000, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 0x4d6, 0x3500, 0x5e, 0x1, 0x0, 0xf}], 0x5, 0x4}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
dup(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRES16=r4, @ANYRESOCT, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x100}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

602.979102ms ago: executing program 0 (id=1467):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1, 0x8, 0x2, 0x8}, {0x7, 0x5, 0xb7, 0xffffff3b}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10)
ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000600)=ANY=[@ANYBLOB="9cfe000001"])
openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480)

567.022624ms ago: executing program 0 (id=1468):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001894b3f20a59950100000000000000030000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x11b0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000000}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1, 0x3)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r2=>0x0})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = socket(0x1e, 0x5, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000080), &(0x7f0000000240)=0x4)
sendmmsg$inet(r3, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000240)="a20d", 0x2}], 0x1, &(0x7f0000004680)=ANY=[], 0x128}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="07c966d49ade51186bb6ec37346391c2ca9304c91eba21cf784e1b80290074f854fb01edeee3b6a0dd6be5d3fae3223cfb69358b11cc4048bfd82efc8babc7857d8c798ab95973c605356e948a6633b97be01f10145ec7c9830bc150f21e5bafa5a7c03fcf1ea10583b57a0da57a8fa82e88ebbbe2", 0x75}, {&(0x7f0000000cc0)="3ee605fb7dcd25b849a878d7d83b62958cb84f9e5e2b7d43dbdef625e0ccb68e08c19845b7dfd30c636ba64833f1c6d799558b74ce", 0x35}], 0x2}}], 0x2, 0x40080dd)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

559.329304ms ago: executing program 3 (id=1469):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bind(r2, &(0x7f0000000380)=@rc={0x1f, @none, 0x1}, 0x80)
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
write$binfmt_format(r3, &(0x7f0000000100)='0\x00', 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35b", 0x6)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40)

552.572275ms ago: executing program 2 (id=1470):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1, 0x8, 0x2, 0x8}, {0x7, 0x5, 0xb7, 0xffffff3b}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480)

508.526946ms ago: executing program 1 (id=1471):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001894b3f20a59950100000000000000030000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x11b0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000000}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1, 0x3)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r2=>0x0})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = socket(0x1e, 0x5, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000080), &(0x7f0000000240)=0x4)
sendmmsg$inet(r3, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000240)="a20d", 0x2}], 0x1, &(0x7f0000004680)=ANY=[], 0x128}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="07c966d49ade51186bb6ec37346391c2ca9304c91eba21cf784e1b80290074f854fb01edeee3b6a0dd6be5d3fae3223cfb69358b11cc4048bfd82efc8babc7857d8c798ab95973c605356e948a6633b97be01f10145ec7c9830bc150f21e5bafa5a7c03fcf1ea10583b57a0da57a8fa82e88ebbbe2", 0x75}, {&(0x7f0000000cc0)="3ee605fb7dcd25b849a878d7d83b62958cb84f9e5e2b7d43dbdef625e0ccb68e08c19845b7dfd30c636ba64833", 0x2d}], 0x2}}], 0x2, 0x40080dd)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

494.950707ms ago: executing program 2 (id=1472):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x28}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x13)
unshare(0x20060400)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
listen(r3, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
io_setup(0x5, &(0x7f0000000040))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c}]}, 0xffffffffffffff3a}}, 0xc840)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
openat$tun(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

459.723569ms ago: executing program 0 (id=1473):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x13, 0x6}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x600)

404.502741ms ago: executing program 0 (id=1474):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local'])
nanosleep(0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000001c0))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000020000000000000000000000850000005e00000095"], &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d1}, 0x94)
write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d390887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b3366959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130d9b61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251a4523a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x4000040)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890)

404.039511ms ago: executing program 4 (id=1475):
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x80}, 0x18)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

368.164193ms ago: executing program 0 (id=1476):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, 0x94)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000200), 0xc, &(0x7f0000000780)={&(0x7f0000000a00)={0x1b8, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1b8}}, 0x20000005)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$eJzs3U9rI2UcB/DfpOlk1ENy8CTCDrgHT4vdm3hJkV0Qe3LJYfWgxd0FaYKwCwX/YNyTVy8ePPgKBMGL72IvvgPBq+DNFRZGZjLTTGraJtpUbD+fS3995vnO8zzp0zQ55OkHL08O7uXx4PHnv0SWJdEZxjCeJjGITjS+jAXDrwMA+D97WhTxezGzTi6JiGxz0wIANmi1v//defnjhUwLANigO3fffXt3b+/WO1lkcXvy1eGofGdffp1d330QH8U47sdr0Y9nEdXrhPqNf1nfLopi2s1Lg7g+mR6OyuTk/Sf1/Xd/i6jyO9GPwVGserVR5d/au7VTxfNeKz8t5/F8Pf6wzN+Mfrx4FF7I35zl83Y+Rmm8+kpr/jeiHz9/GB/HOO5Vk5jnv9jJ8zeLb/747L1yemU+mR6OelW/uWLrIn8uAAAAAAAAAAAAAAAAAAAAAABcbjfy5vCd/Fpcn5RN9fk7W8/Suk/dZTBPlddnVdI0tc4HKk2L+G52pOD2wnjz83268VK3fbAgAAAAAAAAAAAAAAAAAAAAXF2PPvn0YH88vv/wXIrmNIBuRPx5J+Kf3mfYarkWp3fu1WPuj8edulzo8yRtt8RW0yeJOHUa5SLO6WE5q3guOzbnpvj+h3KB69wwa7W8vnyB22et627v3+6NZncd7CfLx+pF05LVm+TbNGLeJ40Vx0pPulREe/udteR06aX+2mtPX6iK6Yl9imTJFm0Vb/w6u163JHHslyitHtWlo2/XRSt+bG+stJ8jm8X//lyRVKd19DbxNAQAAAAAAAAAAAAAAAAAACx8xrv87qfFi49PjXYKHwUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JKY////NYppHV6hcxoPH/3HSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAK+CsAAP//cutM2w==")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10)
pipe2$9p(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x1000800, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
clock_adjtime(0x6, &(0x7f0000000580)={0x0, 0x4, 0x1, 0xffffffffffffff04, 0x6, 0x6, 0x42a, 0x6, 0x8, 0x8, 0x6, 0x3, 0x9, 0x5, 0x10, 0x5, 0x7, 0x6, 0x400, 0xfffffffffffffffe, 0xa6a9, 0x8, 0x6, 0x101, 0x9, 0x8})
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x4c, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xda}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x10001}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
connect$packet(r7, &(0x7f00000001c0)={0x11, 0x7, r11, 0x1, 0x8, 0x6, @random="7fc1cf4b85b6"}, 0x14)

332.630454ms ago: executing program 4 (id=1477):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc0000001b0001002dbd7000ffdbdf25ffffffff00000000000000000000000000000000000000000000ffffac1414354e2200064e2300e30a00002021000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="10000000000000000800000000000000000000000000008005000000000000000d000000000000000000ffff000000000800000000000000c508000000000000060000000000000000000000000000000c0000000000000009000000000000000200000000000000020002000000000001000000000000000c0015005c07350002000000"], 0xcc}}, 0x200000c0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x404}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28)
r5 = syz_open_procfs(0x0, &(0x7f00000028c0)='net/mcfilter6\x00')
lseek(r5, 0x339, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="0000008dfe6230e4196e595826d923e4b1f64600000000f0ffffffffffffff0000000000100f75ea261f04aabfed65b1df9469bbb5e6553e2fdd13a5f5101f96d07973d75fc033103b473f13903767f4c03d1ab5f64a521b25c1186a13c8093b75de8497748b2efef6bdb3bb86edd8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000001000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r9}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r12=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7040010000080f00000008000300", @ANYRES32=r12, @ANYBLOB="052f0001005ed273b8357b5acad85a985a91d100000000"], 0x24}}, 0x18)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10)
r14 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r14, 0x65, 0x1, 0x0, 0xf00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)

320.786445ms ago: executing program 3 (id=1478):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x961}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)

261.608598ms ago: executing program 1 (id=1479):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x200800, 0x8)
fcntl$getflags(r0, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00010000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f00000005c0)=""/28, 0x1c}], 0x2, 0x6, 0xa)
ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f00000001c0))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000020000100bc000000ffdbdf250a801007050000001a0001001400020000000000000000000000f3ffffff0001140001000000000000000000000000000000000108000f0008000000050016005e000000080017004e204e2308000e00f7ffffff"], 0x64}, 0x1, 0x0, 0x0, 0xc001}, 0x8)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r8, 0x0, 0x10000001}, 0x18)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x10c, 0x150, 0x150, 0x0, 0xf8010000, 0x1d4, 0x238, 0x238, 0x1d4, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000190a001c0000001458", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r2, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000001b704000000008900850000008200000c95"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

260.707818ms ago: executing program 4 (id=1480):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local'])
nanosleep(0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x4000040)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890)

185.566801ms ago: executing program 0 (id=1481):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000000344000226bd7000fbdbdf250900020073797a3200000000080041007278650014003300627269646765300000000000000000000900020073797a3000000000080041007369770014003300627269646765300000000000000000000900020073797a32000000000800410073697700140033006e657464657673696d300000000000000900020073797a31000000000800410072786500140033007465616d5f736c6176655f30040000000900020073797a320000000008004100736977001400330076657468315f746f5f62726964676500"], 0xd8}, 0x1, 0x0, 0x0, 0x40004}, 0xd13d3b4de25b77a1)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
ftruncate(r1, 0x4000000000000a75)

0s ago: executing program 3 (id=1482):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)='.', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000008400c05901c033000002000000060041000500000000000000", @ANYRES32=0x0], 0x20, 0x4048800}, 0x10)
write(r2, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff8003}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000fd4300008095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x10, 0x803, 0x0)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0x100}, 0x18)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4000090)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18)

kernel console output (not intermixed with test programs):

.144461][ T5270]  <TASK>
[   60.144468][ T5270]  __dump_stack+0x1d/0x30
[   60.144589][ T5270]  dump_stack_lvl+0xe8/0x140
[   60.144613][ T5270]  dump_stack+0x15/0x1b
[   60.144631][ T5270]  should_fail_ex+0x265/0x280
[   60.144651][ T5270]  should_fail+0xb/0x20
[   60.144668][ T5270]  should_fail_usercopy+0x1a/0x20
[   60.144705][ T5270]  _copy_from_user+0x1c/0xb0
[   60.144735][ T5270]  __sys_bpf+0x183/0x7c0
[   60.144764][ T5270]  __x64_sys_bpf+0x41/0x50
[   60.144792][ T5270]  x64_sys_call+0x28e1/0x3000
[   60.144839][ T5270]  do_syscall_64+0xd8/0x2a0
[   60.144876][ T5270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.144900][ T5270] RIP: 0033:0x7f88b81ff749
[   60.144918][ T5270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.144935][ T5270] RSP: 002b:00007f88b6c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   60.144998][ T5270] RAX: ffffffffffffffda RBX: 00007f88b8455fa0 RCX: 00007f88b81ff749
[   60.145011][ T5270] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[   60.145075][ T5270] RBP: 00007f88b6c67090 R08: 0000000000000000 R09: 0000000000000000
[   60.145089][ T5270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.145102][ T5270] R13: 00007f88b8456038 R14: 00007f88b8455fa0 R15: 00007ffdf9e5ec08
[   60.145121][ T5270]  </TASK>
[   60.310012][ T5273] FAULT_INJECTION: forcing a failure.
[   60.310012][ T5273] name failslab, interval 1, probability 0, space 0, times 0
[   60.322658][ T5273] CPU: 1 UID: 0 PID: 5273 Comm: syz.1.661 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   60.322687][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   60.322758][ T5273] Call Trace:
[   60.322765][ T5273]  <TASK>
[   60.322814][ T5273]  __dump_stack+0x1d/0x30
[   60.322840][ T5273]  dump_stack_lvl+0xe8/0x140
[   60.322882][ T5273]  dump_stack+0x15/0x1b
[   60.322900][ T5273]  should_fail_ex+0x265/0x280
[   60.322989][ T5273]  should_failslab+0x8c/0xb0
[   60.323012][ T5273]  kmem_cache_alloc_noprof+0x69/0x4b0
[   60.323102][ T5273]  ? getname_flags+0x80/0x3b0
[   60.323124][ T5273]  getname_flags+0x80/0x3b0
[   60.323148][ T5273]  __se_sys_acct+0x6a/0x520
[   60.323235][ T5273]  __x64_sys_acct+0x1f/0x30
[   60.323327][ T5273]  x64_sys_call+0x2923/0x3000
[   60.323350][ T5273]  do_syscall_64+0xd8/0x2a0
[   60.323382][ T5273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.323407][ T5273] RIP: 0033:0x7fe6d68cf749
[   60.323452][ T5273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.323470][ T5273] RSP: 002b:00007fe6d5316038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[   60.323488][ T5273] RAX: ffffffffffffffda RBX: 00007fe6d6b26090 RCX: 00007fe6d68cf749
[   60.323500][ T5273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[   60.323570][ T5273] RBP: 00007fe6d5316090 R08: 0000000000000000 R09: 0000000000000000
[   60.323584][ T5273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.323596][ T5273] R13: 00007fe6d6b26128 R14: 00007fe6d6b26090 R15: 00007ffc6eb0b188
[   60.323613][ T5273]  </TASK>
[   60.518666][ T5275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'.
[   60.629748][ T5285] ref_ctr increment failed for inode: 0x2df offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107606c00
[   60.657028][ T5287] netlink: 'syz.2.668': attribute type 1 has an invalid length.
[   60.664924][ T5287] netlink: 224 bytes leftover after parsing attributes in process `syz.2.668'.
[   60.729540][ T5295] bond1: option tlb_dynamic_lb: invalid value (5)
[   60.737019][ T5295] bond1 (unregistering): Released all slaves
[   60.761706][ T5297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.671'.
[   60.945552][ T5318] netlink: 'syz.1.681': attribute type 21 has an invalid length.
[   60.953971][ T5318] netlink: 'syz.1.681': attribute type 1 has an invalid length.
[   60.961698][ T5318] netlink: 144 bytes leftover after parsing attributes in process `syz.1.681'.
[   61.084053][ T5334] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   61.173082][ T5338] syz_tun: entered allmulticast mode
[   61.296601][ T5356] veth0: entered promiscuous mode
[   61.303683][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'.
[   61.402347][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[   61.411957][ T5364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.699'.
[   61.452017][ T5371] veth0: entered promiscuous mode
[   61.461134][ T5371] FAULT_INJECTION: forcing a failure.
[   61.461134][ T5371] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   61.474227][ T5371] CPU: 1 UID: 0 PID: 5371 Comm: syz.1.703 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   61.474253][ T5371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   61.474321][ T5371] Call Trace:
[   61.474328][ T5371]  <TASK>
[   61.474336][ T5371]  __dump_stack+0x1d/0x30
[   61.474359][ T5371]  dump_stack_lvl+0xe8/0x140
[   61.474379][ T5371]  dump_stack+0x15/0x1b
[   61.474397][ T5371]  should_fail_ex+0x265/0x280
[   61.474463][ T5371]  should_fail+0xb/0x20
[   61.474482][ T5371]  should_fail_usercopy+0x1a/0x20
[   61.474523][ T5371]  _copy_from_user+0x1c/0xb0
[   61.474620][ T5371]  ___sys_sendmsg+0xc1/0x1d0
[   61.474656][ T5371]  __x64_sys_sendmsg+0xd4/0x160
[   61.474702][ T5371]  x64_sys_call+0x17ba/0x3000
[   61.474727][ T5371]  do_syscall_64+0xd8/0x2a0
[   61.474759][ T5371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.474780][ T5371] RIP: 0033:0x7fe6d68cf749
[   61.474864][ T5371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.474880][ T5371] RSP: 002b:00007fe6d5337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   61.474901][ T5371] RAX: ffffffffffffffda RBX: 00007fe6d6b25fa0 RCX: 00007fe6d68cf749
[   61.474915][ T5371] RDX: 0000000020048054 RSI: 0000200000000200 RDI: 0000000000000004
[   61.474929][ T5371] RBP: 00007fe6d5337090 R08: 0000000000000000 R09: 0000000000000000
[   61.474943][ T5371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.474955][ T5371] R13: 00007fe6d6b26038 R14: 00007fe6d6b25fa0 R15: 00007ffc6eb0b188
[   61.475016][ T5371]  </TASK>
[   61.475732][ T5370] veth0: left promiscuous mode
[   61.528858][ T5369] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   61.781577][ T5391] gretap0: left allmulticast mode
[   61.786658][ T5391] gretap0: left promiscuous mode
[   61.791882][ T5391] bridge0: port 3(gretap0) entered disabled state
[   61.828166][ T5391] bridge_slave_0: left promiscuous mode
[   61.834043][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.851482][ T5391] bridge_slave_1: left allmulticast mode
[   61.857162][ T5391] bridge_slave_1: left promiscuous mode
[   61.862855][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.879994][ T5391] bond0: (slave 
3
0
): Releasing backup interface
[   61.926714][ T5391] bond0: (slave bond_slave_1): Releasing backup interface
[   61.939963][ T5391] team0: Port device team_slave_0 removed
[   61.950212][ T5391] team0: Port device team_slave_1 removed
[   61.960137][ T5391] net_ratelimit: 14 callbacks suppressed
[   61.960151][ T5391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   61.995939][ T5407] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   62.113059][   T29] kauditd_printk_skb: 1262 callbacks suppressed
[   62.113072][   T29] audit: type=1400 audit(1765051773.322:3805): avc:  denied  { prog_load } for  pid=5414 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   62.141819][ T5417] FAULT_INJECTION: forcing a failure.
[   62.141819][ T5417] name failslab, interval 1, probability 0, space 0, times 0
[   62.154498][ T5417] CPU: 0 UID: 0 PID: 5417 Comm: syz.0.722 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.154593][ T5417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   62.154605][ T5417] Call Trace:
[   62.154612][ T5417]  <TASK>
[   62.154620][ T5417]  __dump_stack+0x1d/0x30
[   62.154645][ T5417]  dump_stack_lvl+0xe8/0x140
[   62.154668][ T5417]  dump_stack+0x15/0x1b
[   62.154767][ T5417]  should_fail_ex+0x265/0x280
[   62.154791][ T5417]  should_failslab+0x8c/0xb0
[   62.154815][ T5417]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[   62.154885][ T5417]  ? __alloc_skb+0x324/0x4d0
[   62.154911][ T5417]  __alloc_skb+0x324/0x4d0
[   62.154934][ T5417]  ? __alloc_skb+0x24d/0x4d0
[   62.154966][ T5417]  netlink_alloc_large_skb+0xbf/0xf0
[   62.154993][ T5417]  netlink_sendmsg+0x3cf/0x6b0
[   62.155033][ T5417]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.155066][ T5417]  __sock_sendmsg+0x145/0x180
[   62.155098][ T5417]  ____sys_sendmsg+0x31e/0x4a0
[   62.155199][ T5417]  ___sys_sendmsg+0x17b/0x1d0
[   62.155235][ T5417]  __x64_sys_sendmsg+0xd4/0x160
[   62.155264][ T5417]  x64_sys_call+0x17ba/0x3000
[   62.155291][ T5417]  do_syscall_64+0xd8/0x2a0
[   62.155324][ T5417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.155378][ T5417] RIP: 0033:0x7f88b81ff749
[   62.155393][ T5417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.155411][ T5417] RSP: 002b:00007f88b6c67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   62.155432][ T5417] RAX: ffffffffffffffda RBX: 00007f88b8455fa0 RCX: 00007f88b81ff749
[   62.155510][ T5417] RDX: 0000000020008010 RSI: 00002000000002c0 RDI: 0000000000000006
[   62.155524][ T5417] RBP: 00007f88b6c67090 R08: 0000000000000000 R09: 0000000000000000
[   62.155537][ T5417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.155551][ T5417] R13: 00007f88b8456038 R14: 00007f88b8455fa0 R15: 00007ffdf9e5ec08
[   62.155570][ T5417]  </TASK>
[   62.167528][   T29] audit: type=1400 audit(1765051773.322:3806): avc:  denied  { bpf } for  pid=5414 comm="syz.3.720" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   62.369129][   T29] audit: type=1400 audit(1765051773.322:3807): avc:  denied  { perfmon } for  pid=5414 comm="syz.3.720" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   62.389950][   T29] audit: type=1400 audit(1765051773.322:3808): avc:  denied  { bpf } for  pid=5414 comm="syz.3.720" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   62.410496][   T29] audit: type=1400 audit(1765051773.322:3809): avc:  denied  { prog_run } for  pid=5414 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   62.429492][   T29] audit: type=1400 audit(1765051773.342:3810): avc:  denied  { prog_load } for  pid=5416 comm="syz.0.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   62.448479][   T29] audit: type=1400 audit(1765051773.342:3811): avc:  denied  { bpf } for  pid=5416 comm="syz.0.722" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   62.469109][   T29] audit: type=1400 audit(1765051773.342:3812): avc:  denied  { perfmon } for  pid=5416 comm="syz.0.722" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   62.490370][   T29] audit: type=1400 audit(1765051773.342:3813): avc:  denied  { prog_run } for  pid=5416 comm="syz.0.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   62.509629][   T29] audit: type=1400 audit(1765051773.342:3814): avc:  denied  { create } for  pid=5416 comm="syz.0.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   62.531751][ T5429] ref_ctr increment failed for inode: 0x2e9 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104574380
[   62.668281][ T5384] syz.1.709 (5384) used greatest stack depth: 9720 bytes left
[   62.701190][ T5446] FAULT_INJECTION: forcing a failure.
[   62.701190][ T5446] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.714287][ T5446] CPU: 1 UID: 0 PID: 5446 Comm: syz.4.731 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.714384][ T5446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   62.714476][ T5446] Call Trace:
[   62.714484][ T5446]  <TASK>
[   62.714492][ T5446]  __dump_stack+0x1d/0x30
[   62.714515][ T5446]  dump_stack_lvl+0xe8/0x140
[   62.714534][ T5446]  dump_stack+0x15/0x1b
[   62.714550][ T5446]  should_fail_ex+0x265/0x280
[   62.714625][ T5446]  should_fail+0xb/0x20
[   62.714641][ T5446]  should_fail_usercopy+0x1a/0x20
[   62.714661][ T5446]  _copy_from_user+0x1c/0xb0
[   62.714684][ T5446]  __copy_msghdr+0x244/0x300
[   62.714721][ T5446]  ___sys_sendmsg+0x109/0x1d0
[   62.714821][ T5446]  __sys_sendmmsg+0x178/0x300
[   62.714855][ T5446]  __x64_sys_sendmmsg+0x57/0x70
[   62.714877][ T5446]  x64_sys_call+0x1e28/0x3000
[   62.714898][ T5446]  do_syscall_64+0xd8/0x2a0
[   62.714984][ T5446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.715003][ T5446] RIP: 0033:0x7f3dba36f749
[   62.715017][ T5446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.715032][ T5446] RSP: 002b:00007f3db8dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   62.715130][ T5446] RAX: ffffffffffffffda RBX: 00007f3dba5c5fa0 RCX: 00007f3dba36f749
[   62.715143][ T5446] RDX: 0000000000000002 RSI: 0000200000006b80 RDI: 0000000000000006
[   62.715156][ T5446] RBP: 00007f3db8dd7090 R08: 0000000000000000 R09: 0000000000000000
[   62.715169][ T5446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.715182][ T5446] R13: 00007f3dba5c6038 R14: 00007f3dba5c5fa0 R15: 00007ffe75d42288
[   62.715198][ T5446]  </TASK>
[   62.980075][ T5453] netlink: '+}[@': attribute type 1 has an invalid length.
[   63.010397][ T5453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   63.167918][ T5471] netlink: '+}[@': attribute type 1 has an invalid length.
[   63.456461][ T5497] FAULT_INJECTION: forcing a failure.
[   63.456461][ T5497] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   63.469542][ T5497] CPU: 1 UID: 0 PID: 5497 Comm: syz.3.758 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   63.469632][ T5497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   63.469643][ T5497] Call Trace:
[   63.469648][ T5497]  <TASK>
[   63.469679][ T5497]  __dump_stack+0x1d/0x30
[   63.469734][ T5497]  dump_stack_lvl+0xe8/0x140
[   63.469757][ T5497]  dump_stack+0x15/0x1b
[   63.469774][ T5497]  should_fail_ex+0x265/0x280
[   63.469798][ T5497]  should_fail+0xb/0x20
[   63.469822][ T5497]  should_fail_usercopy+0x1a/0x20
[   63.469870][ T5497]  _copy_from_user+0x1c/0xb0
[   63.469897][ T5497]  memdup_user+0x5e/0xd0
[   63.469915][ T5497]  strndup_user+0x68/0xb0
[   63.469931][ T5497]  bpf_uprobe_multi_link_attach+0x20b/0x900
[   63.469982][ T5497]  ? __rcu_read_unlock+0x4f/0x70
[   63.470001][ T5497]  ? __fget_files+0x184/0x1c0
[   63.470024][ T5497]  link_create+0x680/0x6e0
[   63.470050][ T5497]  __sys_bpf+0x628/0x7c0
[   63.470132][ T5497]  __x64_sys_bpf+0x41/0x50
[   63.470172][ T5497]  x64_sys_call+0x28e1/0x3000
[   63.470195][ T5497]  do_syscall_64+0xd8/0x2a0
[   63.470292][ T5497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.470337][ T5497] RIP: 0033:0x7fd3a690f749
[   63.470353][ T5497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.470371][ T5497] RSP: 002b:00007fd3a536f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   63.470405][ T5497] RAX: ffffffffffffffda RBX: 00007fd3a6b65fa0 RCX: 00007fd3a690f749
[   63.470438][ T5497] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c
[   63.470452][ T5497] RBP: 00007fd3a536f090 R08: 0000000000000000 R09: 0000000000000000
[   63.470464][ T5497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.470566][ T5497] R13: 00007fd3a6b66038 R14: 00007fd3a6b65fa0 R15: 00007ffd5cd60658
[   63.470584][ T5497]  </TASK>
[   63.708038][ T5501] netlink: 'syz.0.760': attribute type 3 has an invalid length.
[   63.802572][ T5510] ref_ctr increment failed for inode: 0x36a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881045772c0
[   63.927966][ T5518] netlink: '+}[@': attribute type 1 has an invalid length.
[   64.049675][ T5526] netlink: '+}[@': attribute type 1 has an invalid length.
[   64.062800][ T5528] syz.3.768 uses obsolete (PF_INET,SOCK_PACKET)
[   64.087115][ T5526] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   64.116809][ T5528] SELinux:  Context Ü is not valid (left unmapped).
[   64.158650][ T5531] ref_ctr increment failed for inode: 0x31d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104575100
[   64.217383][ T5538] ref_ctr increment failed for inode: 0x336 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104574a40
[   64.238509][ T5539] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   64.280431][ T5543] netlink: '+}[@': attribute type 1 has an invalid length.
[   64.590287][ T5570] lo speed is unknown, defaulting to 1000
[   64.953273][ T5576] netlink: '+}[@': attribute type 1 has an invalid length.
[   64.960528][ T5576] __nla_validate_parse: 9 callbacks suppressed
[   64.960542][ T5576] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[   65.308982][ T5589] FAULT_INJECTION: forcing a failure.
[   65.308982][ T5589] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   65.322158][ T5589] CPU: 1 UID: 0 PID: 5589 Comm: syz.1.795 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   65.322188][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   65.322202][ T5589] Call Trace:
[   65.322215][ T5589]  <TASK>
[   65.322224][ T5589]  __dump_stack+0x1d/0x30
[   65.322275][ T5589]  dump_stack_lvl+0xe8/0x140
[   65.322301][ T5589]  dump_stack+0x15/0x1b
[   65.322370][ T5589]  should_fail_ex+0x265/0x280
[   65.322462][ T5589]  should_fail+0xb/0x20
[   65.322479][ T5589]  should_fail_usercopy+0x1a/0x20
[   65.322598][ T5589]  _copy_from_user+0x1c/0xb0
[   65.322623][ T5589]  __se_sys_mount+0x10d/0x2e0
[   65.322682][ T5589]  ? fput+0x8f/0xc0
[   65.322706][ T5589]  ? ksys_write+0x192/0x1a0
[   65.322723][ T5589]  __x64_sys_mount+0x67/0x80
[   65.322804][ T5589]  x64_sys_call+0x2cca/0x3000
[   65.322829][ T5589]  do_syscall_64+0xd8/0x2a0
[   65.322859][ T5589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.322919][ T5589] RIP: 0033:0x7fe6d68cf749
[   65.322936][ T5589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.322980][ T5589] RSP: 002b:00007fe6d5337038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   65.323002][ T5589] RAX: ffffffffffffffda RBX: 00007fe6d6b25fa0 RCX: 00007fe6d68cf749
[   65.323013][ T5589] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000000
[   65.323025][ T5589] RBP: 00007fe6d5337090 R08: 0000200000000300 R09: 0000000000000000
[   65.323036][ T5589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.323047][ T5589] R13: 00007fe6d6b26038 R14: 00007fe6d6b25fa0 R15: 00007ffc6eb0b188
[   65.323134][ T5589]  </TASK>
[   65.641638][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'.
[   65.672360][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.797'.
[   65.827914][ T5609] ref_ctr increment failed for inode: 0x3b4 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107605100
[   66.358755][ T5643] netlink: 68 bytes leftover after parsing attributes in process `syz.3.815'.
[   66.629222][ T5662] netlink: '+}[@': attribute type 1 has an invalid length.
[   66.636486][ T5662] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[   66.668100][ T5665] netlink: 'syz.0.827': attribute type 3 has an invalid length.
[   66.736252][ T5672] netlink: '+}[@': attribute type 1 has an invalid length.
[   66.743594][ T5672] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[   66.797995][ T5672] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   66.866030][ T5685] netlink: 48 bytes leftover after parsing attributes in process `syz.4.837'.
[   66.932159][ T5695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'.
[   66.968992][ T5693] block device autoloading is deprecated and will be removed.
[   66.981070][ T5697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.839'.
[   66.990571][ T5693] capability: warning: `syz.1.840' uses 32-bit capabilities (legacy support in use)
[   67.129158][   T29] kauditd_printk_skb: 1331 callbacks suppressed
[   67.129172][   T29] audit: type=1400 audit(1765051778.332:5146): avc:  denied  { ioctl } for  pid=5692 comm="syz.1.840" path="/157/file0" dev="tmpfs" ino=865 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   67.168677][ T5706] netlink: 68 bytes leftover after parsing attributes in process `syz.4.844'.
[   67.174237][   T29] audit: type=1400 audit(1765051778.352:5147): avc:  denied  { map_create } for  pid=5708 comm="syz.3.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   67.196653][   T29] audit: type=1400 audit(1765051778.352:5148): avc:  denied  { bpf } for  pid=5708 comm="syz.3.845" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   67.217080][   T29] audit: type=1400 audit(1765051778.352:5149): avc:  denied  { map_read map_write } for  pid=5708 comm="syz.3.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   67.236898][   T29] audit: type=1400 audit(1765051778.352:5150): avc:  denied  { prog_load } for  pid=5708 comm="syz.3.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   67.256089][   T29] audit: type=1400 audit(1765051778.352:5151): avc:  denied  { perfmon } for  pid=5708 comm="syz.3.845" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   67.276978][   T29] audit: type=1400 audit(1765051778.352:5152): avc:  denied  { read write } for  pid=5708 comm="syz.3.845" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   67.287366][ T5716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.301083][   T29] audit: type=1400 audit(1765051778.352:5153): avc:  denied  { open } for  pid=5708 comm="syz.3.845" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   67.301109][   T29] audit: type=1400 audit(1765051778.372:5154): avc:  denied  { prog_load } for  pid=5710 comm="syz.3.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   67.301135][   T29] audit: type=1400 audit(1765051778.372:5155): avc:  denied  { bpf } for  pid=5710 comm="syz.3.846" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   67.308324][ T5716] IPv6: NLM_F_CREATE should be set when creating new route
[   67.379843][ T5716] IPv6: NLM_F_CREATE should be set when creating new route
[   67.424508][ T5716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.450387][ T5716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.645034][ T5732] loop2: detected capacity change from 0 to 256
[   68.265924][ T5769] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   68.298710][ T5769] loop2: detected capacity change from 0 to 2048
[   68.355674][ T5769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.425833][ T5769] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.439154][ T5769] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.868: bg 0: block 345: padding at end of block bitmap is not set
[   68.455153][ T5769] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   68.487333][ T5784] ref_ctr increment failed for inode: 0x3d8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107603cc0
[   68.726956][ T5796] ref_ctr increment failed for inode: 0x426 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104575100
[   69.140298][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.197958][ T5824] lo speed is unknown, defaulting to 1000
[   70.416268][ T5849] netlink: 'syz.4.900': attribute type 13 has an invalid length.
[   70.547741][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.554974][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.626680][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.648859][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.786461][   T52] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.796612][   T52] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.808775][   T52] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.834821][ T3327] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[   70.845727][ T3327] CPU: 0 UID: 0 PID: 3327 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[   70.845817][ T3327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   70.845828][ T3327] Call Trace:
[   70.845834][ T3327]  <TASK>
[   70.845842][ T3327]  __dump_stack+0x1d/0x30
[   70.845864][ T3327]  dump_stack_lvl+0xe8/0x140
[   70.846006][ T3327]  dump_stack+0x15/0x1b
[   70.846102][ T3327]  dump_header+0x81/0x240
[   70.846161][ T3327]  oom_kill_process+0x295/0x350
[   70.846182][ T3327]  out_of_memory+0x979/0xb80
[   70.846206][ T3327]  try_charge_memcg+0x610/0xa10
[   70.846245][ T3327]  charge_memcg+0x51/0xc0
[   70.846328][ T3327]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   70.846401][ T3327]  __read_swap_cache_async+0x17b/0x2d0
[   70.846451][ T3327]  swap_cluster_readahead+0x362/0x3c0
[   70.846489][ T3327]  swapin_readahead+0xde/0x820
[   70.846518][ T3327]  ? __rcu_read_unlock+0x4f/0x70
[   70.846542][ T3327]  ? __perf_event_task_sched_in+0xa5b/0xac0
[   70.846648][ T3327]  ? __list_add_valid_or_report+0x38/0xe0
[   70.846680][ T3327]  ? __rcu_read_unlock+0x4f/0x70
[   70.846746][ T3327]  ? swap_cache_get_folio+0x277/0x280
[   70.846778][ T3327]  do_swap_page+0x2b4/0x21e0
[   70.846809][ T3327]  ? _raw_spin_unlock+0x26/0x50
[   70.846906][ T3327]  ? __schedule+0x85f/0xcd0
[   70.846925][ T3327]  ? __pfx_default_wake_function+0x10/0x10
[   70.847019][ T3327]  handle_mm_fault+0x9d8/0x2c60
[   70.847095][ T3327]  do_user_addr_fault+0x630/0x1080
[   70.847167][ T3327]  exc_page_fault+0x62/0xa0
[   70.847246][ T3327]  asm_exc_page_fault+0x26/0x30
[   70.847264][ T3327] RIP: 0033:0x7fd3a6941fc5
[   70.847281][ T3327] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[   70.847301][ T3327] RSP: 002b:00007ffd5cd60998 EFLAGS: 00010246
[   70.847319][ T3327] RAX: 0000000000000000 RBX: 00000000000001ea RCX: 00007fd3a6941fc3
[   70.847401][ T3327] RDX: 00007ffd5cd609b0 RSI: 0000000000000000 RDI: 0000000000000000
[   70.847412][ T3327] RBP: 00007ffd5cd60a1c R08: 000000002b0c3043 R09: 0000000000000000
[   70.847423][ T3327] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[   70.847434][ T3327] R13: 00000000000927c0 R14: 000000000001139c R15: 00007ffd5cd60a70
[   70.847451][ T3327]  </TASK>
[   70.847457][ T3327] memory: usage 307200kB, limit 307200kB, failcnt 3184
[   70.873608][   T52] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.873804][ T3327] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0
[   71.094111][ T3327] kmem: usage 192612kB, limit 9007199254740988kB, failcnt 0
[   71.101438][ T3327] Memory cgroup stats for /syz3:
[   71.107667][ T3327] cache 0
[   71.115576][ T3327] rss 24576
[   71.118736][ T3327] shmem 0
[   71.121704][ T3327] mapped_file 0
[   71.125145][ T3327] dirty 0
[   71.128102][ T3327] writeback 0
[   71.131401][ T3327] workingset_refault_anon 238
[   71.136503][ T3327] workingset_refault_file 1416
[   71.141336][ T3327] swap 184320
[   71.144609][ T3327] swapcached 12288
[   71.148314][ T3327] pgpgin 46226
[   71.151772][ T3327] pgpgout 46220
[   71.155215][ T3327] pgfault 59242
[   71.158663][ T3327] pgmajfault 156
[   71.162236][ T3327] inactive_anon 0
[   71.165857][ T3327] active_anon 24576
[   71.169676][ T3327] inactive_file 0
[   71.173297][ T3327] active_file 0
[   71.176738][ T3327] unevictable 0
[   71.180260][ T3327] hierarchical_memory_limit 314572800
[   71.185621][ T3327] hierarchical_memsw_limit 9223372036854771712
[   71.191881][ T3327] total_cache 0
[   71.195426][ T3327] total_rss 24576
[   71.199062][ T3327] total_shmem 0
[   71.202543][ T3327] total_mapped_file 0
[   71.206508][ T3327] total_dirty 0
[   71.209992][ T3327] total_writeback 0
[   71.213784][ T3327] total_workingset_refault_anon 238
[   71.218965][ T3327] total_workingset_refault_file 1416
[   71.224297][ T3327] total_swap 184320
[   71.228150][ T3327] total_swapcached 12288
[   71.232426][ T3327] total_pgpgin 46226
[   71.236408][ T3327] total_pgpgout 46220
[   71.240474][ T3327] total_pgfault 59242
[   71.244439][ T3327] total_pgmajfault 156
[   71.248519][ T3327] total_inactive_anon 0
[   71.252744][ T3327] total_active_anon 24576
[   71.257056][ T3327] total_inactive_file 0
[   71.261288][ T3327] total_active_file 0
[   71.265254][ T3327] total_unevictable 0
[   71.269227][ T3327] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.896,pid=5844,uid=0
[   71.283808][ T3327] Memory cgroup out of memory: Killed process 5844 (syz.3.896) total-vm:93968kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   71.318430][ T5861] ref_ctr increment failed for inode: 0x389 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107605e80
[   71.443140][ T5867] netlink: '+}[@': attribute type 1 has an invalid length.
[   71.450423][ T5867] __nla_validate_parse: 5 callbacks suppressed
[   71.450486][ T5867] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[   71.807086][ T5889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.914'.
[   71.858640][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.916'.
[   71.983355][ T5897] netlink: '+}[@': attribute type 1 has an invalid length.
[   71.990657][ T5897] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[   72.060461][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'.
[   72.081746][ T5902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.923'.
[   72.131606][   T29] kauditd_printk_skb: 767 callbacks suppressed
[   72.131698][   T29] audit: type=1400 audit(1765051783.342:5923): avc:  denied  { create } for  pid=5903 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   72.164969][ T5904] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   72.176481][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[   72.187470][ T3316] CPU: 1 UID: 0 PID: 3316 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[   72.187495][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   72.187512][ T3316] Call Trace:
[   72.187519][ T3316]  <TASK>
[   72.187527][ T3316]  __dump_stack+0x1d/0x30
[   72.187617][ T3316]  dump_stack_lvl+0xe8/0x140
[   72.187642][ T3316]  dump_stack+0x15/0x1b
[   72.187664][ T3316]  dump_header+0x81/0x240
[   72.187685][ T3316]  oom_kill_process+0x295/0x350
[   72.187752][ T3316]  out_of_memory+0x979/0xb80
[   72.187772][ T3316]  try_charge_memcg+0x610/0xa10
[   72.187812][ T3316]  charge_memcg+0x51/0xc0
[   72.187885][ T3316]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   72.187918][ T3316]  __read_swap_cache_async+0x17b/0x2d0
[   72.187952][ T3316]  swap_cluster_readahead+0x262/0x3c0
[   72.188019][ T3316]  swapin_readahead+0xde/0x820
[   72.188116][ T3316]  ? next_uptodate_folio+0x81c/0x890
[   72.188143][ T3316]  ? percpu_counter_add_batch+0xb6/0x130
[   72.188224][ T3316]  ? __rcu_read_unlock+0x4f/0x70
[   72.188245][ T3316]  ? swap_cache_get_folio+0x277/0x280
[   72.188277][ T3316]  do_swap_page+0x2b4/0x21e0
[   72.188314][ T3316]  ? css_rstat_updated+0xb7/0x240
[   72.188408][ T3316]  ? __pfx_default_wake_function+0x10/0x10
[   72.188446][ T3316]  handle_mm_fault+0x9d8/0x2c60
[   72.188546][ T3316]  do_user_addr_fault+0x630/0x1080
[   72.188576][ T3316]  exc_page_fault+0x62/0xa0
[   72.188625][ T3316]  asm_exc_page_fault+0x26/0x30
[   72.188659][ T3316] RIP: 0033:0x7f88b80d5fd7
[   72.188676][ T3316] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 39 7c 24
[   72.188693][ T3316] RSP: 002b:00007ffdf9e5ef90 EFLAGS: 00010202
[   72.188774][ T3316] RAX: 0000001b33b24000 RBX: 00000000000001d0 RCX: 0000000000011940
[   72.188826][ T3316] RDX: 0000000000e87796 RSI: 00007ffdf9e5f020 RDI: 000000000000001a
[   72.188838][ T3316] RBP: 00007ffdf9e5efcc R08: 000000000376cab1 R09: 7fffffffffffffff
[   72.188852][ T3316] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388
[   72.188867][ T3316] R13: 00000000000927c0 R14: 00000000000118dd R15: 00007ffdf9e5f020
[   72.188887][ T3316]  </TASK>
[   72.188895][ T3316] memory: usage 307200kB, limit 307200kB, failcnt 1726
[   72.192805][   T29] audit: type=1400 audit(1765051783.342:5924): avc:  denied  { write } for  pid=5903 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   72.198858][ T3316] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0
[   72.208941][   T29] audit: type=1400 audit(1765051783.342:5925): avc:  denied  { read } for  pid=5903 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   72.212256][ T3316] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[   72.215168][   T29] audit: type=1400 audit(1765051783.372:5926): avc:  denied  { write } for  pid=5903 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   72.219499][ T3316] Memory cgroup stats for /syz0:
[   72.224153][   T29] audit: type=1400 audit(1765051783.372:5927): avc:  denied  { read } for  pid=5901 comm="syz.1.923" dev="nsfs" ino=4026532670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   72.238611][ T5910] loop2: detected capacity change from 0 to 1024
[   72.242204][   T29] audit: type=1400 audit(1765051783.372:5928): avc:  denied  { read open } for  pid=5901 comm="syz.1.923" path="net:[4026532670]" dev="nsfs" ino=4026532670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   72.249729][ T5910] EXT4-fs: Ignoring removed orlov option
[   72.251461][   T29] audit: type=1400 audit(1765051783.372:5929): avc:  denied  { create } for  pid=5901 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   72.273828][ T3316] cache 0
[   72.414840][   T29] audit: type=1400 audit(1765051783.452:5930): avc:  denied  { read write } for  pid=5908 comm="syz.2.924" name="loop2" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   72.430208][ T3316] rss 0
[   72.430218][ T3316] shmem 0
[   72.430225][ T3316] mapped_file 0
[   72.430232][ T3316] dirty 0
[   72.438108][   T29] audit: type=1400 audit(1765051783.452:5931): avc:  denied  { open } for  pid=5908 comm="syz.2.924" path="/dev/loop2" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   72.458275][ T3316] writeback 4096
[   72.465509][   T29] audit: type=1400 audit(1765051783.452:5932): avc:  denied  { ioctl } for  pid=5908 comm="syz.2.924" path="/dev/loop2" dev="devtmpfs" ino=637 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   72.513903][ T5904] lo speed is unknown, defaulting to 1000
[   72.518087][ T3316] workingset_refault_anon 117
[   72.518107][ T3316] workingset_refault_file 642
[   72.674271][ T3316] swap 212992
[   72.677541][ T3316] swapcached 16384
[   72.681266][ T3316] pgpgin 43846
[   72.684630][ T3316] pgpgout 43842
[   72.688080][ T3316] pgfault 62493
[   72.691137][ T5910] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   72.691546][ T3316] pgmajfault 72
[   72.704682][ T3316] inactive_anon 8192
[   72.708621][ T3316] active_anon 8192
[   72.712354][ T3316] inactive_file 0
[   72.716006][ T3316] active_file 0
[   72.719475][ T3316] unevictable 0
[   72.722920][ T3316] hierarchical_memory_limit 314572800
[   72.728296][ T3316] hierarchical_memsw_limit 9223372036854771712
[   72.734478][ T3316] total_cache 0
[   72.737995][ T3316] total_rss 0
[   72.741289][ T3316] total_shmem 0
[   72.744736][ T3316] total_mapped_file 0
[   72.748767][ T3316] total_dirty 0
[   72.752257][ T3316] total_writeback 4096
[   72.756310][ T3316] total_workingset_refault_anon 117
[   72.761593][ T3316] total_workingset_refault_file 642
[   72.766778][ T3316] total_swap 212992
[   72.770604][ T3316] total_swapcached 16384
[   72.774836][ T3316] total_pgpgin 43846
[   72.778802][ T3316] total_pgpgout 43842
[   72.782872][ T3316] total_pgfault 62493
[   72.783498][ T5910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.786835][ T3316] total_pgmajfault 72
[   72.786845][ T3316] total_inactive_anon 8192
[   72.786919][ T3316] total_active_anon 8192
[   72.786926][ T3316] total_inactive_file 0
[   72.786933][ T3316] total_active_file 0
[   72.820056][ T3316] total_unevictable 0
[   72.824039][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.915,pid=5885,uid=0
[   72.827039][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'.
[   72.838636][ T3316] Memory cgroup out of memory: Killed process 5885 (syz.0.915) total-vm:94100kB, anon-rss:1140kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   72.865066][ T5910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.924'.
[   73.084626][ T5936] netlink: 'syz.4.932': attribute type 2 has an invalid length.
[   73.109955][ T5933] netlink: 68 bytes leftover after parsing attributes in process `syz.3.931'.
[   73.118531][ T5936] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.121756][ T5939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.930'.
[   73.143664][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.153888][ T5936] bond1 (unregistering): Released all slaves
[   73.199609][ T5944] netlink: '+}[@': attribute type 1 has an invalid length.
[   73.220050][ T5936] netlink: 'syz.4.932': attribute type 10 has an invalid length.
[   73.501511][ T5973] netlink: '+}[@': attribute type 1 has an invalid length.
[   73.659657][ T5981] netlink: 'syz.4.950': attribute type 7 has an invalid length.
[   73.858097][ T6002] Cannot find add_set index 0 as target
[   73.886850][ T6006] netlink: '+}[@': attribute type 1 has an invalid length.
[   73.987229][ T6011] lo speed is unknown, defaulting to 1000
[   74.181631][ T6018] loop2: detected capacity change from 0 to 1024
[   74.209747][ T6018] EXT4-fs: Ignoring removed orlov option
[   74.237982][ T6018] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   74.297031][ T6018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.582843][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.867584][ T6043] loop2: detected capacity change from 0 to 1024
[   74.878946][ T6043] EXT4-fs: Ignoring removed orlov option
[   74.909998][ T6043] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   74.942016][ T6043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.162662][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.189562][ T6051] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   75.267964][ T6055] netlink: '+}[@': attribute type 1 has an invalid length.
[   75.371689][ T6060] team0: Port device dummy0 removed
[   75.377476][ T6060] bridge_slave_0: left allmulticast mode
[   75.383142][ T6060] bridge_slave_0: left promiscuous mode
[   75.388929][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.397283][ T6060] bridge_slave_1: left allmulticast mode
[   75.403066][ T6060] bridge_slave_1: left promiscuous mode
[   75.408851][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.417345][ T6060] bond0: (slave bond_slave_0): Releasing backup interface
[   75.425444][ T6060] bond0: (slave bond_slave_1): Releasing backup interface
[   75.434291][ T6060] team0: Port device team_slave_0 removed
[   75.440776][ T6060] team0: Port device team_slave_1 removed
[   75.446693][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.454515][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.462125][ T6060] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   75.543488][ T6062] validate_nla: 1 callbacks suppressed
[   75.543503][ T6062] netlink: 'syz.3.981': attribute type 7 has an invalid length.
[   75.965063][ T6081] lo speed is unknown, defaulting to 1000
[   76.405437][ T6086] ref_ctr increment failed for inode: 0x416 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104575100
[   77.163669][   T29] kauditd_printk_skb: 1036 callbacks suppressed
[   77.163682][   T29] audit: type=1400 audit(1765051788.372:6969): avc:  denied  { map_create } for  pid=6095 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   77.189244][   T29] audit: type=1400 audit(1765051788.372:6970): avc:  denied  { bpf } for  pid=6095 comm="syz.3.995" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   77.308759][   T29] audit: type=1400 audit(1765051788.422:6971): avc:  denied  { map_read map_write } for  pid=6095 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   77.328591][   T29] audit: type=1400 audit(1765051788.422:6972): avc:  denied  { create } for  pid=6095 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   77.349035][   T29] audit: type=1400 audit(1765051788.422:6973): avc:  denied  { write } for  pid=6095 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   77.369334][   T29] audit: type=1400 audit(1765051788.422:6974): avc:  denied  { read } for  pid=6095 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   77.389658][   T29] audit: type=1400 audit(1765051788.422:6975): avc:  denied  { name_bind } for  pid=6095 comm="syz.3.995" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   77.411241][   T29] audit: type=1400 audit(1765051788.422:6976): avc:  denied  { node_bind } for  pid=6095 comm="syz.3.995" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   77.431925][   T29] audit: type=1400 audit(1765051788.432:6977): avc:  denied  { prog_load } for  pid=6095 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   77.450905][   T29] audit: type=1400 audit(1765051788.432:6978): avc:  denied  { bpf } for  pid=6095 comm="syz.3.995" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   77.509049][ T6102] __nla_validate_parse: 19 callbacks suppressed
[   77.509064][ T6102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.997'.
[   77.834310][ T6119] ref_ctr increment failed for inode: 0x3f9 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104574a40
[   77.862489][ T6124] ref_ctr increment failed for inode: 0x427 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104571b00
[   77.979129][ T6132] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   78.054139][ T6137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6137 comm=syz.4.1014
[   78.104358][ T6141] Cannot find add_set index 0 as target
[   78.356163][ T6160] GUP no longer grows the stack in syz.4.1023 (6160): 200000004000-200000008000 (200000002000)
[   78.366659][ T6160] CPU: 1 UID: 0 PID: 6160 Comm: syz.4.1023 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   78.366684][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   78.366697][ T6160] Call Trace:
[   78.366703][ T6160]  <TASK>
[   78.366773][ T6160]  __dump_stack+0x1d/0x30
[   78.366798][ T6160]  dump_stack_lvl+0xe8/0x140
[   78.366839][ T6160]  dump_stack+0x15/0x1b
[   78.366927][ T6160]  __get_user_pages+0x1979/0x1ed0
[   78.366961][ T6160]  ? __rcu_read_unlock+0x4f/0x70
[   78.366986][ T6160]  get_user_pages_remote+0x1d5/0x6c0
[   78.367022][ T6160]  __access_remote_vm+0x15c/0x590
[   78.367090][ T6160]  access_remote_vm+0x32/0x40
[   78.367118][ T6160]  proc_pid_cmdline_read+0x32b/0x6c0
[   78.367144][ T6160]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[   78.367173][ T6160]  vfs_readv+0x3fb/0x690
[   78.367233][ T6160]  ? finish_task_switch+0x7a/0x2a0
[   78.367270][ T6160]  __x64_sys_preadv+0xfd/0x1c0
[   78.367295][ T6160]  x64_sys_call+0x2805/0x3000
[   78.367320][ T6160]  do_syscall_64+0xd8/0x2a0
[   78.367384][ T6160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.367405][ T6160] RIP: 0033:0x7f3dba36f749
[   78.367471][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.367491][ T6160] RSP: 002b:00007f3db8dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[   78.367513][ T6160] RAX: ffffffffffffffda RBX: 00007f3dba5c5fa0 RCX: 00007f3dba36f749
[   78.367528][ T6160] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000003
[   78.367543][ T6160] RBP: 00007f3dba3f3f91 R08: 0000000000000007 R09: 0000000000000000
[   78.367557][ T6160] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[   78.367591][ T6160] R13: 00007f3dba5c6038 R14: 00007f3dba5c5fa0 R15: 00007ffe75d42288
[   78.367610][ T6160]  </TASK>
[   78.614210][ T6165] FAULT_INJECTION: forcing a failure.
[   78.614210][ T6165] name failslab, interval 1, probability 0, space 0, times 0
[   78.620314][ T6163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1024'.
[   78.626986][ T6165] CPU: 1 UID: 0 PID: 6165 Comm: syz.4.1026 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   78.627014][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   78.627026][ T6165] Call Trace:
[   78.627033][ T6165]  <TASK>
[   78.627041][ T6165]  __dump_stack+0x1d/0x30
[   78.627076][ T6165]  dump_stack_lvl+0xe8/0x140
[   78.627130][ T6165]  dump_stack+0x15/0x1b
[   78.627171][ T6165]  should_fail_ex+0x265/0x280
[   78.627196][ T6165]  should_failslab+0x8c/0xb0
[   78.627294][ T6165]  __kmalloc_noprof+0xb9/0x5a0
[   78.627318][ T6165]  ? alloc_pipe_info+0x1c9/0x340
[   78.627338][ T6165]  ? alloc_pipe_info+0xae/0x340
[   78.627431][ T6165]  alloc_pipe_info+0x1c9/0x340
[   78.627452][ T6165]  fifo_open+0xa1/0x5d0
[   78.627473][ T6165]  ? __pfx_fifo_open+0x10/0x10
[   78.627494][ T6165]  do_dentry_open+0x54b/0xa60
[   78.627524][ T6165]  vfs_open+0x37/0x1e0
[   78.627559][ T6165]  path_openat+0x1ddd/0x23b0
[   78.627591][ T6165]  ? _raw_spin_lock_irqsave+0x75/0xd0
[   78.627619][ T6165]  ? __perf_event_task_sched_in+0xa5b/0xac0
[   78.627643][ T6165]  ? __rcu_read_unlock+0x4f/0x70
[   78.627706][ T6165]  do_filp_open+0x109/0x230
[   78.627746][ T6165]  file_open_name+0xfa/0x120
[   78.627845][ T6165]  __se_sys_acct+0xeb/0x520
[   78.627877][ T6165]  __x64_sys_acct+0x1f/0x30
[   78.627967][ T6165]  x64_sys_call+0x2923/0x3000
[   78.627993][ T6165]  do_syscall_64+0xd8/0x2a0
[   78.628026][ T6165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.628082][ T6165] RIP: 0033:0x7f3dba36f749
[   78.628098][ T6165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.628173][ T6165] RSP: 002b:00007f3db8dd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[   78.628193][ T6165] RAX: ffffffffffffffda RBX: 00007f3dba5c5fa0 RCX: 00007f3dba36f749
[   78.628207][ T6165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
[   78.628220][ T6165] RBP: 00007f3db8dd7090 R08: 0000000000000000 R09: 0000000000000000
[   78.628310][ T6165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.628323][ T6165] R13: 00007f3dba5c6038 R14: 00007f3dba5c5fa0 R15: 00007ffe75d42288
[   78.628343][ T6165]  </TASK>
[   78.852492][ T6170] ref_ctr increment failed for inode: 0x41f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107600d80
[   78.890083][ T6169] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1025'.
[   79.284922][ T6206] FAULT_INJECTION: forcing a failure.
[   79.284922][ T6206] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   79.298055][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: syz.3.1040 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   79.298142][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   79.298153][ T6206] Call Trace:
[   79.298193][ T6206]  <TASK>
[   79.298201][ T6206]  __dump_stack+0x1d/0x30
[   79.298228][ T6206]  dump_stack_lvl+0xe8/0x140
[   79.298260][ T6206]  dump_stack+0x15/0x1b
[   79.298281][ T6206]  should_fail_ex+0x265/0x280
[   79.298306][ T6206]  should_fail+0xb/0x20
[   79.298373][ T6206]  should_fail_usercopy+0x1a/0x20
[   79.298399][ T6206]  _copy_from_user+0x1c/0xb0
[   79.298428][ T6206]  ___sys_sendmsg+0xc1/0x1d0
[   79.298485][ T6206]  __x64_sys_sendmsg+0xd4/0x160
[   79.298514][ T6206]  x64_sys_call+0x17ba/0x3000
[   79.298536][ T6206]  do_syscall_64+0xd8/0x2a0
[   79.298626][ T6206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.298647][ T6206] RIP: 0033:0x7fd3a690f749
[   79.298692][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.298711][ T6206] RSP: 002b:00007fd3a536f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   79.298730][ T6206] RAX: ffffffffffffffda RBX: 00007fd3a6b65fa0 RCX: 00007fd3a690f749
[   79.298744][ T6206] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000004
[   79.298758][ T6206] RBP: 00007fd3a536f090 R08: 0000000000000000 R09: 0000000000000000
[   79.298772][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.298786][ T6206] R13: 00007fd3a6b66038 R14: 00007fd3a6b65fa0 R15: 00007ffd5cd60658
[   79.298811][ T6206]  </TASK>
[   79.464631][ T6209] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1042'.
[   79.638999][ T6227] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1049'.
[   79.756031][ T6236] ref_ctr increment failed for inode: 0x435 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104572f40
[   79.801741][ T6239] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1056'.
[   79.911915][ T6250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1057'.
[   80.149857][ T6264] FAULT_INJECTION: forcing a failure.
[   80.149857][ T6264] name failslab, interval 1, probability 0, space 0, times 0
[   80.162673][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.1.1066 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   80.162703][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   80.162717][ T6264] Call Trace:
[   80.162724][ T6264]  <TASK>
[   80.162732][ T6264]  __dump_stack+0x1d/0x30
[   80.162759][ T6264]  dump_stack_lvl+0xe8/0x140
[   80.162866][ T6264]  dump_stack+0x15/0x1b
[   80.162887][ T6264]  should_fail_ex+0x265/0x280
[   80.162956][ T6264]  should_failslab+0x8c/0xb0
[   80.162979][ T6264]  kmem_cache_alloc_noprof+0x69/0x4b0
[   80.163003][ T6264]  ? getname_flags+0x80/0x3b0
[   80.163030][ T6264]  getname_flags+0x80/0x3b0
[   80.163098][ T6264]  user_path_at+0x28/0x130
[   80.163202][ T6264]  __se_sys_mount_setattr+0x136/0x260
[   80.163238][ T6264]  __x64_sys_mount_setattr+0x67/0x80
[   80.163263][ T6264]  x64_sys_call+0x2b8b/0x3000
[   80.163290][ T6264]  do_syscall_64+0xd8/0x2a0
[   80.163362][ T6264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.163386][ T6264] RIP: 0033:0x7fe6d68cf749
[   80.163403][ T6264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.163472][ T6264] RSP: 002b:00007fe6d5337038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba
[   80.163492][ T6264] RAX: ffffffffffffffda RBX: 00007fe6d6b25fa0 RCX: 00007fe6d68cf749
[   80.163505][ T6264] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004
[   80.163528][ T6264] RBP: 00007fe6d5337090 R08: 0000000000000020 R09: 0000000000000000
[   80.163543][ T6264] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001
[   80.163557][ T6264] R13: 00007fe6d6b26038 R14: 00007fe6d6b25fa0 R15: 00007ffc6eb0b188
[   80.163578][ T6264]  </TASK>
[   80.212337][ T6265] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1067'.
[   80.379832][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1069'.
[   80.400488][ T6277] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1069'.
[   80.473374][ T6284] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   80.479153][ T6279] syz.4.1060 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   80.492725][ T6279] CPU: 0 UID: 0 PID: 6279 Comm: syz.4.1060 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   80.492834][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   80.492845][ T6279] Call Trace:
[   80.492851][ T6279]  <TASK>
[   80.492859][ T6279]  __dump_stack+0x1d/0x30
[   80.492885][ T6279]  dump_stack_lvl+0xe8/0x140
[   80.492985][ T6279]  dump_stack+0x15/0x1b
[   80.493013][ T6279]  dump_header+0x81/0x240
[   80.493133][ T6279]  oom_kill_process+0x295/0x350
[   80.493157][ T6279]  out_of_memory+0x979/0xb80
[   80.493183][ T6279]  try_charge_memcg+0x610/0xa10
[   80.493227][ T6279]  charge_memcg+0x51/0xc0
[   80.493280][ T6279]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   80.493320][ T6279]  __read_swap_cache_async+0x17b/0x2d0
[   80.493350][ T6279]  swap_cluster_readahead+0x262/0x3c0
[   80.493421][ T6279]  swapin_readahead+0xde/0x820
[   80.493449][ T6279]  ? __schedule+0x85f/0xcd0
[   80.493477][ T6279]  ? __rcu_read_unlock+0x4f/0x70
[   80.493532][ T6279]  ? swap_cache_get_folio+0x277/0x280
[   80.493560][ T6279]  do_swap_page+0x2b4/0x21e0
[   80.493716][ T6279]  ? __pfx_futex_wake_mark+0x10/0x10
[   80.493748][ T6279]  ? __pfx_default_wake_function+0x10/0x10
[   80.493788][ T6279]  handle_mm_fault+0x9d8/0x2c60
[   80.493903][ T6279]  do_user_addr_fault+0x630/0x1080
[   80.493956][ T6279]  exc_page_fault+0x62/0xa0
[   80.493986][ T6279]  asm_exc_page_fault+0x26/0x30
[   80.494010][ T6279] RIP: 0033:0x7f3dba36f751
[   80.494026][ T6279] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   80.494066][ T6279] RSP: 002b:00007f3db8d950e8 EFLAGS: 00010217
[   80.494081][ T6279] RAX: 0000000000000000 RBX: 00007f3dba5c6188 RCX: 00007f3dba36f749
[   80.494165][ T6279] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3dba5c6188
[   80.494180][ T6279] RBP: 00007f3dba5c6180 R08: 0000000000000000 R09: 0000000000000000
[   80.494194][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.494209][ T6279] R13: 00007f3dba5c6218 R14: 00007ffe75d421a0 R15: 00007ffe75d42288
[   80.494231][ T6279]  </TASK>
[   80.494238][ T6279] memory: usage 307200kB, limit 307200kB, failcnt 911
[   80.500174][ T6284] lo speed is unknown, defaulting to 1000
[   80.504151][ T6279] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0
[   80.721632][ T6279] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[   80.728909][ T6279] Memory cgroup stats for /syz4:
[   80.850753][ T6279] cache 0
[   80.858625][ T6279] rss 0
[   80.861406][ T6279] shmem 0
[   80.864401][ T6279] mapped_file 0
[   80.867858][ T6279] dirty 0
[   80.870821][ T6279] writeback 0
[   80.874091][ T6279] workingset_refault_anon 40
[   80.878664][ T6279] workingset_refault_file 284
[   80.883443][ T6279] swap 217088
[   80.886721][ T6279] swapcached 8192
[   80.890464][ T6279] pgpgin 61716
[   80.893830][ T6279] pgpgout 61714
[   80.897335][ T6279] pgfault 66844
[   80.900817][ T6279] pgmajfault 28
[   80.904269][ T6279] inactive_anon 0
[   80.907979][ T6279] active_anon 4096
[   80.911815][ T6279] inactive_file 0
[   80.915480][ T6279] active_file 0
[   80.918981][ T6279] unevictable 0
[   80.922466][ T6279] hierarchical_memory_limit 314572800
[   80.927824][ T6279] hierarchical_memsw_limit 9223372036854771712
[   80.934006][ T6279] total_cache 0
[   80.937471][ T6279] total_rss 0
[   80.940777][ T6279] total_shmem 0
[   80.944265][ T6279] total_mapped_file 0
[   80.948232][ T6279] total_dirty 0
[   80.951735][ T6279] total_writeback 0
[   80.955530][ T6279] total_workingset_refault_anon 40
[   80.960799][ T6279] total_workingset_refault_file 284
[   80.965985][ T6279] total_swap 217088
[   80.969798][ T6279] total_swapcached 8192
[   80.973942][ T6279] total_pgpgin 61716
[   80.977826][ T6279] total_pgpgout 61714
[   80.981825][ T6279] total_pgfault 66844
[   80.985870][ T6279] total_pgmajfault 28
[   80.989869][ T6279] total_inactive_anon 0
[   80.994078][ T6279] total_active_anon 4096
[   80.998369][ T6279] total_inactive_file 0
[   81.002535][ T6279] total_active_file 0
[   81.006536][ T6279] total_unevictable 0
[   81.010541][ T6279] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1060,pid=6251,uid=0
[   81.025179][ T6279] Memory cgroup out of memory: Killed process 6251 (syz.4.1060) total-vm:96148kB, anon-rss:1136kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   81.233429][ T6308] ref_ctr increment failed for inode: 0x54b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107605100
[   81.379291][ T6321] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   81.436690][ T6321] lo speed is unknown, defaulting to 1000
[   81.589769][ T6336] FAULT_INJECTION: forcing a failure.
[   81.589769][ T6336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.602977][ T6336] CPU: 0 UID: 0 PID: 6336 Comm: syz.1.1091 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   81.603045][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   81.603059][ T6336] Call Trace:
[   81.603066][ T6336]  <TASK>
[   81.603075][ T6336]  __dump_stack+0x1d/0x30
[   81.603100][ T6336]  dump_stack_lvl+0xe8/0x140
[   81.603122][ T6336]  dump_stack+0x15/0x1b
[   81.603178][ T6336]  should_fail_ex+0x265/0x280
[   81.603204][ T6336]  should_fail+0xb/0x20
[   81.603303][ T6336]  should_fail_usercopy+0x1a/0x20
[   81.603328][ T6336]  _copy_from_user+0x1c/0xb0
[   81.603386][ T6336]  do_ipv6_setsockopt+0x124/0x2160
[   81.603463][ T6336]  ? kstrtoull+0x111/0x140
[   81.603500][ T6336]  ? avc_has_perm_noaudit+0xab/0x130
[   81.603577][ T6336]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[   81.603638][ T6336]  ipv6_setsockopt+0x59/0x130
[   81.603727][ T6336]  udpv6_setsockopt+0x99/0xb0
[   81.603758][ T6336]  sock_common_setsockopt+0x69/0x80
[   81.603811][ T6336]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   81.603866][ T6336]  __sys_setsockopt+0x184/0x200
[   81.603893][ T6336]  __x64_sys_setsockopt+0x64/0x80
[   81.603923][ T6336]  x64_sys_call+0x21d5/0x3000
[   81.603964][ T6336]  do_syscall_64+0xd8/0x2a0
[   81.603993][ T6336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.604015][ T6336] RIP: 0033:0x7fe6d68cf749
[   81.604107][ T6336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.604128][ T6336] RSP: 002b:00007fe6d5337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   81.604149][ T6336] RAX: ffffffffffffffda RBX: 00007fe6d6b25fa0 RCX: 00007fe6d68cf749
[   81.604161][ T6336] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000006
[   81.604172][ T6336] RBP: 00007fe6d5337090 R08: 0000000000000108 R09: 0000000000000000
[   81.604186][ T6336] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001
[   81.604273][ T6336] R13: 00007fe6d6b26038 R14: 00007fe6d6b25fa0 R15: 00007ffc6eb0b188
[   81.604289][ T6336]  </TASK>
[   81.999861][ T6354] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   82.015869][ T6361] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   82.047818][ T6361] lo speed is unknown, defaulting to 1000
[   82.209399][   T29] kauditd_printk_skb: 1143 callbacks suppressed
[   82.209413][   T29] audit: type=1400 audit(1765051793.422:8122): avc:  denied  { read } for  pid=6366 comm="syz.2.1105" dev="nsfs" ino=4026532898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   82.246940][   T29] audit: type=1400 audit(1765051793.422:8123): avc:  denied  { open } for  pid=6366 comm="syz.2.1105" path="net:[4026532898]" dev="nsfs" ino=4026532898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   82.248356][ T6375] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   82.270230][   T29] audit: type=1400 audit(1765051793.422:8124): avc:  denied  { create } for  pid=6366 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   82.300954][   T29] audit: type=1400 audit(1765051793.452:8125): avc:  denied  { write } for  pid=6366 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   82.321377][   T29] audit: type=1400 audit(1765051793.452:8126): avc:  denied  { read } for  pid=6366 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   82.341624][   T29] audit: type=1400 audit(1765051793.452:8127): avc:  denied  { write } for  pid=6366 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   82.362020][   T29] audit: type=1400 audit(1765051793.452:8128): avc:  denied  { read } for  pid=6366 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   82.382397][   T29] audit: type=1400 audit(1765051793.452:8129): avc:  denied  { prog_load } for  pid=6372 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   82.401482][   T29] audit: type=1400 audit(1765051793.452:8130): avc:  denied  { bpf } for  pid=6372 comm="syz.0.1106" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   82.422169][   T29] audit: type=1400 audit(1765051793.452:8131): avc:  denied  { perfmon } for  pid=6372 comm="syz.0.1106" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   82.565625][ T6387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.595134][ T6391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   82.629400][ T6387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.697193][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.706121][ T6395] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[   82.721210][ T6402] __nla_validate_parse: 10 callbacks suppressed
[   82.721225][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1116'.
[   82.739771][ T6395] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[   82.765463][ T6387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.853175][ T6387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.888033][ T6414] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   82.967640][ T6414] lo speed is unknown, defaulting to 1000
[   83.011267][   T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.081025][   T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.101877][   T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.122409][   T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.352966][ T6462] netlink: '+}[@': attribute type 1 has an invalid length.
[   83.360248][ T6462] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[   83.452170][ T6462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   83.849852][ T6489] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1137'.
[   83.954765][ T6496] SELinux: failed to load policy
[   84.100063][ T6508] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   84.108259][ T6508] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   84.132533][ T6508] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1143'.
[   84.212599][ T6516] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   84.269664][ T6516] lo speed is unknown, defaulting to 1000
[   84.428084][ T6491] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   84.581328][ T6526] ref_ctr increment failed for inode: 0x4a7 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107601b00
[   84.629011][ T6530] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1151'.
[   84.914111][ T6556] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1161'.
[   85.236806][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1170'.
[   85.372296][ T6588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1173'.
[   85.381325][ T6588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1173'.
[   85.648122][ T6602] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1177'.
[   85.708047][ T6605] FAULT_INJECTION: forcing a failure.
[   85.708047][ T6605] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   85.721157][ T6605] CPU: 1 UID: 0 PID: 6605 Comm: syz.4.1178 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   85.721182][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   85.721212][ T6605] Call Trace:
[   85.721219][ T6605]  <TASK>
[   85.721227][ T6605]  __dump_stack+0x1d/0x30
[   85.721266][ T6605]  dump_stack_lvl+0xe8/0x140
[   85.721286][ T6605]  dump_stack+0x15/0x1b
[   85.721303][ T6605]  should_fail_ex+0x265/0x280
[   85.721323][ T6605]  should_fail+0xb/0x20
[   85.721343][ T6605]  should_fail_usercopy+0x1a/0x20
[   85.721412][ T6605]  _copy_from_user+0x1c/0xb0
[   85.721438][ T6605]  memdup_user+0x5e/0xd0
[   85.721457][ T6605]  strndup_user+0x68/0xb0
[   85.721476][ T6605]  keyctl_restrict_keyring+0x15a/0x1b0
[   85.721587][ T6605]  __se_sys_keyctl+0x1ed/0xb80
[   85.721612][ T6605]  ? __rcu_read_unlock+0x4f/0x70
[   85.721658][ T6605]  ? __fget_files+0x184/0x1c0
[   85.721702][ T6605]  ? mutex_unlock+0x4f/0x90
[   85.721723][ T6605]  ? fput+0x8f/0xc0
[   85.721746][ T6605]  __x64_sys_keyctl+0x67/0x80
[   85.721773][ T6605]  x64_sys_call+0x27b8/0x3000
[   85.721816][ T6605]  do_syscall_64+0xd8/0x2a0
[   85.721844][ T6605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.721918][ T6605] RIP: 0033:0x7f3dba36f749
[   85.721931][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.721947][ T6605] RSP: 002b:00007f3db8dd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[   85.721965][ T6605] RAX: ffffffffffffffda RBX: 00007f3dba5c5fa0 RCX: 00007f3dba36f749
[   85.722024][ T6605] RDX: 0000200000000200 RSI: 0000000021eb14e9 RDI: 000000000000001d
[   85.722035][ T6605] RBP: 00007f3db8dd7090 R08: 0000000000000000 R09: 0000000000000000
[   85.722046][ T6605] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001
[   85.722089][ T6605] R13: 00007f3dba5c6038 R14: 00007f3dba5c5fa0 R15: 00007ffe75d42288
[   85.722105][ T6605]  </TASK>
[   85.944338][ T3499] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[   85.951817][ T3499] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[   85.959388][ T3499] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[   85.966953][ T3499] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[   85.974426][ T3499] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[   85.981946][ T3499] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[   85.989359][ T3499] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[   85.996809][ T3499] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[   86.004370][ T3499] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[   86.011791][ T3499] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[   86.025596][ T3499] hid-generic 00A0:0006:0003.0001: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[   86.123136][ T6621] netlink: '+}[@': attribute type 1 has an invalid length.
[   86.125700][ T6617] fido_id[6617]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   86.226560][ T6631] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   86.240630][ T6630] IPv6: NLM_F_CREATE should be specified when creating new route
[   86.260752][ T6631] lo speed is unknown, defaulting to 1000
[   86.442681][ T6644] ref_ctr increment failed for inode: 0x529 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881076057c0
[   86.501716][ T6646] ref_ctr increment failed for inode: 0x5c9 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107601b00
[   86.766326][ T6665] lo speed is unknown, defaulting to 1000
[   87.183784][ T6682] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   87.211807][ T6682] lo speed is unknown, defaulting to 1000
[   87.251330][   T29] kauditd_printk_skb: 1383 callbacks suppressed
[   87.251349][   T29] audit: type=1400 audit(1765051799.472:9515): avc:  denied  { prog_load } for  pid=6681 comm="syz.3.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   87.276691][   T29] audit: type=1400 audit(1765051799.472:9516): avc:  denied  { bpf } for  pid=6681 comm="syz.3.1208" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   87.297284][   T29] audit: type=1400 audit(1765051799.472:9517): avc:  denied  { perfmon } for  pid=6681 comm="syz.3.1208" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   87.323599][   T29] audit: type=1400 audit(1765051799.542:9518): avc:  denied  { perfmon } for  pid=6681 comm="syz.3.1208" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   87.344572][   T29] audit: type=1400 audit(1765051799.542:9519): avc:  denied  { bpf } for  pid=6681 comm="syz.3.1208" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   87.365209][   T29] audit: type=1400 audit(1765051799.542:9520): avc:  denied  { prog_run } for  pid=6681 comm="syz.3.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   87.401057][   T29] audit: type=1400 audit(1765051799.612:9521): avc:  denied  { map_create } for  pid=6685 comm="syz.0.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   87.414258][ T6686] ref_ctr increment failed for inode: 0x553 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107601b00
[   87.420323][   T29] audit: type=1400 audit(1765051799.612:9522): avc:  denied  { bpf } for  pid=6685 comm="syz.0.1209" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   87.452008][   T29] audit: type=1400 audit(1765051799.612:9523): avc:  denied  { map_read map_write } for  pid=6685 comm="syz.0.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   87.471963][   T29] audit: type=1400 audit(1765051799.612:9524): avc:  denied  { prog_load } for  pid=6685 comm="syz.0.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   87.513850][ T6688] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   87.607769][ T6688] lo speed is unknown, defaulting to 1000
[   87.628033][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   87.688240][ T6697] ref_ctr increment failed for inode: 0x5ea offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104574380
[   87.883313][ T6706] netlink: 'syz.3.1217': attribute type 1 has an invalid length.
[   87.891116][ T6706] netlink: 'syz.3.1217': attribute type 4 has an invalid length.
[   87.898918][ T6706] __nla_validate_parse: 6 callbacks suppressed
[   87.898931][ T6706] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1217'.
[   88.813067][ T6715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1220'.
[   88.893905][ T6719] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   88.945985][ T6719] lo speed is unknown, defaulting to 1000
[   89.006647][ T6726] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   89.121856][ T6732] netlink: 'syz.3.1227': attribute type 1 has an invalid length.
[   89.129638][ T6732] netlink: 'syz.3.1227': attribute type 4 has an invalid length.
[   89.137430][ T6732] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1227'.
[   89.167825][ T6730] lo speed is unknown, defaulting to 1000
[   89.175826][ T6738] netlink: 'syz.3.1227': attribute type 1 has an invalid length.
[   89.183599][ T6738] netlink: 'syz.3.1227': attribute type 4 has an invalid length.
[   89.191433][ T6738] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1227'.
[   89.221723][ T6736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53864 sclass=netlink_route_socket pid=6736 comm=syz.2.1229
[   89.410681][ T6747] ref_ctr increment failed for inode: 0x605 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881076021c0
[   89.532050][ T6756] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   89.613929][ T6756] lo speed is unknown, defaulting to 1000
[   89.640082][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1239'.
[   89.999495][ T6785] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   90.038675][ T6785] lo speed is unknown, defaulting to 1000
[   90.145269][ T6793] lo speed is unknown, defaulting to 1000
[   90.207200][ T3538] udevd[3538]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   90.304264][ T6799] netlink: '+}[@': attribute type 1 has an invalid length.
[   90.311573][ T6799] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[   90.490725][ T6807] lo speed is unknown, defaulting to 1000
[   91.430760][ T6831] netlink: '+}[@': attribute type 1 has an invalid length.
[   91.438060][ T6831] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[   91.480483][ T6831] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   91.569979][ T6839] netlink: '+}[@': attribute type 1 has an invalid length.
[   91.577213][ T6839] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[   91.605668][ T1036] hid_parser_main: 5 callbacks suppressed
[   91.605684][ T1036] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   91.618916][ T1036] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   91.626347][ T1036] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   91.633824][ T1036] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   91.641362][ T1036] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   91.648891][ T1036] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   91.656417][ T1036] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   91.663806][ T1036] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   91.671198][ T1036] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   91.678623][ T1036] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[   91.750875][ T6841] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1269'.
[   91.784821][ T1036] hid-generic 00A0:0006:0003.0002: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[   91.982633][ T6852] fido_id[6852]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   92.048295][ T3928] hid-generic 00A0:0006:0003.0003: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[   92.136112][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1279'.
[   92.170340][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   92.192222][ T6870] fido_id[6870]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   92.268377][   T29] kauditd_printk_skb: 859 callbacks suppressed
[   92.268393][   T29] audit: type=1400 audit(1765051804.482:10384): avc:  denied  { write } for  pid=6879 comm="syz.2.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   92.298959][   T29] audit: type=1400 audit(1765051804.512:10385): avc:  denied  { setopt } for  pid=6879 comm="syz.2.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   92.318504][   T29] audit: type=1400 audit(1765051804.512:10386): avc:  denied  { write } for  pid=6879 comm="syz.2.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   92.339960][   T29] audit: type=1400 audit(1765051804.562:10387): avc:  denied  { create } for  pid=6882 comm="syz.1.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   92.361678][   T29] audit: type=1400 audit(1765051804.562:10388): avc:  denied  { write } for  pid=6882 comm="syz.1.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   92.382300][   T29] audit: type=1400 audit(1765051804.562:10389): avc:  denied  { map_create } for  pid=6884 comm="syz.2.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   92.401561][   T29] audit: type=1400 audit(1765051804.562:10390): avc:  denied  { prog_load } for  pid=6884 comm="syz.2.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   92.420739][   T29] audit: type=1400 audit(1765051804.562:10391): avc:  denied  { bpf } for  pid=6884 comm="syz.2.1287" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   92.441505][   T29] audit: type=1400 audit(1765051804.562:10392): avc:  denied  { perfmon } for  pid=6884 comm="syz.2.1287" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   92.462530][   T29] audit: type=1400 audit(1765051804.562:10393): avc:  denied  { execmem } for  pid=6884 comm="syz.2.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   92.595418][ T6900] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   92.637731][ T6902] lo speed is unknown, defaulting to 1000
[   93.136802][ T6917] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   93.597701][ T6930] netlink: '+}[@': attribute type 1 has an invalid length.
[   93.605020][ T6930] __nla_validate_parse: 1 callbacks suppressed
[   93.605032][ T6930] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[   93.767921][ T6930] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   94.104043][ T6947] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   94.141202][ T6947] lo speed is unknown, defaulting to 1000
[   94.450073][ T6964] netlink: '+}[@': attribute type 1 has an invalid length.
[   94.457298][ T6964] netlink: 224 bytes leftover after parsing attributes in process `+}[@'.
[   94.496133][ T6964] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   94.537166][ T6942] syz.1.1309 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   94.548205][ T6942] CPU: 1 UID: 0 PID: 6942 Comm: syz.1.1309 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   94.548303][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   94.548315][ T6942] Call Trace:
[   94.548323][ T6942]  <TASK>
[   94.548331][ T6942]  __dump_stack+0x1d/0x30
[   94.548361][ T6942]  dump_stack_lvl+0xe8/0x140
[   94.548387][ T6942]  dump_stack+0x15/0x1b
[   94.548431][ T6942]  dump_header+0x81/0x240
[   94.548451][ T6942]  oom_kill_process+0x295/0x350
[   94.548471][ T6942]  out_of_memory+0x979/0xb80
[   94.548492][ T6942]  try_charge_memcg+0x610/0xa10
[   94.548611][ T6942]  charge_memcg+0x51/0xc0
[   94.548641][ T6942]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   94.548752][ T6942]  __read_swap_cache_async+0x17b/0x2d0
[   94.548903][ T6942]  swap_cluster_readahead+0x262/0x3c0
[   94.548936][ T6942]  swapin_readahead+0xde/0x820
[   94.548971][ T6942]  ? mod_memcg_lruvec_state+0x1a1/0x280
[   94.549019][ T6942]  ? lruvec_stat_mod_folio+0xd6/0x120
[   94.549042][ T6942]  ? __rcu_read_unlock+0x4f/0x70
[   94.549082][ T6942]  ? swap_cache_get_folio+0x277/0x280
[   94.549144][ T6942]  do_swap_page+0x2b4/0x21e0
[   94.549301][ T6942]  ? css_rstat_updated+0xb7/0x240
[   94.549319][ T6942]  ? __pfx_default_wake_function+0x10/0x10
[   94.549354][ T6942]  handle_mm_fault+0x9d8/0x2c60
[   94.549571][ T6942]  do_user_addr_fault+0x630/0x1080
[   94.549599][ T6942]  exc_page_fault+0x62/0xa0
[   94.549628][ T6942]  asm_exc_page_fault+0x26/0x30
[   94.549656][ T6942] RIP: 0033:0x7fe6d67a59ec
[   94.549672][ T6942] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[   94.549692][ T6942] RSP: 002b:00007ffc6eb0b2f0 EFLAGS: 00010206
[   94.549712][ T6942] RAX: 0000000000000000 RBX: 00007fe6d6b25fa0 RCX: 0000000000000000
[   94.549725][ T6942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555ca7808
[   94.549737][ T6942] RBP: 00007fe6d6b27da0 R08: 0000000000000000 R09: 7fffffffffffffff
[   94.549749][ T6942] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001729f
[   94.549762][ T6942] R13: 00007fe6d6b26180 R14: ffffffffffffffff R15: 00007ffc6eb0b400
[   94.549783][ T6942]  </TASK>
[   94.761688][ T6942] memory: usage 307200kB, limit 307200kB, failcnt 2795
[   94.768657][ T6942] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0
[   94.776565][ T6942] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[   94.783864][ T6942] Memory cgroup stats for /syz1:
[   94.816901][ T6942] cache 4096
[   94.825060][ T6942] rss 0
[   94.827856][ T6942] shmem 0
[   94.830823][ T6942] mapped_file 0
[   94.834267][ T6942] dirty 0
[   94.837180][ T6942] writeback 0
[   94.840581][ T6942] workingset_refault_anon 1759
[   94.845336][ T6942] workingset_refault_file 1490
[   94.850130][ T6942] swap 208896
[   94.853402][ T6942] swapcached 8192
[   94.857017][ T6942] pgpgin 66957
[   94.860462][ T6942] pgpgout 66954
[   94.863907][ T6942] pgfault 81730
[   94.867350][ T6942] pgmajfault 356
[   94.870911][ T6942] inactive_anon 0
[   94.874529][ T6942] active_anon 8192
[   94.878278][ T6942] inactive_file 0
[   94.882189][ T6942] active_file 4096
[   94.885894][ T6942] unevictable 0
[   94.889365][ T6942] hierarchical_memory_limit 314572800
[   94.894718][ T6942] hierarchical_memsw_limit 9223372036854771712
[   94.900907][ T6942] total_cache 4096
[   94.904613][ T6942] total_rss 0
[   94.907886][ T6942] total_shmem 0
[   94.911380][ T6942] total_mapped_file 0
[   94.915344][ T6942] total_dirty 0
[   94.918788][ T6942] total_writeback 0
[   94.922659][ T6942] total_workingset_refault_anon 1759
[   94.927923][ T6942] total_workingset_refault_file 1490
[   94.933247][ T6942] total_swap 208896
[   94.937121][ T6942] total_swapcached 8192
[   94.941289][ T6942] total_pgpgin 66957
[   94.945172][ T6942] total_pgpgout 66954
[   94.949134][ T6942] total_pgfault 81730
[   94.953182][ T6942] total_pgmajfault 356
[   94.957234][ T6942] total_inactive_anon 0
[   94.961421][ T6942] total_active_anon 8192
[   94.965646][ T6942] total_inactive_file 0
[   94.969833][ T6942] total_active_file 4096
[   94.974060][ T6942] total_unevictable 0
[   94.978048][ T6942] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1309,pid=6942,uid=0
[   94.992727][ T6942] Memory cgroup out of memory: Killed process 6942 (syz.1.1309) total-vm:94104kB, anon-rss:1136kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   95.084424][ T3538] udevd[3538]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   95.135202][ T6978] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   95.318876][ T6992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1326'.
[   95.333774][ T5430] hid-generic 00A0:0006:0003.0004: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[   95.397723][ T6995] lo speed is unknown, defaulting to 1000
[   95.431256][ T6996] fido_id[6996]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   96.143521][ T7013] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   96.288904][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1340'.
[   96.502086][ T3328] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[   96.513082][ T3328] CPU: 1 UID: 0 PID: 3328 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[   96.513110][ T3328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   96.513125][ T3328] Call Trace:
[   96.513132][ T3328]  <TASK>
[   96.513141][ T3328]  __dump_stack+0x1d/0x30
[   96.513164][ T3328]  dump_stack_lvl+0xe8/0x140
[   96.513250][ T3328]  dump_stack+0x15/0x1b
[   96.513268][ T3328]  dump_header+0x81/0x240
[   96.513286][ T3328]  oom_kill_process+0x295/0x350
[   96.513339][ T3328]  out_of_memory+0x979/0xb80
[   96.513360][ T3328]  try_charge_memcg+0x610/0xa10
[   96.513397][ T3328]  charge_memcg+0x51/0xc0
[   96.513429][ T3328]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   96.513492][ T3328]  __read_swap_cache_async+0x17b/0x2d0
[   96.513528][ T3328]  swap_cluster_readahead+0x262/0x3c0
[   96.513659][ T3328]  swapin_readahead+0xde/0x820
[   96.513687][ T3328]  ? update_load_avg+0x1da/0x820
[   96.513714][ T3328]  ? __list_add_valid_or_report+0x38/0xe0
[   96.513749][ T3328]  ? __rcu_read_unlock+0x4f/0x70
[   96.513818][ T3328]  ? swap_cache_get_folio+0x277/0x280
[   96.513902][ T3328]  do_swap_page+0x2b4/0x21e0
[   96.513941][ T3328]  ? _raw_spin_unlock+0x26/0x50
[   96.513966][ T3328]  ? __schedule+0x85f/0xcd0
[   96.514023][ T3328]  ? __pfx_default_wake_function+0x10/0x10
[   96.514142][ T3328]  handle_mm_fault+0x9d8/0x2c60
[   96.514229][ T3328]  do_user_addr_fault+0x630/0x1080
[   96.514261][ T3328]  exc_page_fault+0x62/0xa0
[   96.514356][ T3328]  asm_exc_page_fault+0x26/0x30
[   96.514379][ T3328] RIP: 0033:0x7f3dba3a1fc5
[   96.514461][ T3328] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[   96.514483][ T3328] RSP: 002b:00007ffe75d425c8 EFLAGS: 00010246
[   96.514501][ T3328] RAX: 0000000000000000 RBX: 000000000000028d RCX: 00007f3dba3a1fc3
[   96.514515][ T3328] RDX: 00007ffe75d425e0 RSI: 0000000000000000 RDI: 0000000000000000
[   96.514529][ T3328] RBP: 00007ffe75d4264c R08: 00000000187e1120 R09: 0000000000000000
[   96.514542][ T3328] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[   96.514554][ T3328] R13: 00000000000927c0 R14: 0000000000017871 R15: 00007ffe75d426a0
[   96.514575][ T3328]  </TASK>
[   96.514607][ T3328] memory: usage 307200kB, limit 307200kB, failcnt 1864
[   96.738398][ T3328] memory+swap: usage 108736kB, limit 9007199254740988kB, failcnt 0
[   96.746355][ T3328] kmem: usage 100248kB, limit 9007199254740988kB, failcnt 0
[   96.753736][ T3328] Memory cgroup stats for /syz4:
[   96.799596][ T3328] cache 0
[   96.807534][ T3328] rss 8192
[   96.810687][ T3328] shmem 0
[   96.813697][ T3328] mapped_file 0
[   96.817217][ T3328] dirty 0
[   96.820251][ T3328] writeback 12288
[   96.823885][ T3328] workingset_refault_anon 113
[   96.828558][ T3328] workingset_refault_file 882
[   96.833277][ T3328] swap 180224
[   96.836552][ T3328] swapcached 36864
[   96.840324][ T3328] pgpgin 90290
[   96.843693][ T3328] pgpgout 90279
[   96.847149][ T3328] pgfault 98602
[   96.850636][ T3328] pgmajfault 55
[   96.854211][ T3328] inactive_anon 12288
[   96.858187][ T3328] active_anon 32768
[   96.862016][ T3328] inactive_file 0
[   96.865673][ T3328] active_file 0
[   96.869193][ T3328] unevictable 0
[   96.872744][ T3328] hierarchical_memory_limit 314572800
[   96.878160][ T3328] hierarchical_memsw_limit 9223372036854771712
[   96.884357][ T3328] total_cache 0
[   96.887831][ T3328] total_rss 8192
[   96.891409][ T3328] total_shmem 0
[   96.894846][ T3328] total_mapped_file 0
[   96.898809][ T3328] total_dirty 0
[   96.902272][ T3328] total_writeback 12288
[   96.906458][ T3328] total_workingset_refault_anon 113
[   96.911658][ T3328] total_workingset_refault_file 882
[   96.916837][ T3328] total_swap 180224
[   96.920689][ T3328] total_swapcached 36864
[   96.924955][ T3328] total_pgpgin 90290
[   96.928866][ T3328] total_pgpgout 90279
[   96.932871][ T3328] total_pgfault 98602
[   96.936830][ T3328] total_pgmajfault 55
[   96.940880][ T3328] total_inactive_anon 12288
[   96.945360][ T3328] total_active_anon 32768
[   96.949700][ T3328] total_inactive_file 0
[   96.953840][ T3328] total_active_file 0
[   96.957801][ T3328] total_unevictable 0
[   96.961831][ T3328] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1336,pid=7017,uid=0
[   96.976474][ T3328] Memory cgroup out of memory: Killed process 7017 (syz.4.1336) total-vm:96148kB, anon-rss:1244kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   97.111122][ T7049] Cannot find add_set index 0 as target
[   97.145895][ T7030] syz.3.1342 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   97.157051][ T7030] CPU: 0 UID: 0 PID: 7030 Comm: syz.3.1342 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   97.157081][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   97.157093][ T7030] Call Trace:
[   97.157100][ T7030]  <TASK>
[   97.157107][ T7030]  __dump_stack+0x1d/0x30
[   97.157166][ T7030]  dump_stack_lvl+0xe8/0x140
[   97.157230][ T7030]  dump_stack+0x15/0x1b
[   97.157253][ T7030]  dump_header+0x81/0x240
[   97.157304][ T7030]  oom_kill_process+0x295/0x350
[   97.157327][ T7030]  out_of_memory+0x979/0xb80
[   97.157353][ T7030]  try_charge_memcg+0x610/0xa10
[   97.157447][ T7030]  charge_memcg+0x51/0xc0
[   97.157476][ T7030]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   97.157545][ T7030]  __read_swap_cache_async+0x17b/0x2d0
[   97.157585][ T7030]  swap_cluster_readahead+0x262/0x3c0
[   97.157713][ T7030]  swapin_readahead+0xde/0x820
[   97.157752][ T7030]  ? mod_memcg_lruvec_state+0x1a1/0x280
[   97.157781][ T7030]  ? __rcu_read_unlock+0x34/0x70
[   97.157805][ T7030]  ? __rcu_read_unlock+0x4f/0x70
[   97.157869][ T7030]  ? swap_cache_get_folio+0x277/0x280
[   97.157901][ T7030]  do_swap_page+0x2b4/0x21e0
[   97.157989][ T7030]  ? css_rstat_updated+0xb7/0x240
[   97.158012][ T7030]  ? __pfx_default_wake_function+0x10/0x10
[   97.158059][ T7030]  handle_mm_fault+0x9d8/0x2c60
[   97.158127][ T7030]  do_user_addr_fault+0x630/0x1080
[   97.158162][ T7030]  exc_page_fault+0x62/0xa0
[   97.158242][ T7030]  asm_exc_page_fault+0x26/0x30
[   97.158260][ T7030] RIP: 0033:0x7fd3a67e151a
[   97.158275][ T7030] Code: 44 89 58 fc 83 05 6d 42 eb 00 01 66 83 3d 69 42 eb 00 05 48 89 05 56 42 eb 00 77 0e 41 ba 06 00 00 00 66 44 89 15 52 42 eb 00 <44> 8b 4c 24 18 45 85 c9 0f 85 40 02 00 00 45 85 ff 0f 85 47 03 00
[   97.158294][ T7030] RSP: 002b:00007ffd5cd60700 EFLAGS: 00010246
[   97.158309][ T7030] RAX: 0000001b33e24228 RBX: 00007fd3a7695720 RCX: 0000000000000007
[   97.158397][ T7030] RDX: 0000001b33e24220 RSI: 0000000000000008 RDI: 00007fd3a7695720
[   97.158409][ T7030] RBP: 0000000000000004 R08: 00007fd3a5f75068 R09: 00007fd3a6b52000
[   97.158421][ T7030] R10: 00007fd3a5f75008 R11: 0000000000000019 R12: 0000000000000004
[   97.158434][ T7030] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000199a4
[   97.158455][ T7030]  </TASK>
[   97.158461][ T7030] memory: usage 307200kB, limit 307200kB, failcnt 4221
[   97.378190][ T7030] memory+swap: usage 265528kB, limit 9007199254740988kB, failcnt 0
[   97.386141][ T7030] kmem: usage 265140kB, limit 9007199254740988kB, failcnt 0
[   97.393494][ T7030] Memory cgroup stats for /syz3:
[   97.393537][   T29] kauditd_printk_skb: 672 callbacks suppressed
[   97.393615][   T29] audit: type=1400 audit(1765051809.582:11066): avc:  denied  { prog_load } for  pid=7051 comm="syz.2.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   97.423990][   T29] audit: type=1400 audit(1765051809.582:11067): avc:  denied  { bpf } for  pid=7051 comm="syz.2.1350" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   97.444622][   T29] audit: type=1400 audit(1765051809.582:11068): avc:  denied  { perfmon } for  pid=7051 comm="syz.2.1350" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   97.465577][   T29] audit: type=1400 audit(1765051809.582:11069): avc:  denied  { open } for  pid=7051 comm="syz.2.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   97.484913][   T29] audit: type=1400 audit(1765051809.582:11070): avc:  denied  { kernel } for  pid=7051 comm="syz.2.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   97.504526][   T29] audit: type=1400 audit(1765051809.592:11071): avc:  denied  { tracepoint } for  pid=7051 comm="syz.2.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   97.526331][ T7030] cache 0
[   97.529270][ T7030] rss 20480
[   97.532412][ T7030] shmem 0
[   97.535334][ T7030] mapped_file 0
[   97.538776][ T7030] dirty 0
[   97.541780][ T7030] writeback 4096
[   97.545316][ T7030] workingset_refault_anon 338
[   97.550162][ T7030] workingset_refault_file 2195
[   97.554935][ T7030] swap 180224
[   97.558320][ T7030] swapcached 40960
[   97.562130][ T7030] pgpgin 73051
[   97.565479][ T7030] pgpgout 73038
[   97.568992][ T7030] pgfault 92060
[   97.572465][ T7030] pgmajfault 199
[   97.575996][ T7030] inactive_anon 36864
[   97.579995][ T7030] active_anon 16384
[   97.583785][ T7030] inactive_file 0
[   97.587542][ T7030] active_file 0
[   97.591047][ T7030] unevictable 0
[   97.594496][ T7030] hierarchical_memory_limit 314572800
[   97.599982][ T7030] hierarchical_memsw_limit 9223372036854771712
[   97.606142][ T7030] total_cache 0
[   97.609603][ T7030] total_rss 20480
[   97.613217][ T7030] total_shmem 0
[   97.616718][ T7030] total_mapped_file 0
[   97.620796][ T7030] total_dirty 0
[   97.624240][ T7030] total_writeback 4096
[   97.628289][ T7030] total_workingset_refault_anon 338
[   97.632883][ T3483] hid_parser_main: 35 callbacks suppressed
[   97.632899][ T3483] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   97.633577][ T7030] total_workingset_refault_file 2195
[   97.639394][ T3483] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   97.646708][ T7030] total_swap 180224
[   97.646717][ T7030] total_swapcached 40960
[   97.651996][ T3483] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   97.659377][ T7030] total_pgpgin 73051
[   97.663184][ T3483] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   97.667343][ T7030] total_pgpgout 73038
[   97.667353][ T7030] total_pgfault 92060
[   97.667360][ T7030] total_pgmajfault 199
[   97.667367][ T7030] total_inactive_anon 36864
[   97.674774][ T3483] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   97.678623][ T7030] total_active_anon 16384
[   97.678632][ T7030] total_inactive_file 0
[   97.685997][ T3483] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   97.689970][ T7030] total_active_file 0
[   97.693917][ T3483] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   97.697947][ T7030] total_unevictable 0
[   97.702457][ T3483] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   97.709812][ T7030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null)
[   97.714115][ T3483] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   97.718226][ T7030] ,cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=
[   97.725622][ T3483] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   97.729607][ T7030] /syz3,task=syz.3.1342,pid=7030,uid=0
[   97.729643][ T7030] Memory cgroup out of memory: Killed process 7030 (syz.3.1342) total-vm:100384kB, anon-rss:1136kB, file-rss:26540kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[   97.809815][   T29] audit: type=1400 audit(1765051809.682:11072): avc:  denied  { create } for  pid=7051 comm="syz.2.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   97.830413][   T29] audit: type=1400 audit(1765051809.682:11073): avc:  denied  { write } for  pid=7051 comm="syz.2.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   97.850873][   T29] audit: type=1400 audit(1765051809.682:11074): avc:  denied  { read } for  pid=7051 comm="syz.2.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   97.871289][   T29] audit: type=1400 audit(1765051809.702:11075): avc:  denied  { ioctl } for  pid=7051 comm="syz.2.1350" path="socket:[19492]" dev="sockfs" ino=19492 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   98.016035][ T3483] hid-generic 00A0:0006:0003.0005: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[   98.088660][ T7070] fido_id[7070]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   98.348060][ T7083] ref_ctr increment failed for inode: 0x6a7 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107604a40
[   98.555257][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1365'.
[   98.616280][ T3483] hid-generic 00A0:0006:0003.0006: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[   98.726686][ T7099] fido_id[7099]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   98.852280][ T7088] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   98.852794][ T7103] FAULT_INJECTION: forcing a failure.
[   98.852794][ T7103] name failslab, interval 1, probability 0, space 0, times 0
[   98.875373][ T7103] CPU: 0 UID: 0 PID: 7103 Comm: syz.4.1369 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   98.875457][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   98.875469][ T7103] Call Trace:
[   98.875476][ T7103]  <TASK>
[   98.875483][ T7103]  __dump_stack+0x1d/0x30
[   98.875505][ T7103]  dump_stack_lvl+0xe8/0x140
[   98.875531][ T7103]  dump_stack+0x15/0x1b
[   98.875631][ T7103]  should_fail_ex+0x265/0x280
[   98.875675][ T7103]  should_failslab+0x8c/0xb0
[   98.875699][ T7103]  kmem_cache_alloc_noprof+0x69/0x4b0
[   98.875724][ T7103]  ? security_inode_alloc+0x37/0x100
[   98.875746][ T7103]  security_inode_alloc+0x37/0x100
[   98.875765][ T7103]  inode_init_always_gfp+0x4b7/0x500
[   98.875846][ T7103]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[   98.875867][ T7103]  alloc_inode+0x58/0x170
[   98.875889][ T7103]  new_inode+0x1d/0xe0
[   98.875915][ T7103]  __debugfs_create_file+0x97/0x2b0
[   98.875987][ T7103]  debugfs_create_file_full+0x3f/0x60
[   98.876021][ T7103]  ? __pfx_bond_setup+0x10/0x10
[   98.876053][ T7103]  ref_tracker_dir_debugfs+0x100/0x210
[   98.876105][ T7103]  alloc_netdev_mqs+0x1a7/0xa40
[   98.876140][ T7103]  rtnl_create_link+0x239/0x6e0
[   98.876173][ T7103]  rtnl_newlink_create+0x14c/0x620
[   98.876275][ T7103]  ? security_capable+0x83/0x90
[   98.876313][ T7103]  ? netlink_ns_capable+0x86/0xa0
[   98.876400][ T7103]  rtnl_newlink+0xf5b/0x1360
[   98.876468][ T7103]  ? context_struct_compute_av+0x96d/0xaa0
[   98.876553][ T7103]  ? __rcu_read_unlock+0x4f/0x70
[   98.876627][ T7103]  ? avc_has_perm_noaudit+0xab/0x130
[   98.876666][ T7103]  ? cred_has_capability+0x210/0x280
[   98.876694][ T7103]  ? selinux_capable+0x31/0x40
[   98.876821][ T7103]  ? security_capable+0x83/0x90
[   98.876855][ T7103]  ? ns_capable+0x7d/0xb0
[   98.876883][ T7103]  ? __pfx_rtnl_newlink+0x10/0x10
[   98.876993][ T7103]  rtnetlink_rcv_msg+0x5fe/0x6d0
[   98.877049][ T7103]  ? avc_has_perm_noaudit+0xab/0x130
[   98.877218][ T7103]  netlink_rcv_skb+0x123/0x220
[   98.877251][ T7103]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   98.877330][ T7103]  rtnetlink_rcv+0x1c/0x30
[   98.877432][ T7103]  netlink_unicast+0x5c0/0x690
[   98.877510][ T7103]  netlink_sendmsg+0x58b/0x6b0
[   98.877548][ T7103]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.877621][ T7103]  __sock_sendmsg+0x145/0x180
[   98.877665][ T7103]  ____sys_sendmsg+0x31e/0x4a0
[   98.877728][ T7103]  ___sys_sendmsg+0x17b/0x1d0
[   98.877787][ T7103]  __x64_sys_sendmsg+0xd4/0x160
[   98.877851][ T7103]  x64_sys_call+0x17ba/0x3000
[   98.877873][ T7103]  do_syscall_64+0xd8/0x2a0
[   98.877910][ T7103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.877940][ T7103] RIP: 0033:0x7f3dba36f749
[   98.877958][ T7103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.877976][ T7103] RSP: 002b:00007f3db8dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   98.877994][ T7103] RAX: ffffffffffffffda RBX: 00007f3dba5c5fa0 RCX: 00007f3dba36f749
[   98.878006][ T7103] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[   98.878030][ T7103] RBP: 00007f3db8dd7090 R08: 0000000000000000 R09: 0000000000000000
[   98.878049][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   98.878065][ T7103] R13: 00007f3dba5c6038 R14: 00007f3dba5c5fa0 R15: 00007ffe75d42288
[   98.878083][ T7103]  </TASK>
[   98.878094][ T7103] debugfs: out of free dentries, can not create file 'netdev@ffff888119896558'
[   99.255267][ T7103] bond1: entered promiscuous mode
[   99.260339][ T7103] bond1: entered allmulticast mode
[   99.449347][ T7119] capability: warning: `syz.1.1375' uses deprecated v2 capabilities in a way that may be insecure
[   99.594580][ T7091] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   99.610395][ T7124] ref_ctr increment failed for inode: 0x608 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881076021c0
[   99.743898][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1380'.
[   99.792171][ T7137] SET target dimension over the limit!
[   99.905086][ T7144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   99.956153][ T7156] ref_ctr increment failed for inode: 0x54b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107604a40
[   99.987681][ T7161] ref_ctr increment failed for inode: 0x5c3 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881076057c0
[  100.120047][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1396'.
[  100.188218][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'.
[  100.198561][ T7181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1399'.
[  100.462428][ T7197] FAULT_INJECTION: forcing a failure.
[  100.462428][ T7197] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  100.475555][ T7197] CPU: 1 UID: 0 PID: 7197 Comm: syz.4.1406 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  100.475657][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  100.475670][ T7197] Call Trace:
[  100.475677][ T7197]  <TASK>
[  100.475686][ T7197]  __dump_stack+0x1d/0x30
[  100.475711][ T7197]  dump_stack_lvl+0xe8/0x140
[  100.475798][ T7197]  dump_stack+0x15/0x1b
[  100.475816][ T7197]  should_fail_ex+0x265/0x280
[  100.475842][ T7197]  should_fail+0xb/0x20
[  100.475917][ T7197]  should_fail_usercopy+0x1a/0x20
[  100.475939][ T7197]  _copy_from_user+0x1c/0xb0
[  100.475964][ T7197]  snd_seq_ioctl+0x125/0x300
[  100.476085][ T7197]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  100.476117][ T7197]  __se_sys_ioctl+0xce/0x140
[  100.476148][ T7197]  __x64_sys_ioctl+0x43/0x50
[  100.476176][ T7197]  x64_sys_call+0x14b0/0x3000
[  100.476203][ T7197]  do_syscall_64+0xd8/0x2a0
[  100.476234][ T7197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.476278][ T7197] RIP: 0033:0x7f3dba36f749
[  100.476296][ T7197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.476313][ T7197] RSP: 002b:00007f3db8dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.476331][ T7197] RAX: ffffffffffffffda RBX: 00007f3dba5c5fa0 RCX: 00007f3dba36f749
[  100.476358][ T7197] RDX: 0000200000000040 RSI: 00000000c0a85322 RDI: 0000000000000003
[  100.476373][ T7197] RBP: 00007f3db8dd7090 R08: 0000000000000000 R09: 0000000000000000
[  100.476387][ T7197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.476400][ T7197] R13: 00007f3dba5c6038 R14: 00007f3dba5c5fa0 R15: 00007ffe75d42288
[  100.476417][ T7197]  </TASK>
[  100.709058][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1407'.
[  100.773035][ T7203] FAULT_INJECTION: forcing a failure.
[  100.773035][ T7203] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  100.787075][ T7203] CPU: 1 UID: 0 PID: 7203 Comm: syz.4.1409 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  100.787100][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  100.787112][ T7203] Call Trace:
[  100.787143][ T7203]  <TASK>
[  100.787150][ T7203]  __dump_stack+0x1d/0x30
[  100.787173][ T7203]  dump_stack_lvl+0xe8/0x140
[  100.787240][ T7203]  dump_stack+0x15/0x1b
[  100.787263][ T7203]  should_fail_ex+0x265/0x280
[  100.787289][ T7203]  should_fail_alloc_page+0xf2/0x100
[  100.787316][ T7203]  __alloc_frozen_pages_noprof+0x109/0x360
[  100.787418][ T7203]  alloc_pages_mpol+0xb3/0x260
[  100.787525][ T7203]  vma_alloc_folio_noprof+0x1aa/0x300
[  100.787560][ T7203]  handle_mm_fault+0xef5/0x2c60
[  100.787600][ T7203]  do_user_addr_fault+0x630/0x1080
[  100.787626][ T7203]  ? ksys_mmap_pgoff+0xc2/0x310
[  100.787652][ T7203]  exc_page_fault+0x62/0xa0
[  100.787717][ T7203]  asm_exc_page_fault+0x26/0x30
[  100.787735][ T7203] RIP: 0033:0x7f3dba2309f0
[  100.787749][ T7203] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[  100.787766][ T7203] RSP: 002b:00007f3db8dd64a0 EFLAGS: 00010286
[  100.787784][ T7203] RAX: 0000000000001000 RBX: 00007f3db8dd6540 RCX: 0000000000000001
[  100.787799][ T7203] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00007f3db8dd65e0
[  100.787859][ T7203] RBP: 00000000000000db R08: 00007f3db09b7000 R09: 00000000000000ff
[  100.787873][ T7203] R10: 0000000000000000 R11: 00007f3db8dd6550 R12: 0000000000000001
[  100.787979][ T7203] R13: 00007f3dba40fc40 R14: 0000000000000000 R15: 00007f3db8dd65e0
[  100.787998][ T7203]  </TASK>
[  100.788056][ T7203] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  100.961147][ T7208] ref_ctr increment failed for inode: 0x562 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104571440
[  101.107348][ T7220] netlink: 'syz.1.1416': attribute type 21 has an invalid length.
[  101.115808][ T7189] syz.0.1403 (7189) used greatest stack depth: 8856 bytes left
[  101.118906][ T7220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1416'.
[  101.189117][ T7223] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  102.034389][ T7253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1428'.
[  102.405857][   T29] kauditd_printk_skb: 1616 callbacks suppressed
[  102.405915][   T29] audit: type=1400 audit(1765051814.622:12692): avc:  denied  { map_create } for  pid=7270 comm="syz.4.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  102.431529][   T29] audit: type=1400 audit(1765051814.622:12693): avc:  denied  { bpf } for  pid=7270 comm="syz.4.1435" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  102.463309][ T7271] ref_ctr increment failed for inode: 0x619 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107603cc0
[  102.477580][   T29] audit: type=1400 audit(1765051814.622:12694): avc:  denied  { create } for  pid=7268 comm="syz.0.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  102.497131][   T29] audit: type=1400 audit(1765051814.622:12695): avc:  denied  { connect } for  pid=7268 comm="syz.0.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  102.516733][   T29] audit: type=1400 audit(1765051814.622:12696): avc:  denied  { map_create } for  pid=7268 comm="syz.0.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  102.535977][   T29] audit: type=1400 audit(1765051814.622:12697): avc:  denied  { prog_load } for  pid=7268 comm="syz.0.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  102.555091][   T29] audit: type=1400 audit(1765051814.622:12698): avc:  denied  { bpf } for  pid=7268 comm="syz.0.1436" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  102.575790][   T29] audit: type=1400 audit(1765051814.622:12699): avc:  denied  { perfmon } for  pid=7268 comm="syz.0.1436" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  102.586960][ T7263] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  102.596840][   T29] audit: type=1400 audit(1765051814.632:12700): avc:  denied  { create } for  pid=7268 comm="syz.0.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  102.627051][   T29] audit: type=1400 audit(1765051814.632:12701): avc:  denied  { map_read map_write } for  pid=7268 comm="syz.0.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  102.704596][ T7281] netlink: 'syz.1.1439': attribute type 1 has an invalid length.
[  102.712478][ T7281] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1439'.
[  102.791222][ T7289] FAULT_INJECTION: forcing a failure.
[  102.791222][ T7289] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  102.796257][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1440'.
[  102.804406][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.1.1443 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  102.804435][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  102.804520][ T7289] Call Trace:
[  102.804539][ T7289]  <TASK>
[  102.804547][ T7289]  __dump_stack+0x1d/0x30
[  102.804572][ T7289]  dump_stack_lvl+0xe8/0x140
[  102.804596][ T7289]  dump_stack+0x15/0x1b
[  102.804616][ T7289]  should_fail_ex+0x265/0x280
[  102.804691][ T7289]  should_fail+0xb/0x20
[  102.804720][ T7289]  should_fail_usercopy+0x1a/0x20
[  102.804822][ T7289]  _copy_to_user+0x20/0xa0
[  102.804846][ T7289]  simple_read_from_buffer+0xb5/0x130
[  102.804980][ T7289]  proc_fail_nth_read+0x10e/0x150
[  102.805011][ T7289]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  102.805040][ T7289]  vfs_read+0x1a8/0x770
[  102.805072][ T7289]  ? __rcu_read_unlock+0x4f/0x70
[  102.805094][ T7289]  ? __fget_files+0x184/0x1c0
[  102.805141][ T7289]  ? mutex_lock+0x58/0x90
[  102.805181][ T7289]  ksys_read+0xda/0x1a0
[  102.805201][ T7289]  __x64_sys_read+0x40/0x50
[  102.805220][ T7289]  x64_sys_call+0x2889/0x3000
[  102.805246][ T7289]  do_syscall_64+0xd8/0x2a0
[  102.805299][ T7289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.805322][ T7289] RIP: 0033:0x7fe6d68ce15c
[  102.805338][ T7289] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  102.805357][ T7289] RSP: 002b:00007fe6d5337030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  102.805377][ T7289] RAX: ffffffffffffffda RBX: 00007fe6d6b25fa0 RCX: 00007fe6d68ce15c
[  102.805416][ T7289] RDX: 000000000000000f RSI: 00007fe6d53370a0 RDI: 0000000000000003
[  102.805429][ T7289] RBP: 00007fe6d5337090 R08: 0000000000000000 R09: 0000000000000000
[  102.805443][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.805456][ T7289] R13: 00007fe6d6b26038 R14: 00007fe6d6b25fa0 R15: 00007ffc6eb0b188
[  102.805474][ T7289]  </TASK>
[  103.120287][ T7305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1448'.
[  103.243447][ T7319] SET target dimension over the limit!
[  103.418110][ T7316] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  103.577836][ T7322] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  103.719662][ T7330] syz.3.1458 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  103.730790][ T7330] CPU: 0 UID: 0 PID: 7330 Comm: syz.3.1458 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  103.730823][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  103.730836][ T7330] Call Trace:
[  103.730843][ T7330]  <TASK>
[  103.730851][ T7330]  __dump_stack+0x1d/0x30
[  103.730938][ T7330]  dump_stack_lvl+0xe8/0x140
[  103.730962][ T7330]  dump_stack+0x15/0x1b
[  103.730981][ T7330]  dump_header+0x81/0x240
[  103.731000][ T7330]  oom_kill_process+0x295/0x350
[  103.731056][ T7330]  out_of_memory+0x979/0xb80
[  103.731134][ T7330]  try_charge_memcg+0x610/0xa10
[  103.731170][ T7330]  charge_memcg+0x51/0xc0
[  103.731200][ T7330]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  103.731238][ T7330]  __read_swap_cache_async+0x17b/0x2d0
[  103.731267][ T7330]  swap_cluster_readahead+0x262/0x3c0
[  103.731360][ T7330]  swapin_readahead+0xde/0x820
[  103.731453][ T7330]  ? update_load_avg+0x1da/0x820
[  103.731547][ T7330]  ? __list_add_valid_or_report+0x38/0xe0
[  103.731652][ T7330]  ? __rcu_read_unlock+0x4f/0x70
[  103.731674][ T7330]  ? swap_cache_get_folio+0x277/0x280
[  103.731706][ T7330]  do_swap_page+0x2b4/0x21e0
[  103.731784][ T7330]  ? _raw_spin_unlock+0x26/0x50
[  103.731808][ T7330]  ? __schedule+0x85f/0xcd0
[  103.731945][ T7330]  ? __pfx_default_wake_function+0x10/0x10
[  103.731980][ T7330]  handle_mm_fault+0x9d8/0x2c60
[  103.732018][ T7330]  do_user_addr_fault+0x630/0x1080
[  103.732078][ T7330]  exc_page_fault+0x62/0xa0
[  103.732109][ T7330]  asm_exc_page_fault+0x26/0x30
[  103.732164][ T7330] RIP: 0033:0x7fd3a6942008
[  103.732181][ T7330] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  103.732222][ T7330] RSP: 002b:00007ffd5cd60750 EFLAGS: 00010293
[  103.732240][ T7330] RAX: 0000000000000000 RBX: 00007fd3a6b65fa0 RCX: 00007fd3a6942005
[  103.732255][ T7330] RDX: 00007ffd5cd60790 RSI: 0000000000000000 RDI: 0000000000000000
[  103.732270][ T7330] RBP: 00007fd3a6b67da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  103.732284][ T7330] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001977d
[  103.732333][ T7330] R13: 00007fd3a6b66180 R14: ffffffffffffffff R15: 00007ffd5cd608d0
[  103.732359][ T7330]  </TASK>
[  103.732366][ T7330] memory: usage 291600kB, limit 307200kB, failcnt 4994
[  103.956334][ T7330] memory+swap: usage 1128kB, limit 9007199254740988kB, failcnt 0
[  103.964068][ T7330] kmem: usage 776kB, limit 9007199254740988kB, failcnt 0
[  103.971098][ T7330] Memory cgroup stats for /syz3:
[  103.971399][ T7330] cache 4096
[  103.979546][ T7330] rss 8192
[  103.982553][ T7330] shmem 0
[  103.985514][ T7330] mapped_file 0
[  103.989001][ T7330] dirty 0
[  103.991977][ T7330] writeback 0
[  103.995244][ T7330] workingset_refault_anon 1938
[  104.000002][ T7330] workingset_refault_file 2601
[  104.004757][ T7330] swap 212992
[  104.008037][ T7330] swapcached 4096
[  104.011697][ T7330] pgpgin 79069
[  104.015057][ T7330] pgpgout 79065
[  104.018507][ T7330] pgfault 98995
[  104.022053][ T7330] pgmajfault 425
[  104.025582][ T7330] inactive_anon 0
[  104.029193][ T7330] active_anon 12288
[  104.033072][ T7330] inactive_file 0
[  104.036686][ T7330] active_file 4096
[  104.040497][ T7330] unevictable 0
[  104.044002][ T7330] hierarchical_memory_limit 314572800
[  104.049388][ T7330] hierarchical_memsw_limit 9223372036854771712
[  104.055530][ T7330] total_cache 4096
[  104.059239][ T7330] total_rss 8192
[  104.062939][ T7330] total_shmem 0
[  104.066388][ T7330] total_mapped_file 0
[  104.070407][ T7330] total_dirty 0
[  104.073966][ T7330] total_writeback 0
[  104.077759][ T7330] total_workingset_refault_anon 1938
[  104.083226][ T7330] total_workingset_refault_file 2601
[  104.088498][ T7330] total_swap 212992
[  104.092320][ T7330] total_swapcached 4096
[  104.096461][ T7330] total_pgpgin 79069
[  104.100412][ T7330] total_pgpgout 79065
[  104.104382][ T7330] total_pgfault 98995
[  104.108380][ T7330] total_pgmajfault 425
[  104.112469][ T7330] total_inactive_anon 0
[  104.116642][ T7330] total_active_anon 12288
[  104.120977][ T7330] total_inactive_file 0
[  104.125116][ T7330] total_active_file 4096
[  104.129372][ T7330] total_unevictable 0
[  104.133338][ T7330] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1458,pid=7330,uid=0
[  104.148081][ T7330] Memory cgroup out of memory: Killed process 7330 (syz.3.1458) total-vm:94104kB, anon-rss:1132kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  104.268091][ T7354] SET target dimension over the limit!
[  104.335347][ T7359] Cannot find add_set index 0 as target
[  104.381957][ T3538] udevd[3538]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  104.411664][ T7360] ref_ctr increment failed for inode: 0x6f5 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107606540
[  104.622522][ T3928] hid_parser_main: 20 callbacks suppressed
[  104.622541][ T3928] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0
[  104.635942][ T3928] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0
[  104.643349][ T3928] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0
[  104.650863][ T3928] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0
[  104.658344][ T3928] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0
[  104.665887][ T3928] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0
[  104.673423][ T3928] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0
[  104.680921][ T3928] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0
[  104.688320][ T3928] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0
[  104.695827][ T3928] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0
[  104.713077][ T7362] syz.2.1472 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  104.724101][ T7362] CPU: 0 UID: 0 PID: 7362 Comm: syz.2.1472 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  104.724127][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  104.724138][ T7362] Call Trace:
[  104.724144][ T7362]  <TASK>
[  104.724151][ T7362]  __dump_stack+0x1d/0x30
[  104.724245][ T7362]  dump_stack_lvl+0xe8/0x140
[  104.724271][ T7362]  dump_stack+0x15/0x1b
[  104.724291][ T7362]  dump_header+0x81/0x240
[  104.724309][ T7362]  oom_kill_process+0x295/0x350
[  104.724334][ T7362]  out_of_memory+0x979/0xb80
[  104.724381][ T7362]  try_charge_memcg+0x610/0xa10
[  104.724426][ T7362]  charge_memcg+0x51/0xc0
[  104.724454][ T7362]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  104.724562][ T7362]  __read_swap_cache_async+0x17b/0x2d0
[  104.724593][ T7362]  swap_cluster_readahead+0x262/0x3c0
[  104.724644][ T7362]  swapin_readahead+0xde/0x820
[  104.724677][ T7362]  ? __rcu_read_unlock+0x4f/0x70
[  104.724696][ T7362]  ? swap_cache_get_folio+0x277/0x280
[  104.724785][ T7362]  do_swap_page+0x2b4/0x21e0
[  104.724815][ T7362]  ? _raw_spin_unlock+0x26/0x50
[  104.724841][ T7362]  ? __schedule+0x85f/0xcd0
[  104.724866][ T7362]  ? __pfx_default_wake_function+0x10/0x10
[  104.724964][ T7362]  handle_mm_fault+0x9d8/0x2c60
[  104.725000][ T7362]  do_user_addr_fault+0x630/0x1080
[  104.725059][ T7362]  exc_page_fault+0x62/0xa0
[  104.725088][ T7362]  asm_exc_page_fault+0x26/0x30
[  104.725109][ T7362] RIP: 0033:0x7f64e4342008
[  104.725126][ T7362] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  104.725219][ T7362] RSP: 002b:00007ffe00c9d420 EFLAGS: 00010293
[  104.725237][ T7362] RAX: 0000000000000000 RBX: 00007f64e4565fa0 RCX: 00007f64e4342005
[  104.725252][ T7362] RDX: 00007ffe00c9d460 RSI: 0000000000000000 RDI: 0000000000000000
[  104.725267][ T7362] RBP: 00007f64e4567da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  104.725281][ T7362] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000019b05
[  104.725293][ T7362] R13: 00007f64e4566180 R14: ffffffffffffffff R15: 00007ffe00c9d5a0
[  104.725382][ T7362]  </TASK>
[  104.725389][ T7362] memory: usage 307200kB, limit 307200kB, failcnt 1728
[  104.793771][ T7376] ==================================================================
[  104.799099][ T7362] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0
[  104.804484][ T7376] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64
[  104.809245][ T7362] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  104.814163][ T7376] 
[  104.814169][ T7376] read-write to 0xffffffff86809a00 of 8 bytes by interrupt on cpu 0:
[  104.819559][ T7362] Memory cgroup stats for 
[  104.824075][ T7376]  tick_do_update_jiffies64+0x113/0x1c0
[  104.828920][ T7362] /syz2
[  104.833394][ T7376]  tick_nohz_handler+0x8d/0x3d0
[  104.839197][ T7362] :
[  104.843996][ T7376]  __hrtimer_run_queues+0x20f/0x5a0
[  104.844025][ T7376]  hrtimer_interrupt+0x21a/0x460
[  104.853482][ T3928] hid-generic 00A0:0006:0003.0007: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  104.853580][ T7376]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[  104.863676][ T7362] cache 0
[  104.882382][ T7376]  sysvec_apic_timer_interrupt+0x6f/0x80
[  104.882414][ T7376]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  104.882436][ T7376]  console_flush_all+0x567/0x6f0
[  104.882455][ T7376]  console_unlock+0xa1/0x2e0
[  104.882484][ T7376]  vprintk_emit+0x3ee/0x610
[  104.882513][ T7376]  vprintk_default+0x26/0x30
[  104.888565][ T7362] rss 0
[  104.888574][ T7362] shmem 0
[  104.896514][ T7376]  vprintk+0x1d/0x30
[  104.896538][ T7376]  _printk+0x79/0xa0
[  104.904550][ T7362] mapped_file 0
[  104.912480][ T7376]  mem_cgroup_print_oom_meminfo+0x84/0x250
[  104.912508][ T7376]  dump_header+0xa3/0x240
[  104.912527][ T7376]  oom_kill_process+0x295/0x350
[  104.920500][ T7362] dirty 0
[  104.928436][ T7376]  out_of_memory+0x979/0xb80
[  104.931495][ T7362] writeback 0
[  104.938296][ T7376]  try_charge_memcg+0x610/0xa10
[  104.946362][ T7362] workingset_refault_anon 3178
[  104.954196][ T7376]  charge_memcg+0x51/0xc0
[  104.954238][ T7376]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  104.964022][ T7362] workingset_refault_file 783
[  104.971256][ T7376]  __read_swap_cache_async+0x17b/0x2d0
[  104.973614][ T7362] swap 225280
[  104.973623][ T7362] swapcached 0
[  104.981648][ T7376]  swap_cluster_readahead+0x262/0x3c0
[  104.981678][ T7376]  swapin_readahead+0xde/0x820
[  104.981704][ T7376]  do_swap_page+0x2b4/0x21e0
[  104.986102][ T7362] pgpgin 118160
[  104.986111][ T7362] pgpgout 118160
[  104.991620][ T7376]  handle_mm_fault+0x9d8/0x2c60
[  104.991651][ T7376]  do_user_addr_fault+0x630/0x1080
[  104.991677][ T7376]  exc_page_fault+0x62/0xa0
[  104.991702][ T7376]  asm_exc_page_fault+0x26/0x30
[  104.994459][ T7362] pgfault 124365
[  104.994468][ T7362] pgmajfault 461
[  104.999282][ T7376] 
[  104.999289][ T7376] read to 0xffffffff86809a00 of 8 bytes by task 7376 on cpu 1:
[  105.001704][ T7362] inactive_anon 0
[  105.006858][ T7376]  mem_cgroup_flush_stats_ratelimited+0x29/0x70
[  105.011789][ T7362] active_anon 0
[  105.021285][ T7376]  count_shadow_nodes+0x6a/0x230
[  105.021316][ T7376]  do_shrink_slab+0x63/0x680
[  105.027175][ T7362] inactive_file 0
[  105.027184][ T7362] active_file 0
[  105.030094][ T7376]  shrink_slab+0x4f5/0x840
[  105.030118][ T7376]  shrink_node+0x6a9/0x2010
[  105.035714][ T7362] unevictable 0
[  105.041664][ T7376]  do_try_to_free_pages+0x3f6/0xcd0
[  105.041694][ T7376]  try_to_free_mem_cgroup_pages+0x1ab/0x410
[  105.041722][ T7376]  try_charge_memcg+0x383/0xa10
[  105.046664][ T7362] hierarchical_memory_limit 314572800
[  105.051213][ T7376]  obj_cgroup_charge_pages+0xa6/0x150
[  105.055739][ T7362] hierarchical_memsw_limit 9223372036854771712
[  105.060297][ T7376]  __memcg_kmem_charge_page+0x9f/0x170
[  105.060328][ T7376]  __alloc_frozen_pages_noprof+0x18f/0x360
[  105.063070][ T7362] total_cache 0
[  105.063082][ T7362] total_rss 0
[  105.065991][ T7376]  __alloc_pages_noprof+0x9/0x20
[  105.066019][ T7376]  __vmalloc_node_range_noprof+0xa1f/0x1310
[  105.066042][ T7376]  bpf_map_area_alloc+0xfa/0x150
[  105.066064][ T7376]  bloom_map_alloc+0x1b8/0x2c0
[  105.069982][ T7362] total_shmem 0
[  105.073812][ T7376]  map_create+0x862/0xda0
[  105.077253][ T7362] total_mapped_file 0
[  105.077263][ T7362] total_dirty 0
[  105.083040][ T7376]  __sys_bpf+0x54e/0x7c0
[  105.083066][ T7376]  __x64_sys_bpf+0x41/0x50
[  105.083097][ T7376]  x64_sys_call+0x28e1/0x3000
[  105.087438][ T7362] total_writeback 0
[  105.087449][ T7362] total_workingset_refault_anon 3178
[  105.092266][ T7376]  do_syscall_64+0xd8/0x2a0
[  105.095201][ T7362] total_workingset_refault_file 783
[  105.099761][ T7376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.099786][ T7376] 
[  105.099791][ T7376] value changed: 0x00000000ffffb393 -> 0x00000000ffffb394
[  105.103049][ T7362] total_swap 225280
[  105.103059][ T7362] total_swapcached 0
[  105.107872][ T7376] 
[  105.107877][ T7376] Reported by Kernel Concurrency Sanitizer on:
[  105.112635][ T7362] total_pgpgin 118160
[  105.116916][ T7376] CPU: 1 UID: 0 PID: 7376 Comm: syz.2.1472 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  105.122908][ T7362] total_pgpgout 118160
[  105.127528][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  105.132981][ T7362] total_pgfault 124365
[  105.136219][ T7376] ==================================================================
[  105.139606][ T7362] total_pgmajfault 461
[  105.433958][ T7362] total_inactive_anon 0
[  105.438121][ T7362] total_active_anon 0
[  105.442161][ T7362] total_inactive_file 0
[  105.446383][ T7362] total_active_file 0
[  105.450446][ T7362] total_unevictable 0
[  105.454472][ T7362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1472,pid=7362,uid=0
[  105.469154][ T7362] Memory cgroup out of memory: Killed process 7362 (syz.2.1472) total-vm:96148kB, anon-rss:1136kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000