last executing test programs:

24.757265128s ago: executing program 2 (id=189):
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000003c0)='M', 0x1}], 0x2, 0x0, 0x0, 0x4000400}, 0x2)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0xf, 0x0, 0x0, 0xe, 0x4, 0x1}]}}, 0x0, 0x2a}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x33)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
listen(0xffffffffffffffff, 0x4)
syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x2120000, &(0x7f00000002c0)={[{@sb={'sb', 0x3d, 0xfffffffffffffffe}}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nomblk_io_submit}, {@jqfmt_vfsv0}, {@dax, 0x2e}, {@minixdf}, {@inlinecrypt}], [], 0x22}, 0x84, 0x477, &(0x7f0000000580)="$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")
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='(pu&00\t)|')
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xc)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='map=off,session=0x0000000000000017\x00sbsector=0x0000000100000001,sbsector=0x0000000000000005,session=0x0000000000000062,nojolietAiocharset=cp865,iocharset=cp737,session=0x0000000000000058,showassoc,mode=0xffffffaffffffffe,norock,\x00'], 0xfa, 0x6af, &(0x7f0000001680)="$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")
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000080)=""/209, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000280))

22.591749858s ago: executing program 3 (id=207):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

22.39941349s ago: executing program 3 (id=208):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f000000a300)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0xa, 0x2, [{0x2, 0x4, "d6bc"}]}, @cipso={0x86, 0x6, 0x3}]}}}], 0x20}}], 0x1, 0x24008044)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="1bdbb890f39a", 'ip_vti0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'ip6tnl0\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="ab89e7c592e1", 'lo\x00'}}, 0x1e)

22.199889163s ago: executing program 3 (id=211):
socket$kcm(0x29, 0x7, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0xf)
socket$netlink(0x10, 0x3, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
epoll_create1(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r5, 0x0, 0x0, 0x20044010, &(0x7f0000000180)={0x11, 0x1, r4, 0x1, 0x12, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r6, 0x5, 0x7000000, 0x0, {0x22}}, 0x14}}, 0x4000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
r8 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/snmp\x00')
pread64(r8, &(0x7f0000019400)=""/102344, 0x18fc8, 0x10000000000005)

20.585384085s ago: executing program 3 (id=215):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000008c0), 0xfc, 0x5ba, &(0x7f0000000280)="$eJzs3c9rG1ceAPDvyLLXibNrB0LY3cNiyGETspF/bdsUCkmPpQ0NtPdU2IoxlqNgySF2A00OzaW3UCilgdJrofceQ++lf0WgDYQSTHsoBZeRR47jSP4VxZKjzwfGfk8z0ntfvXlPb2YkJoCeNZr+yUX8K2IwTQ5vWpePbOXo+narT25Np0sSa2sf/JpEkj3W2D7J/g9lmX9GxA+fRpzNPV9udXllvlgulxaz/Fht4fpYdXnl3NxCcbY0W7o2OTV1/rWpyTffeL1tsZ65/PuX7z945/xnp1a/+O7R8XtJXIxj2brNcbyA25szo8U/s1R/XNyy4UQbCusmSacrwL70Zf28P9IxYDj6Ih8/drpSwIH4JCLWgB6V6P/QoxrzgMaxfZuOgw+Nx2+vHwDVYx/YHH9+/dxIDNaPjY6uJtn5kHXp8e5IG8pPy/j+l/v30iW2Pw9xZIc8wJ7cvhMR4/n88+N/ko1/f9v3a4/XTx5vb3RLvtc+f6CTHqTzn/81m//lNuY/0WT+M9Sk7+7Hzv0/96gNxbSUzv/eajr/3Ri6Rvqy3N/rc77+5OpQuTQeEf+IiNMRcXWuXJoYXD+H3sz51YdrrcrfPP9Ll7T8xlwwq8ej/JYheKZYK0bEwIvGnnp8J+Lf+WbxJxvtnzRp//T9uLzLMk6W7v+n1bqd428uv8uyd7L2TcR/m7b/0ytayfbXJ8fS9h9f/9u0jN/unvypVfn7jb9d0vY/un38I8nm67XVvZfx9eAfpVbrWsU/uLFF8/1/IPmwnm50gpvFWm1xImIgee/5xyefPreRb2yfxn/61PbjX7P9Pz34+miX8d89cbflpt3Q/jN7av+tifSdaLEqSzx89+OvWpW/u/Hv//XU6eyRbPxrLttXtqnOM4kXff8AAAAAAACgm+Qi4lgkucJGOpcrFNa/33EijubKlWrt7NXK0rWZqP9WdiT6c40r3cON70PMlUsT2fdhG/nJLfmpiDgeEZ/3HannC9OV8kyngwcAAAAAAAAAAAAAAAAAAIAuMdTi9/+pn/s6XTvgpavf2GD/93kCDrEdb6bTjjs9AV2pXTfTAg6fZ/p/0rl6AAfP5z/0Lv0fetdu+n9b7jYOdB2f/9C79H/oXbvp/xcPoB4AAAAAAAAAAAAAAAAAAAAAAAAAAADwirh86VK6rK0+uTWd5mduLC/NV26cmylV5wsLS9OF6cri9cJspTJbLhWmKwsRMbzd65UrlesTk7F0c6xWqtbGqssrVxYqS9dqV+YWirOlK6X+A4sMAAAAAAAAAAAAAAAAAAAADo/q8sp8sVwuLb4SiW/zL+OVL0Sn43rJiQsRt9OdYV9Pz3dLFDslznRHNQ4+cSfr63t7VmfHJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY7K8AAAD//4aNMPc=")
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x3, 0x9}, 0x0, 0x0, r1, 0x0) (async)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x3, 0x9}, 0x0, 0x0, r1, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3)
syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x1b0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x1b0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001900000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'ip6_vti0\x00', <r5=>0x0, 0x29, 0x8, 0x0, 0x180000, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @local, 0x20, 0x700, 0x0, 0x1}})
sendto$packet(r3, &(0x7f0000000a00)="ae6c34b35027c2db971c965cce8b59bcf5b3ef867e6b1963cc1ee4641299f1ecfef99ae8cc5e8b1c3d568a3819c26768d6ef6906e0fe3227753fa013f56f79599300414583eb94c84f6ac5338df47e913a207bf3365eb1a68e495931dd4741eb69ac1a7985338f6dc2a97be5b04f94dac270fbda1a78f873ac4d9c04cb97157eb2131de48c54a07522294ac6af7b6314f7cfa97e1c0f7eea8dda8c224e2f9c74c577a90fce6b038c4385a0f7d857c822c1acc36493177681a2a37db2f7792432c0a735b83b", 0xc5, 0x10000040, &(0x7f0000000bc0)={0x11, 0x1c, r5, 0x1, 0xff, 0x6, @random="d289bd5b388d"}, 0x14)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680))
io_setup(0x1, &(0x7f0000000400)) (async)
io_setup(0x1, &(0x7f0000000400)=<r6=>0x0)
io_destroy(r6)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@empty, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @info_reply={0x10, 0x0, 0x0, 0x8001, 0x4}}}}}, 0x0)
mmap$xdp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)

20.468095027s ago: executing program 2 (id=216):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
faccessat2(0xffffffffffffffff, 0x0, 0x46, 0x0)
setns(r1, 0x24020000)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x6, [@ptr={0x4000f, 0x0, 0x0, 0x2, 0x3}, @const={0x10, 0x0, 0x0, 0xa, 0x5}, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x1, [{0xf, 0x1, 0xe}, {0x6, 0x3, 0x4}, {0x6, 0x0, 0x1ff}, {0x10, 0x0, 0x5}, {0x2, 0x4, 0x4}]}, @const={0x8, 0x0, 0x0, 0xa, 0x2}, @fwd={0x9}, @union={0x1, 0x7, 0x0, 0x5, 0x1, 0xfffffffb, [{0xb, 0x4, 0x4}, {0x4, 0x3, 0x3}, {0xc, 0x0, 0x8}, {0x1, 0x5, 0x6d58817b}, {0xa, 0x5, 0x9}, {0x1, 0x4, 0x3}, {0x10, 0x4, 0x1}]}]}, {0x0, [0x4f, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000280)=""/138, 0xf6, 0x8a, 0x1, 0x5}, 0x28)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x80fffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0xa9525000)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x2, 0x7fffffff, 0x5, 0x8080, 0x1, 0xa125, '\x00', 0x0, r3, 0x3, 0x0, 0x2}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x710, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x40, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0900000000000000000000000200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000100"/28], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x9382}, 0x1000, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x40)
umount2(&(0x7f0000000040)='.\x00', 0x2)

20.119226252s ago: executing program 3 (id=220):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140027c03600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0)

19.113730036s ago: executing program 4 (id=228):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001200020ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0)

18.78335411s ago: executing program 4 (id=229):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)

17.675386456s ago: executing program 3 (id=232):
r0 = socket$inet6_sctp(0xa, 0xe, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={<r1=>0x0, @in6={{0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x8, 0x2, 0x7c20, 0xfffffffd, 0x0, 0x9, 0x7}, &(0x7f0000000500)=0x9c)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000540)={r1, 0x6}, &(0x7f0000000580)=0xc)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
getpid()
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
ioprio_get$pid(0x3, r4)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={r3, 0x0, r2, 0x0, 0x80000})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff2e}, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r6, 0x7, 0x1, 0xfffffffffffffffd})
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r9=>0x0})
connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f800006affb8c200160001002dbd700000000000ac14140d000000000000000000000000fc000000000000000000000000000001fffe00"/68, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000032000000ffffffff0000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000a00000200"/176], 0xf8}}, 0x0)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r11, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa348100000086dd609101001611fffe8000000000000000000000001000bbfe8000000000e4956e49625f5f88000000000000000000aa00000e2293d6d2f8688600169078"], 0x0)

17.675212076s ago: executing program 32 (id=232):
r0 = socket$inet6_sctp(0xa, 0xe, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={<r1=>0x0, @in6={{0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x8, 0x2, 0x7c20, 0xfffffffd, 0x0, 0x9, 0x7}, &(0x7f0000000500)=0x9c)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000540)={r1, 0x6}, &(0x7f0000000580)=0xc)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
getpid()
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
ioprio_get$pid(0x3, r4)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={r3, 0x0, r2, 0x0, 0x80000})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff2e}, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r6, 0x7, 0x1, 0xfffffffffffffffd})
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r9=>0x0})
connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f800006affb8c200160001002dbd700000000000ac14140d000000000000000000000000fc000000000000000000000000000001fffe00"/68, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000032000000ffffffff0000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000a00000200"/176], 0xf8}}, 0x0)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r11, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa348100000086dd609101001611fffe8000000000000000000000001000bbfe8000000000e4956e49625f5f88000000000000000000aa00000e2293d6d2f8688600169078"], 0x0)

17.462913309s ago: executing program 4 (id=235):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r0, 0x0, 0x404c880)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0xf4, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xa8, 0x2, 0x0, 0x1, [{0x4}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x77}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x80000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xfffffffffffffe36, 0x3, 0xbb}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x9a, 0x3, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa0}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x170, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x40008040)

16.802021228s ago: executing program 4 (id=237):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15, 0x18000000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
syz_clone3(&(0x7f0000000040)={0x21000080, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0})
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x88080, 0x0)

16.135176927s ago: executing program 4 (id=238):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x1d, 0x80802, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18)
writev(r0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000040)="9032e8a7582b0a2f779289bc58572c7d7f3595a571d92a6363dd52154d735eefce430ad2ac400be00a12ed9004ec9630cb88be1b8902474f3fcb90f8a3c715631e582516571383d17fc8c892357b312a", 0x50}], 0x2)

15.317219488s ago: executing program 4 (id=244):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'erspan0\x00', {0x2, 0x4e24, @rand_addr=0x64010101}})
syz_emit_ethernet(0x76, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x6, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be"}]}}}}}}, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
r2 = fcntl$getown(r1, 0x9)
capget(&(0x7f0000000000)={0x20071026, r2}, &(0x7f0000000040)={0x0, 0x7, 0x3, 0xfff, 0x67, 0x6})
bind$inet6(r1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9, 0x6409}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}]}, 0x4c}}, 0x0)
listen(0xffffffffffffffff, 0x3)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xd70, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd3}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x9, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0})
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
listen(r4, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x100)
socket$netlink(0x10, 0x3, 0x8000000004)

15.271496729s ago: executing program 33 (id=244):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'erspan0\x00', {0x2, 0x4e24, @rand_addr=0x64010101}})
syz_emit_ethernet(0x76, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x6, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be"}]}}}}}}, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
r2 = fcntl$getown(r1, 0x9)
capget(&(0x7f0000000000)={0x20071026, r2}, &(0x7f0000000040)={0x0, 0x7, 0x3, 0xfff, 0x67, 0x6})
bind$inet6(r1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9, 0x6409}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}]}, 0x4c}}, 0x0)
listen(0xffffffffffffffff, 0x3)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xd70, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd3}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x9, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0})
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
listen(r4, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x100)
socket$netlink(0x10, 0x3, 0x8000000004)

15.21452169s ago: executing program 2 (id=246):
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4)
sendfile(r0, r0, &(0x7f0000000040)=0x1, 0x4)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
set_mempolicy(0x8006, &(0x7f0000000100)=0x80000fff, 0x3)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee8f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x24c, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x84}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xceb0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x83}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdf0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1164}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffa63}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf7ea}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1efd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x51}, 0x4000004)

14.283347163s ago: executing program 2 (id=252):
gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newae={0x40, 0x1e, 0x301, 0x709d2a, 0x24dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4d6, 0xa, 0x2b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x3500}}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x17e)
lseek(r4, 0xfffffffffffffffe, 0x0)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x92)
socket$netlink(0x10, 0x3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x9}}, 0x20)
close(0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, 0x0, 0x24004094)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
r8 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r8, 0x2)
open(&(0x7f0000000300)='.\x00', 0x100000, 0x2)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000b40032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
socket$packet(0x11, 0x2, 0x300)

11.036901358s ago: executing program 2 (id=267):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4, 0x18}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)

7.471411467s ago: executing program 1 (id=283):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
socket(0x1e, 0x802, 0x0)
socket$kcm(0xa, 0x922000000004, 0x11)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000008dfdbc7d45efd705919fcfff66f38e9488aab68490000000000000000df2f0eed7e0b49500e575006", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x10, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x532, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x50000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$can_raw(0x1d, 0x3, 0x1)
fchdir(0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x1c0082, 0x0, 0xbe, 0x0, &(0x7f0000000280))
socket$can_bcm(0x1d, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f00000a0000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r6, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r7 = socket(0x2a, 0x1, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x49, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081000400001161ef5172ea8fecc59ec756d7150046b3b23fd387a8e6813211109fa3214f194639e6d667401f887d5db7dc6cfad3efd49aac268c6c7e21"], 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x6898e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x1, 0x6, 0x6, 0x8001, 0x7fff}, 0xffffffffffffffff, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3)
r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x80080)
fcntl$dupfd(r8, 0x0, r8)

4.618150196s ago: executing program 0 (id=286):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000ad00)={&(0x7f000000ab40)=[0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0xfffffffffffff29d, 0x9}, {0x6, 0x10001}, {0x6, 0xd}, {0xffffffff, 0x56}, {0x4, 0x7}, {0x3, 0x16}, {0x2, 0x9}, {0x9, 0xfb4}, {0x6, 0x800}, {0xad, 0x8}, {0x9, 0x2}, {0x0, 0x4}, {0x8, 0x5}, {0x3, 0xd}, {0x8, 0x100000001}, {0x6, 0x2d7}, {0x8, 0x3}, {0x7, 0x9}, {0xfffffffffffffffd, 0x6}, {0x8, 0x7fffffff}, {0x5, 0x2}, {0xffffffffffffffff, 0x5}, {0xfffffffffffffffe}, {0x4f, 0x5}, {0xac, 0x5}, {0x0, 0x1}, {0xa00, 0x6}, {0xffffffff, 0x6}, {0x8, 0x1}, {0x5, 0x7fff}, {0x7, 0xfffffffffffffff4}, {0x100000000, 0x400}, {0x7, 0x1}, {0x8000000000000001, 0x101}, {0x0, 0x7}, {0x7, 0x1}, {0x8, 0xbfa}, {0x6, 0xfffffffffffffff3}, {0x6dc, 0x7fa1}, {0xffffffffffffffff, 0x7}, {0xc42, 0xb}, {0xc12, 0x10000}, {0x80000001, 0x3b84e560}, {0x400, 0x7}, {0x307d88f5, 0x9}, {0x8000, 0x8000000000000001}, {0x3, 0x3}, {0xc00, 0x3}, {0x9, 0x2dac}, {0x9, 0x8}, {0x5, 0x9}, {0x101, 0xd6}, {0x8, 0x3}, {0xc, 0xa93}, {0x7, 0x68e}, {0x200, 0x8000}, {0x8000, 0x7}, {0x8000000000000001, 0x280}, {0xffffffff80000000}, {0xf, 0x4c}, {0x0, 0x80}, {0x5, 0xab5}, {0x1ff, 0x2}, {0x9, 0x5}, {0x8, 0x7}, {0x18000, 0x53f78878}, {0x2, 0x5}, {0x81, 0x7b0}, {0x6, 0x6}, {0x3, 0xffffffff}, {0x9, 0x800}, {0x6, 0x7}, {0x1000, 0x7}, {0xfffffffffffffffd, 0x8c}, {0x9e5, 0x7fffffffffffffff}, {0x2, 0x9}, {0x8, 0xffffffffffffff01}, {0x3, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x76, 0x3}, {0xe, 0x4}, {0x80000000, 0x433c50c9}, {0x4, 0x100000000}, {0x7fffffff, 0x6}, {0x7a63fbff, 0x7}, {0x1, 0x65d6}, {0x2, 0x5c8}, {0x8, 0x8}, {0x8, 0x8}, {0x7}, {0x8, 0xb84a}, {0x1, 0x1}, {0x9, 0xb52f}, {0xff, 0x9}, {0x1, 0x1}, {0x200, 0x4}, {0x10, 0x5}, {0x5, 0x9}, {0xf}, {0x4d, 0x9}, {0x7, 0x6}, {0x9, 0xc742}, {0xd}, {0x4, 0x7}, {0x8, 0x5}, {0x2, 0x3}, {0xbd0c, 0x80000000}, {0x1, 0xf}, {0x0, 0x8}, {0x8000000000000001, 0xfffffffffffffff3}, {0x3, 0x6}, {0x0, 0x1000}, {0x7fffffffffffffff, 0x9}, {0x7, 0x200}, {0x7fffffff}, {0x2, 0x8}, {0x8b, 0x40b4421f}, {0x800, 0x2}, {0xf2, 0x6}, {0x80, 0x853d}, {0xf3e, 0x3522dbc3}, {0xdad, 0x5}, {0x7, 0x3}, {0x10001, 0x8000000000000000}, {0x6, 0x1}, {0xc, 0x6}, {0x3, 0x1ff}, {0x2, 0x5}, {0x3d, 0x9}, {0xac99, 0x10000}, {0x10000, 0x9}, {0xfffffffffffffff7, 0x8}, {0x1000, 0x653}, {0x4bcbe926, 0x5}, {0x3, 0x9}, {0x40, 0x6}, {0x7, 0x2}, {0xf5a5, 0x5}, {0x2471e8df, 0x3}, {0x4, 0x74f0}, {0x7, 0xffffffff}, {0xb, 0x8}, {0x1, 0xcc}, {0x5ae5d7cb, 0xffffffffffffffff}, {0x5, 0x1}, {0x8, 0xe}, {0x80000000, 0xfffffffffffff68c}, {0x5, 0x1}, {0x15, 0x7}, {0xfffffffffffffffa, 0xf740}, {0x5, 0x3}, {0x800, 0x8}, {0x7ff, 0x6}, {0x1, 0x1}, {0x59bd5112, 0x3b7}, {0x3, 0x8}, {0x2, 0x7}, {0x7, 0x1}, {0x5, 0x5}, {0x5, 0xa9}, {0x9, 0xf81}, {0x3}, {0x8, 0x3}, {0x18, 0x7ff}, {0xfffffffffffffff9, 0x3}, {0x5, 0x7fffffffffffffff}, {0x3, 0x4}, {0x7, 0xd}, {0x4, 0x5}, {0x1, 0x100000001}, {0x3, 0x200}, {0x2, 0x2}, {0x5, 0x6}, {0x4, 0x6}, {0x8, 0x6}, {0x4, 0x3}, {0x4, 0x79}, {0x0, 0x5}, {0xffffffffffffffff, 0x1}, {0x490, 0x37}, {0xb, 0x9}, {0x9, 0x62b60558}, {0x1, 0xffffffffffffffff}, {0x0, 0x5}, {0x100000000, 0x2}, {0x28000000000, 0xffffffffffffffff}, {0x8, 0x5}, {0x690b, 0x8}, {0xffffffff, 0xd}, {0x9, 0xe133}, {0x10, 0x498e6a20}, {0x101, 0x3b}, {0x3, 0x3}, {0x5}, {0xc, 0x7}, {0x1, 0x9}, {0xb3, 0x8b}, {0x200, 0x80}, {0x8}, {0x8001, 0x2}, {0x3, 0x1}, {0x7, 0x7}, {0x3, 0x3}, {0x7d, 0x7}, {0x0, 0x7ff}, {0x6, 0x5a}, {0x5, 0xfffffffffffffff8}, {0x2, 0xb}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x80000000}, {0x3, 0xb22d}, {0x10001, 0x5}, {0xffffffff, 0x4}, {0x7b0, 0xc306}, {0x100, 0x10}, {0x3, 0x1}, {0xa540, 0x8000000000000000}, {0xfffffffffffffff8}, {0x3, 0x5}, {0x821f, 0x8}, {0x7f, 0x3}, {0x9, 0x3}, {0xce, 0x9}, {0x9, 0xffffffffffffffff}, {0xaa, 0x7fffffffffffffff}, {0x387, 0xffff}, {0xc, 0x1}, {0x702, 0x7e3ed378}, {0x5, 0x8}, {0x3, 0x4}, {0x6367d524, 0x5}, {0x5e265bbc, 0x1}, {0x6, 0x1}, {0x4, 0x3}, {0x100, 0x8}, {0x1, 0x3}, {0x1, 0xfffffffffffffffe}, {0x2, 0x6}, {0x7, 0x7ff}, {0x0, 0x7}, {0x8000, 0xffffffffffffff01}, {0x3, 0x6}, {0x2}, {0x3, 0x1}, {0x9, 0x400}, {0x10, 0x3}, {0x9, 0x8d}, {0x99f, 0x2}, {0x1, 0x7f}, {0xffffffffffff8001, 0x1751}, {0x6d}, {0xe70f, 0x7}, {0x9, 0x400000000}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}}, 0x0)

4.536752687s ago: executing program 2 (id=287):
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x36, 0x0, "e2a52a3876595c6184e7b140cbe8841e25f1689b8dad71005fe7df28006abf5e686f7edb2792cca460421f7e23fe11ba717c3ad60e71e315eabb2c2cb1ccf8eb2360b480afbde32814c1b1cc863736fa"}, 0xd8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r2 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r4, 0x25, 0x1, @val=@tcx={@void, @value=r2}}, 0x1c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r10)
r11 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x202)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r11, 0x0)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x11, r11, 0xd0b05000)
r12 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r13, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x44)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x64, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0xc, @multicast2, 0x4e24, 0x800002, 'nq\x00', 0x0, 0x3, 0x10003}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffd, 0x2000, 0x8, 0x8, 0x2000050}}, 0x44)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040))

4.489979328s ago: executing program 0 (id=288):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="07eb010018000000000000001800000018000000080000000087840001000084415eee000500000004000000027b00000030005f5f2e1e00"], 0x0, 0x38, 0x0, 0x1, 0x4}, 0x28)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x962d, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
creat(0x0, 0x154)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x5, 0x452, &(0x7f0000000140)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn79Nivjb4uiTidUOPlmt9rm6cu1qSifDJTaEdRmKiKy7RmrjfyyGotF5Y/Hap6U2DthQ1VyXwxerwF0sibJbAJSj+KDP7n+LbfNmH+W7+nL9BiiL+3q+1Y8MR5qXGWm7v+2niYg4dvHfr7ItNuY5BABAi++z+c+zneZ/aTzQVO6efG1oPF9L2R0R90XEnoi4P6JW9sGIeGid9bcvktw8/0mv9BTYGmXzv5fyta3W+V8x+4vxoTy3qxb/SHL8ZGXxUP6aTMbI1iw/s0odP7z62xfdjjXP/7Itq7+YC+btuDK8tfWchbmVuduJudnVTyL2DXeKP7mxEpBExN6I2NdjHSef/uZAt2O3jn8VfVhnqn4d8VS9/y9GW/yFZPX1yeltUVk8NF1cFTf75ddLb3Wr/7bi74Os/7d3vP5vxD+eNK/XLq+/jkt/fN71nmaqp+u/sWNL/vfDuZWVszMRW5I36o1u3j/bOLfIF+Wz+CcPdh7/u6PxSuyPiOwifjgiHomIR/O+eywiHo+Ig53Dy24d46dXnnivW/x3Qv8vtPX/eGuRtv5vJLZE+57OiaFTP37X+j82kmt7/ztSS03me9by/reWdvV2NQMAAMD/TxoROyNJp26kR9Opqfp3+PfE9rSytLzyzPGlD84s1H8jMB4jafGka6zpeehMfltf5Gfb8ofz58ZfDo3W8lPzS5WFsoOHAbfjpvGf1sZ/5s+hslsHbDi/14LB1TT+kzLbAWw+n/8wuIx/GFwdxv9oGe0ANl+nz/+PS2gHsPnaxr9lPxgg7v9hcBn/MLiax78vAMDAWB6NW/9IvlNiW/RylsRdk4j0jmhGfxJJj6NgrYmdZQe4/kTZ70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD98V8AAAD///Mv57k=")
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_create_resource$binfmt(0x0)
pipe(&(0x7f0000000600))
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x1}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0)
r7 = socket$kcm(0x10, 0x7, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000300feff020037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
mmap(&(0x7f0000014000/0x4000)=nil, 0x4000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x841)

4.249964741s ago: executing program 1 (id=289):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x5c002, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={<r2=>0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x199, 0x4}, &(0x7f0000000740)=0x90)
r3 = open(&(0x7f00000000c0)='.\x00', 0x518282, 0x78e22799f4a46e8e)
fcntl$setstatus(r3, 0x4, 0x44400)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={r2, 0xf3}, &(0x7f00000003c0)=0x8)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@noload}]}, 0x1, 0x5bc, &(0x7f00000007c0)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000100)={0x0, @aes256, 0x0, @desc4})
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000005200010003000000000000001c000001040001"], 0x18}}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffbffffffffffffd, 0xffffffffffffffff, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x4, 0x0)
r8 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x4, 0x0, 0x300, 0x49010}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x24048060)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
shmctl$SHM_STAT_ANY(r8, 0xf, &(0x7f0000000480)=""/210)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000600)={'wlan0\x00'})

4.005579275s ago: executing program 0 (id=290):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc01000019000100fcffffff10000000ffffffff000000000000000000000000e000000100000000000000000000000000000000f7fb20020a0080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="070000000000000000000000000000000000000000000000090000000000000008000000000000000000008000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000040000000000000001010203"], 0x1fc}}, 0x4080)

3.922959136s ago: executing program 0 (id=291):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.755431838s ago: executing program 5 (id=293):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1801)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x80000009}}}, 0x3a)

3.476164832s ago: executing program 5 (id=294):
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$rfkill(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$loop(&(0x7f0000000440), 0x84, 0x4a00)
openat(0xffffffffffffffff, 0x0, 0x781c3, 0x1)
socket(0x10, 0x3, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRES16, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrusage(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
socket$rxrpc(0x21, 0x2, 0xa)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
r6 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f00000000c0)=0xf, 0x4)
getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x17)
recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0)

2.436693936s ago: executing program 1 (id=295):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
close(0x3)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x40, 0x1}]}, 0x10)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x11}, 0x1c)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r2=>0x0)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0xff, 0x0, 0x2}])
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRESDEC=r4], 0x0}, 0x94)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28)
recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0x8, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6560, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x0, 0x9}, 0x10ecc8, 0x1224, 0x7428, 0x1, 0x310d, 0x2000d, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$UHID_CREATE(r6, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x8, 0x4, 0xc0c}}, 0x120)
write$UHID_DESTROY(r6, &(0x7f0000000180), 0x4)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r5, &(0x7f0000000180)='syzkaller\x00', 0x81800, &(0x7f00000001c0)={@align=0x8, {0x800, 0x7, 0x80000000, 0x1}}, 0x9b74, &(0x7f0000000200), &(0x7f0000000240)=0x3})

2.430645317s ago: executing program 0 (id=296):
getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)={0x14, 0x33, 0xc00, 0x70bd28, 0x25dfdbff, {0x3}}, 0x14}}, 0x200000c0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002580)=ANY=[@ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000a00)=""/195, 0x0, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000300000000009c000100000000009500000400000000"], &(0x7f0000000100)='syzkaller\x00', 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="0c0100001000010429bd70000300000008000000", @ANYRES32=0x0, @ANYBLOB="0305000000000000e400128009000100766c616e00000000d400028006000100030000000c000200000000000e0000000c000200080000000f000000400004800c0001001a400000080000000c00010004000000a80b00000c00010080000000030000000c000100030000008c9d00000c000100400000", @ANYRES32=r5], 0x10c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000)

2.14488541s ago: executing program 5 (id=297):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000ad00)={&(0x7f000000ab40)=[0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0xfffffffffffff29d, 0x9}, {0x6, 0x10001}, {0x6, 0xd}, {0xffffffff, 0x56}, {0x4, 0x7}, {0x3, 0x16}, {0x2, 0x9}, {0x9, 0xfb4}, {0x6, 0x800}, {0xad, 0x8}, {0x9, 0x2}, {0x0, 0x4}, {0x8, 0x5}, {0x3, 0xd}, {0x8, 0x100000001}, {0x6, 0x2d7}, {0x8, 0x3}, {0x7, 0x9}, {0xfffffffffffffffd, 0x6}, {0x8, 0x7fffffff}, {0x5, 0x2}, {0xffffffffffffffff, 0x5}, {0xfffffffffffffffe}, {0x4f, 0x5}, {0xac, 0x5}, {0x0, 0x1}, {0xa00, 0x6}, {0xffffffff, 0x6}, {0x8, 0x1}, {0x5, 0x7fff}, {0x7, 0xfffffffffffffff4}, {0x100000000, 0x400}, {0x7, 0x1}, {0x8000000000000001, 0x101}, {0x0, 0x7}, {0x7, 0x1}, {0x8, 0xbfa}, {0x6, 0xfffffffffffffff3}, {0x6dc, 0x7fa1}, {0xffffffffffffffff, 0x7}, {0xc42, 0xb}, {0xc12, 0x10000}, {0x80000001, 0x3b84e560}, {0x400, 0x7}, {0x307d88f5, 0x9}, {0x8000, 0x8000000000000001}, {0x3, 0x3}, {0xc00, 0x3}, {0x9, 0x2dac}, {0x9, 0x8}, {0x5, 0x9}, {0x101, 0xd6}, {0x8, 0x3}, {0xc, 0xa93}, {0x7, 0x68e}, {0x200, 0x8000}, {0x8000, 0x7}, {0x8000000000000001, 0x280}, {0xffffffff80000000}, {0xf, 0x4c}, {0x0, 0x80}, {0x5, 0xab5}, {0x1ff, 0x2}, {0x9, 0x5}, {0x8, 0x7}, {0x18000, 0x53f78878}, {0x2, 0x5}, {0x81, 0x7b0}, {0x6, 0x6}, {0x3, 0xffffffff}, {0x9, 0x800}, {0x6, 0x7}, {0x1000, 0x7}, {0xfffffffffffffffd, 0x8c}, {0x9e5, 0x7fffffffffffffff}, {0x2, 0x9}, {0x8, 0xffffffffffffff01}, {0x3, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x76, 0x3}, {0xe, 0x4}, {0x80000000, 0x433c50c9}, {0x4, 0x100000000}, {0x7fffffff, 0x6}, {0x7a63fbff, 0x7}, {0x1, 0x65d6}, {0x2, 0x5c8}, {0x8, 0x8}, {0x8, 0x8}, {0x7}, {0x8, 0xb84a}, {0x1, 0x1}, {0x9, 0xb52f}, {0xff, 0x9}, {0x1, 0x1}, {0x200, 0x4}, {0x10, 0x5}, {0x5, 0x9}, {0xf}, {0x4d, 0x9}, {0x7, 0x6}, {0x9, 0xc742}, {0xd}, {0x4, 0x7}, {0x8, 0x5}, {0x2, 0x3}, {0xbd0c, 0x80000000}, {0x1, 0xf}, {0x0, 0x8}, {0x8000000000000001, 0xfffffffffffffff3}, {0x3, 0x6}, {0x0, 0x1000}, {0x7fffffffffffffff, 0x9}, {0x7, 0x200}, {0x7fffffff}, {0x2, 0x8}, {0x8b, 0x40b4421f}, {0x800, 0x2}, {0xf2, 0x6}, {0x80, 0x853d}, {0xf3e, 0x3522dbc3}, {0xdad, 0x5}, {0x7, 0x3}, {0x10001, 0x8000000000000000}, {0x6, 0x1}, {0xc, 0x6}, {0x3, 0x1ff}, {0x2, 0x5}, {0x3d, 0x9}, {0xac99, 0x10000}, {0x10000, 0x9}, {0xfffffffffffffff7, 0x8}, {0x1000, 0x653}, {0x4bcbe926, 0x5}, {0x3, 0x9}, {0x40, 0x6}, {0x7, 0x2}, {0xf5a5, 0x5}, {0x2471e8df, 0x3}, {0x4, 0x74f0}, {0x7, 0xffffffff}, {0xb, 0x8}, {0x1, 0xcc}, {0x5ae5d7cb, 0xffffffffffffffff}, {0x5, 0x1}, {0x8, 0xe}, {0x80000000, 0xfffffffffffff68c}, {0x5, 0x1}, {0x15, 0x7}, {0xfffffffffffffffa, 0xf740}, {0x5, 0x3}, {0x800, 0x8}, {0x7ff, 0x6}, {0x1, 0x1}, {0x59bd5112, 0x3b7}, {0x3, 0x8}, {0x2, 0x7}, {0x7, 0x1}, {0x5, 0x5}, {0x5, 0xa9}, {0x9, 0xf81}, {0x3}, {0x8, 0x3}, {0x18, 0x7ff}, {0xfffffffffffffff9, 0x3}, {0x5, 0x7fffffffffffffff}, {0x3, 0x4}, {0x7, 0xd}, {0x4, 0x5}, {0x1, 0x100000001}, {0x3, 0x200}, {0x2, 0x2}, {0x5, 0x6}, {0x4, 0x6}, {0x8, 0x6}, {0x4, 0x3}, {0x4, 0x79}, {0x0, 0x5}, {0xffffffffffffffff, 0x1}, {0x490, 0x37}, {0xb, 0x9}, {0x9, 0x62b60558}, {0x1, 0xffffffffffffffff}, {0x0, 0x5}, {0x100000000, 0x2}, {0x28000000000, 0xffffffffffffffff}, {0x8, 0x5}, {0x690b, 0x8}, {0xffffffff, 0xd}, {0x9, 0xe133}, {0x10, 0x498e6a20}, {0x101, 0x3b}, {0x3, 0x3}, {0x5}, {0xc, 0x7}, {0x1, 0x9}, {0xb3, 0x8b}, {0x200, 0x80}, {0x8}, {0x8001, 0x2}, {0x3, 0x1}, {0x7, 0x7}, {0x3, 0x3}, {0x7d, 0x7}, {0x0, 0x7ff}, {0x6, 0x5a}, {0x5, 0xfffffffffffffff8}, {0x2, 0xb}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x80000000}, {0x3, 0xb22d}, {0x10001, 0x5}, {0xffffffff, 0x4}, {0x7b0, 0xc306}, {0x100, 0x10}, {0x3, 0x1}, {0xa540, 0x8000000000000000}, {0xfffffffffffffff8}, {0x3, 0x5}, {0x821f, 0x8}, {0x7f, 0x3}, {0x9, 0x3}, {0xce, 0x9}, {0x9, 0xffffffffffffffff}, {0xaa, 0x7fffffffffffffff}, {0x387, 0xffff}, {0xc, 0x1}, {0x702, 0x7e3ed378}, {0x5, 0x8}, {0x3, 0x4}, {0x6367d524, 0x5}, {0x5e265bbc, 0x1}, {0x6, 0x1}, {0x4, 0x3}, {0x100, 0x8}, {0x1, 0x3}, {0x1, 0xfffffffffffffffe}, {0x2, 0x6}, {0x7, 0x7ff}, {0x0, 0x7}, {0x8000, 0xffffffffffffff01}, {0x3, 0x6}, {0x2}, {0x3, 0x1}, {0x9, 0x400}, {0x10, 0x3}, {0x9, 0x8d}, {0x99f, 0x2}, {0x1, 0x7f}, {0xffffffffffff8001, 0x1751}, {0x6d}, {0xe70f, 0x7}, {0x9, 0x400000000}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}}, 0x0)

2.099181621s ago: executing program 5 (id=298):
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604df30c0018060100000000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000690780000030202024598ff97ba4534dab616d021797d634c7b314f9ae4d9ab4abb53cffca181d6216897e051dbd5a194f406913b1eb273766593afb268d87e489b645b54f017fa19e33180316928e0900c2aec8b03b8a78f88a8353beadd81e9e0ad3ec9a1760c3c4cde24eda6fc352a25700a07c8b5092c54033a15982b379c6307e9ffba7eab194d36d50eefbbeb5a7489f2ad6e89fc689aa0b10b908fc95955aca548ae77a5c8d19aa001423dd8b7be3b0e65c6eabebfec4965a0bc78794ce365d634385afca48ad7c38f6377ffddd1834bedd2710228f5e9bc6ce7248dda552e286cba74c4ba8fe562216357"], 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x5, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x1, 0x3d}, 0x10040, 0x2, 0x0, 0x4, 0x1, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/110, 0x6e}], 0x1, 0x800011, 0x7)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r1=>0x0})
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e)
r3 = socket(0xa, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xe863, 0x2a}, 0x90)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000780)=[{0x6, 0x0, 0x0, 0x7fff8000}, {0x0, 0x5, 0xff, 0xf05}]})
close_range(r5, 0xffffffffffffffff, 0x0)
sched_setparam(r1, &(0x7f0000000080))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x4, 0x6, 0x9, 0x400, 0x5, 0x81, r7})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x20, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x405, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000000), 0x1, 0x0, 0x27}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x40404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
close(r9)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50010010", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x10, 0x80, 0x4, "", [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x5, 0x5, 0x7}}}}}]}}]}}, 0x0)
close_range(r10, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f0000000880)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x214, &(0x7f0000000540)="$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")

1.975201803s ago: executing program 0 (id=299):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x151000, 0x0)
ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000001c0)=0x1b5)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r5, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x20622}, 0xc)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108})
syz_usb_connect$cdc_ncm(0x5, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0xdf, 0x40, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x24}, {0x60, 0x24, 0xf, 0x1, 0xfffffffc, 0xba, 0xb4, 0x9}, {0x6, 0x24, 0x1a, 0xf8bc, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0xff}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xdd, 0x5, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x18, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x6, 0xb}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000240)={0x0, 'team_slave_1\x00', {0x2}})
sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x4000040)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250500000008000600", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000400)={@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x8}, @mcast1, 0x4, 0x6, 0x9, 0x400, 0x40006, 0x4110002})
mlockall(0x1)
open_by_handle_at(r11, &(0x7f0000000340)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x4}}, 0x4c001)

1.497057249s ago: executing program 6 (id=245):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$nl_route(r0, 0x0, 0x4804)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x6, 0x28000000}, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0x8001}, 0x8)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x440)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x75c6}, 0x0, 0x400000, 0x0, 0x0, 0x20}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x28aa, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0xc0, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x8, 0xb0103)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, 0x4000, r6}, 0x18)
preadv2(r5, &(0x7f0000000580)=[{&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000340)=""/87, 0x57}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/239, 0xef}], 0x5, 0x4, 0xd, 0x28)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
cachestat(r8, &(0x7f0000000140)={0xffffffff, 0x9}, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r7, 0x301, 0x800000, 0x25dddbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2)

1.358656601s ago: executing program 6 (id=300):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil)
unshare(0x20000400)
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x22}, 0x94)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
prlimit64(0x0, 0x8, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB='nodots,errors=continue,uid=', @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYBLOB="8ecedd8cf39c24718ebf010323e52b879e3a17352e4d52d8528ad2d48da67fc022803a82eda55c7cd74db17e28e49a570684bd65002387768b679cdf0a8ba4d18d6de5325289ca4c48fd83978cc993883604f61107ee2961c9b459e66d6be8056323b1b5e098aece5ac5cd70343eb94665951d7ca30c5cf399d27353bed3af05cec797c4347942191ff76743c02146b2bf39c5a6ce9e578bd19245d781e44fee9cc108c69e133d61d20df228f590f928be8e650a7663b10000000000000000004c81f408eaa781c519170101fe7a11e6662023ff936cabaa33fa8a3df5dae44380c65b5ab4b3a17f1332103f0e705c55ec5df7ba3d44700c609e18163555d0eaa03931079227c88da97ad430014247437f37873c34426a05f33349da7c86e190e4baf8f69cd026842677cd08630fe63111520c841041fda3dbc4a7000000000000", @ANYBLOB=',,nodots\'\x00'/23], 0x1, 0x267, &(0x7f0000000c00)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xb, 0xffff})
syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00')
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.320896402s ago: executing program 1 (id=301):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = getpid()
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x74, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xc, 0xd, "85de02f352b681d3"}, @TCA_NETEM_DELAY_DIST={0x1c, 0x2, "ce2b7239806574fd656bfbbed2884a38ee21b8c53d71dec2"}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
rt_sigqueueinfo(r1, 0x1000002f, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0xfffd, 0xffff8001, @local, 0xffffffff}, {0xa, 0x4e22, 0x100, @empty}, 0x1, {[0x4, 0x2, 0x3, 0xfffffff9, 0x4, 0x2, 0x5]}}, 0x5c)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x81, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000058000000100000001000013040000000200000088060000ff0f0000002e2efef15e6dd74f4379aafc72d5a611b6c59201aed37a9e2128dab4e8ca5689ab92166ba9a68a1c29fb7671620bc42cd64e7d8fe1fd5c8d13cc5103fb4916a6a784b2b95237e3a14baea4dba26c68fc79bd99850bc0b427b36df8a7c2077bca47e6d750215ef4a18c376d603796"], 0x0, 0x35, 0x0, 0x0, 0x200000}, 0x28)
syz_emit_ethernet(0x4d, &(0x7f00000003c0)=ANY=[], 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206010300000c0000000000070000080c00078008000800000000020500040000000000050005000200000005000100070000000900020073797a310000000010000300686173683a6970"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x65, 0x1, 0xc, @multicast}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458)

1.246240093s ago: executing program 5 (id=302):
r0 = socket$inet6(0xa, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0xf}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x140}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
syz_clone3(0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, r4)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c0}, 0x4040014)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_generic(r4, 0x0, 0x0)
readahead(r3, 0xd, 0x2)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'wg2\x00', 0x0})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x192, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)

1.203390073s ago: executing program 1 (id=303):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02", 0x3}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc)
r1 = syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000))
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

691.26809ms ago: executing program 1 (id=304):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYRES32], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020400)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f00001ed000/0x6000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000400000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000b09000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffeca, r4}, 0xfffffdd0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x462e, &(0x7f0000000040)={0x0, 0xc89e, 0x80000, 0xd, 0x10b})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x29, 0x0, 0x7fff0000}]})
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'gre0\x00', {0x9}, 0x4})
poll(0x0, 0x0, 0x9)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52, 0x0, 0x80000000, 0x2}, 0x28)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x181080)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)

193.883767ms ago: executing program 5 (id=305):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

0s ago: executing program 6 (id=306):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x12ae, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8)
setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f00000000c0)=0x8, 0x4)
sendto$inet6(r4, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0x9}, 0x1c)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x2}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x2e, 0x2e, 0x30, 0x6f, 0x2e]}}, 0x0, 0x66, 0x0, 0x1, 0x7}, 0x28)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000040)={0x7}, 0x1)
socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7, 0x7}, 0x2402, 0x40, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000001, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000009840), 0x60, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r7)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000700)={'wpan1\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x24}}, 0x4004850)
sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x78, 0x0, 0x200, 0x70bd28, 0x25dfdbfa, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x800)
sendto$inet6(r5, &(0x7f00000002c0)='E', 0xfffd, 0x400c0d4, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan3\x00'})

kernel console output (not intermixed with test programs):

ion from the mount to silence this warning.
[   36.004185][ T3564] =======================================================
[   36.096848][ T3564] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   36.155879][ T3587] FAULT_INJECTION: forcing a failure.
[   36.155879][ T3587] name failslab, interval 1, probability 0, space 0, times 0
[   36.189093][ T3587] CPU: 0 UID: 0 PID: 3587 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(lazy) 
[   36.189138][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   36.189162][ T3587] Call Trace:
[   36.189170][ T3587]  <TASK>
[   36.189196][ T3587]  __dump_stack+0x1d/0x30
[   36.189226][ T3587]  dump_stack_lvl+0x95/0xd0
[   36.189254][ T3587]  dump_stack+0x15/0x1b
[   36.189334][ T3587]  should_fail_ex+0x25e/0x270
[   36.189370][ T3587]  should_failslab+0x8c/0xb0
[   36.189410][ T3587]  kmem_cache_alloc_node_noprof+0x85/0x3d0
[   36.189435][ T3587]  ? __alloc_skb+0x2db/0x6f0
[   36.189466][ T3587]  ? __alloc_skb+0x2db/0x6f0
[   36.189500][ T3587]  __alloc_skb+0x2db/0x6f0
[   36.189530][ T3587]  ? __alloc_skb+0x205/0x6f0
[   36.189600][ T3587]  netlink_alloc_large_skb+0xbf/0xf0
[   36.189644][ T3587]  netlink_sendmsg+0x40c/0x6f0
[   36.189670][ T3587]  ? __pfx_netlink_sendmsg+0x10/0x10
[   36.189727][ T3587]  ____sys_sendmsg+0x532/0x580
[   36.189764][ T3587]  ___sys_sendmsg+0x195/0x1e0
[   36.189812][ T3587]  __x64_sys_sendmsg+0xd4/0x160
[   36.189845][ T3587]  x64_sys_call+0x194c/0x3020
[   36.189882][ T3587]  do_syscall_64+0x136/0x3c0
[   36.190000][ T3587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.190028][ T3587] RIP: 0033:0x7f19a3e2ce59
[   36.190069][ T3587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.190091][ T3587] RSP: 002b:00007f19a2887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   36.190115][ T3587] RAX: ffffffffffffffda RBX: 00007f19a40a5fa0 RCX: 00007f19a3e2ce59
[   36.190133][ T3587] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003
[   36.190192][ T3587] RBP: 00007f19a2887090 R08: 0000000000000000 R09: 0000000000000000
[   36.190224][ T3587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.190238][ T3587] R13: 00007f19a40a6038 R14: 00007f19a40a5fa0 R15: 00007fff0b6dc898
[   36.190297][ T3587]  </TASK>
[   36.191511][ T3564] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.12: Invalid block bitmap block 0 in block_group 0
[   36.339604][ T3588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15'.
[   36.352310][ T3564] loop1: lost filesystem error report for type 5 error -117
[   36.401581][ T3590] loop3: detected capacity change from 0 to 512
[   36.423703][ T3592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[   36.458350][ T3590] EXT4-fs: Ignoring removed bh option
[   36.466506][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   36.473950][    C0] EXT4-fs (loop1): initial error at time 1782528530: ext4_read_block_bitmap_nowait:483
[   36.484166][    C0] EXT4-fs (loop1): last error at time 1782528530: ext4_read_block_bitmap_nowait:483
[   36.500241][ T3590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.512921][ T3590] ext4 filesystem being mounted at /2 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.535239][ T3564] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.12: Failed to acquire dquot type 0
[   36.564896][ T3598] capability: warning: `syz.0.19' uses deprecated v2 capabilities in a way that may be insecure
[   36.582044][ T3564] loop1: lost filesystem error report for type 5 error -117
[   36.584334][ T3564] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.12: Freeing blocks not in datazone - block = 0, count = 4096
[   36.658194][ T3564] loop1: lost filesystem error report for type 5 error -117
[   36.668821][ T3564] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.12: Invalid inode bitmap blk 0 in block_group 0
[   36.693570][ T3430] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 0
[   36.705210][ T3430] loop1: lost filesystem error report for type 5 error -117
[   36.706603][ T3564] loop1: lost filesystem error report for type 5 error -117
[   36.723177][ T3564] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem
[   36.755563][ T3564] loop1: lost filesystem error report for type 5 error -117
[   36.758555][ T3564] EXT4-fs (loop1): 1 orphan inode deleted
[   36.783479][ T3564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.872144][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.959906][ T3564] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.12: iget: bad extra_isize 65535 (inode size 256)
[   37.141124][ T3564] syz.1.12 (3564) used greatest stack depth: 9248 bytes left
[   37.211501][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.241637][ T3624] loop0: detected capacity change from 0 to 1764
[   37.261392][ T3624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.281894][ T3624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.571927][ T3619] loop3: detected capacity change from 0 to 512
[   37.596052][ T3632] IPv6: NLM_F_CREATE should be specified when creating new route
[   37.682718][ T3619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   37.757933][ T3619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.765076][ T3619] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   37.944828][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.558811][ T3647] loop3: detected capacity change from 0 to 512
[   38.596100][ T3649] loop4: detected capacity change from 0 to 512
[   38.619069][ T3650] loop3: detected capacity change from 0 to 512
[   38.643952][ T3649] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   38.715021][ T3649] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   38.749915][ T3649] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.33: bad orphan inode 131083
[   38.772870][ T3649] loop4: lost filesystem error report for type 5 error -117
[   38.773558][ T3649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.839581][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.098295][ T3656] loop3: detected capacity change from 0 to 128
[   39.130161][ T3658] loop4: detected capacity change from 0 to 512
[   39.162242][ T3658] EXT4-fs: Ignoring removed orlov option
[   39.169887][ T3658] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   39.182366][ T3658] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #16: comm syz.4.35: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[   39.316842][ T3658] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   39.317810][ T3658] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.35: couldn't read orphan inode 16 (err -117)
[   39.327064][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   39.327086][    C1] EXT4-fs (loop4): initial error at time 1782528533: ext4_ext_check_inode:521: inode 16
[   39.327120][    C1] EXT4-fs (loop4): last error at time 1782528533: ext4_ext_check_inode:521: inode 16
[   39.366313][ T3658] loop4: lost filesystem error report for type 5 error -117
[   39.380781][ T3658] EXT4-fs (loop4): 1 orphan inode deleted
[   39.426506][ T3658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.451782][ T3658] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.35: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0
[   39.478990][ T3671] iso9660: Corrupted directory entry in block 2 of inode 1792
[   39.495772][ T3671] syz_tun: entered allmulticast mode
[   39.507396][ T3658] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   39.511071][ T3671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'.
[   39.553455][ T3668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.38'.
[   39.569478][ T3658] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.35: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0
[   39.651128][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.663258][ T3684] netlink: 288 bytes leftover after parsing attributes in process `syz.1.41'.
[   39.687992][ T3684] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.41'.
[   39.703803][ T3665] syz_tun: left allmulticast mode
[   39.788116][   T28] kauditd_printk_skb: 211 callbacks suppressed
[   39.788133][   T28] audit: type=1400 audit(1782528533.699:376): avc:  denied  { create } for  pid=3689 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   39.856340][   T28] audit: type=1400 audit(1782528533.699:377): avc:  denied  { connect } for  pid=3689 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   39.877426][   T28] audit: type=1400 audit(1782528533.699:378): avc:  denied  { write } for  pid=3689 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   39.896909][   T28] audit: type=1400 audit(1782528533.739:379): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   39.932982][   T28] audit: type=1400 audit(1782528533.829:380): avc:  denied  { read } for  pid=3695 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   39.981347][ T3702] netlink: 80 bytes leftover after parsing attributes in process `syz.2.46'.
[   40.129004][   T28] audit: type=1400 audit(1782528534.039:381): avc:  denied  { read write } for  pid=3695 comm="syz.2.46" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   40.173668][ T3707] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[   40.182697][ T3710] netlink: 80 bytes leftover after parsing attributes in process `syz.4.51'.
[   40.195261][ T3664] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   40.218263][   T28] audit: type=1400 audit(1782528534.039:382): avc:  denied  { open } for  pid=3695 comm="syz.2.46" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   40.318073][ T3664] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.38: Invalid block bitmap block 0 in block_group 0
[   40.359096][ T3664] loop3: lost filesystem error report for type 5 error -117
[   40.366403][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   40.382563][    C1] EXT4-fs (loop3): initial error at time 1782528534: ext4_read_block_bitmap_nowait:483
[   40.393743][    C1] EXT4-fs (loop3): last error at time 1782528534: ext4_read_block_bitmap_nowait:483
[   40.427726][ T3664] Quota error (device loop3): write_blk: dquota write failed
[   40.435516][ T3664] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   40.474904][ T3664] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.38: Failed to acquire dquot type 0
[   40.508092][ T3664] loop3: lost filesystem error report for type 5 error -117
[   40.511735][ T3664] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.38: Freeing blocks not in datazone - block = 0, count = 4096
[   40.542286][ T3664] loop3: lost filesystem error report for type 5 error -117
[   40.548307][ T3664] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.38: Invalid inode bitmap blk 0 in block_group 0
[   40.571360][  T362] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7
[   40.580598][  T362] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 0
[   40.603609][  T362] loop3: lost filesystem error report for type 5 error -117
[   40.603877][ T3664] loop3: lost filesystem error report for type 5 error -117
[   40.617850][ T3664] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem
[   40.647337][ T3664] loop3: lost filesystem error report for type 5 error -117
[   40.650755][ T3664] EXT4-fs (loop3): 1 orphan inode deleted
[   40.730430][ T3664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.774974][ T3718] netlink: 'syz.1.54': attribute type 3 has an invalid length.
[   40.803435][ T3718] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.54'.
[   40.820377][ T3718] FAULT_INJECTION: forcing a failure.
[   40.820377][ T3718] name failslab, interval 1, probability 0, space 0, times 0
[   40.844784][ T3718] CPU: 1 UID: 0 PID: 3718 Comm: syz.1.54 Not tainted syzkaller #0 PREEMPT(lazy) 
[   40.844814][ T3718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   40.844831][ T3718] Call Trace:
[   40.844839][ T3718]  <TASK>
[   40.844849][ T3718]  __dump_stack+0x1d/0x30
[   40.844879][ T3718]  dump_stack_lvl+0x95/0xd0
[   40.845007][ T3718]  dump_stack+0x15/0x1b
[   40.845032][ T3718]  should_fail_ex+0x25e/0x270
[   40.845068][ T3718]  should_failslab+0x8c/0xb0
[   40.845093][ T3718]  kmem_cache_alloc_node_noprof+0x85/0x3d0
[   40.845186][ T3718]  ? __alloc_skb+0x2db/0x6f0
[   40.845216][ T3718]  ? __alloc_skb+0x2db/0x6f0
[   40.845325][ T3718]  __alloc_skb+0x2db/0x6f0
[   40.845352][ T3718]  ? __alloc_skb+0x205/0x6f0
[   40.845382][ T3718]  netlink_ack+0xfd/0x530
[   40.845405][ T3718]  ? __pfx_ioam6_genl_addns+0x10/0x10
[   40.845517][ T3718]  netlink_rcv_skb+0x18d/0x220
[   40.845542][ T3718]  ? __pfx_genl_rcv_msg+0x10/0x10
[   40.845585][ T3718]  genl_rcv+0x28/0x40
[   40.845608][ T3718]  netlink_unicast+0x5a7/0x680
[   40.845649][ T3718]  netlink_sendmsg+0x5be/0x6f0
[   40.845692][ T3718]  ? __pfx_netlink_sendmsg+0x10/0x10
[   40.845721][ T3718]  ____sys_sendmsg+0x532/0x580
[   40.845761][ T3718]  ___sys_sendmsg+0x195/0x1e0
[   40.845815][ T3718]  __x64_sys_sendmsg+0xd4/0x160
[   40.845978][ T3718]  x64_sys_call+0x194c/0x3020
[   40.846008][ T3718]  do_syscall_64+0x136/0x3c0
[   40.846047][ T3718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.846104][ T3718] RIP: 0033:0x7fc05b81ce59
[   40.846119][ T3718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   40.846137][ T3718] RSP: 002b:00007fc05a26f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   40.846162][ T3718] RAX: ffffffffffffffda RBX: 00007fc05ba95fa0 RCX: 00007fc05b81ce59
[   40.846239][ T3718] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   40.846261][ T3718] RBP: 00007fc05a26f090 R08: 0000000000000000 R09: 0000000000000000
[   40.846284][ T3718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.846296][ T3718] R13: 00007fc05ba96038 R14: 00007fc05ba95fa0 R15: 00007fff7d8be088
[   40.846316][ T3718]  </TASK>
[   41.115516][ T3664] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.38: iget: bad extra_isize 65535 (inode size 256)
[   41.209887][ T3724] set_capacity_and_notify: 2 callbacks suppressed
[   41.209904][ T3724] loop1: detected capacity change from 0 to 128
[   41.272139][ T3724] EXT4-fs (loop1): invalid first ino: 1
[   41.657708][ T3664] syz.3.38 (3664) used greatest stack depth: 8640 bytes left
[   41.678273][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.844684][ T3752] FAULT_INJECTION: forcing a failure.
[   41.844684][ T3752] name failslab, interval 1, probability 0, space 0, times 0
[   41.881122][ T3752] CPU: 1 UID: 0 PID: 3752 Comm: syz.4.68 Not tainted syzkaller #0 PREEMPT(lazy) 
[   41.881158][ T3752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   41.881175][ T3752] Call Trace:
[   41.881183][ T3752]  <TASK>
[   41.881192][ T3752]  __dump_stack+0x1d/0x30
[   41.881223][ T3752]  dump_stack_lvl+0x95/0xd0
[   41.881319][ T3752]  dump_stack+0x15/0x1b
[   41.881355][ T3752]  should_fail_ex+0x25e/0x270
[   41.881390][ T3752]  ? inet6_dump_fib+0x192/0x6c0
[   41.881432][ T3752]  should_failslab+0x8c/0xb0
[   41.881461][ T3752]  __kmalloc_cache_noprof+0x7b/0x3d0
[   41.881527][ T3752]  ? inet6_dump_fib+0x192/0x6c0
[   41.881569][ T3752]  inet6_dump_fib+0x192/0x6c0
[   41.881687][ T3752]  ? __pfx_inet6_dump_fib+0x10/0x10
[   41.881758][ T3752]  rtnl_dump_all+0x193/0x220
[   41.881780][ T3752]  ? __pfx_rtnl_dump_all+0x10/0x10
[   41.881800][ T3752]  rtnl_dumpit+0x71/0x140
[   41.881841][ T3752]  netlink_dump+0x452/0x870
[   41.881875][ T3752]  __netlink_dump_start+0x435/0x520
[   41.881977][ T3752]  ? __pfx_rtnl_dump_all+0x10/0x10
[   41.881995][ T3752]  rtnetlink_rcv_msg+0x59f/0x720
[   41.882074][ T3752]  ? __pfx_rtnl_dump_all+0x10/0x10
[   41.882159][ T3752]  ? __pfx_rtnl_dumpit+0x10/0x10
[   41.882181][ T3752]  ? __pfx_rtnl_dump_all+0x10/0x10
[   41.882207][ T3752]  netlink_rcv_skb+0x11e/0x220
[   41.882250][ T3752]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   41.882307][ T3752]  rtnetlink_rcv+0x1c/0x30
[   41.882349][ T3752]  netlink_unicast+0x5a7/0x680
[   41.882393][ T3752]  netlink_sendmsg+0x5be/0x6f0
[   41.882470][ T3752]  ? __pfx_netlink_sendmsg+0x10/0x10
[   41.882534][ T3752]  sock_write_iter+0x2c5/0x2f0
[   41.882590][ T3752]  ? __pfx_sock_write_iter+0x10/0x10
[   41.882628][ T3752]  vfs_write+0x57d/0x990
[   41.882682][ T3752]  ksys_write+0xdc/0x1a0
[   41.882740][ T3752]  __x64_sys_write+0x40/0x50
[   41.882764][ T3752]  x64_sys_call+0x27e1/0x3020
[   41.882796][ T3752]  do_syscall_64+0x136/0x3c0
[   41.882907][ T3752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.883011][ T3752] RIP: 0033:0x7efe925ece59
[   41.883028][ T3752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.883049][ T3752] RSP: 002b:00007efe91047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   41.883114][ T3752] RAX: ffffffffffffffda RBX: 00007efe92865fa0 RCX: 00007efe925ece59
[   41.883132][ T3752] RDX: 0000000000000022 RSI: 0000200000000000 RDI: 0000000000000004
[   41.883149][ T3752] RBP: 00007efe91047090 R08: 0000000000000000 R09: 0000000000000000
[   41.883166][ T3752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.883181][ T3752] R13: 00007efe92866038 R14: 00007efe92865fa0 R15: 00007fff400e99d8
[   41.883284][ T3752]  </TASK>
[   42.235748][ T3763] loop1: detected capacity change from 0 to 256
[   42.263594][ T3763] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   42.307749][ T3763] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   42.556493][ T3762] loop2: detected capacity change from 0 to 512
[   42.563201][ T3762] ext4: Bad value for 'resuid'
[   42.568524][ T3762] ext4: Bad value for 'resuid'
[   42.821568][ T3779] loop0: detected capacity change from 0 to 128
[   42.855311][ T3779] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   42.868511][ T3788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'.
[   42.876477][ T3779] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   42.922059][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   42.975110][ T3796] RDS: rds_bind could not find a transport for 0:0:800::, load rds_tcp or rds_rdma?
[   43.001834][ T3802] loop3: detected capacity change from 0 to 128
[   43.009477][ T3802] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   43.023307][ T3798] loop1: detected capacity change from 0 to 128
[   43.030430][ T3802] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   43.067104][ T3798] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   43.095295][ T3808] FAULT_INJECTION: forcing a failure.
[   43.095295][ T3808] name failslab, interval 1, probability 0, space 0, times 0
[   43.108120][ T3808] CPU: 0 UID: 0 PID: 3808 Comm: syz.2.89 Not tainted syzkaller #0 PREEMPT(lazy) 
[   43.108148][ T3808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   43.108163][ T3808] Call Trace:
[   43.108171][ T3808]  <TASK>
[   43.108180][ T3808]  __dump_stack+0x1d/0x30
[   43.108250][ T3808]  dump_stack_lvl+0x95/0xd0
[   43.108273][ T3808]  dump_stack+0x15/0x1b
[   43.108296][ T3808]  should_fail_ex+0x25e/0x270
[   43.108469][ T3808]  should_failslab+0x8c/0xb0
[   43.108497][ T3808]  kmem_cache_alloc_node_noprof+0x85/0x3d0
[   43.108533][ T3808]  ? __alloc_skb+0x2db/0x6f0
[   43.108590][ T3808]  ? __alloc_skb+0x2db/0x6f0
[   43.108689][ T3808]  __alloc_skb+0x2db/0x6f0
[   43.108711][ T3808]  ? __alloc_skb+0x205/0x6f0
[   43.108734][ T3808]  netlink_alloc_large_skb+0xbf/0xf0
[   43.108866][ T3808]  netlink_sendmsg+0x40c/0x6f0
[   43.108895][ T3808]  ? __pfx_netlink_sendmsg+0x10/0x10
[   43.108917][ T3808]  ____sys_sendmsg+0x532/0x580
[   43.108974][ T3808]  ___sys_sendmsg+0x195/0x1e0
[   43.109015][ T3808]  __x64_sys_sendmsg+0xd4/0x160
[   43.109055][ T3808]  x64_sys_call+0x194c/0x3020
[   43.109160][ T3808]  do_syscall_64+0x136/0x3c0
[   43.109271][ T3808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.109349][ T3808] RIP: 0033:0x7f066d16ce59
[   43.109365][ T3808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   43.109410][ T3808] RSP: 002b:00007f066bbc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   43.109436][ T3808] RAX: ffffffffffffffda RBX: 00007f066d3e5fa0 RCX: 00007f066d16ce59
[   43.109455][ T3808] RDX: 0000000002000850 RSI: 0000200000000000 RDI: 0000000000000004
[   43.109472][ T3808] RBP: 00007f066bbc7090 R08: 0000000000000000 R09: 0000000000000000
[   43.109489][ T3808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.109566][ T3808] R13: 00007f066d3e6038 R14: 00007f066d3e5fa0 R15: 00007fff9340df28
[   43.109592][ T3808]  </TASK>
[   43.135959][ T3798] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   43.209593][ T3796] netlink: 'syz.0.84': attribute type 1 has an invalid length.
[   43.260362][ T3803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2446 sclass=netlink_route_socket pid=3803 comm=syz.0.84
[   43.367366][  T362] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   43.398039][ T3820] loop3: detected capacity change from 0 to 1024
[   43.410609][ T3820] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[   43.424957][ T3820] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.93: lblock 2 mapped to illegal pblock 2 (length 1)
[   43.447148][ T3823] loop4: detected capacity change from 0 to 1024
[   43.458323][ T3823] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[   43.468789][ T3820] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   43.469008][ T3820] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.93: lblock 0 mapped to illegal pblock 48 (length 1)
[   43.478138][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   43.478160][    C0] EXT4-fs (loop3): initial error at time 1782528537: ext4_map_blocks:791: inode 3: block 2
[   43.478201][    C0] EXT4-fs (loop3): last error at time 1782528537: ext4_map_blocks:791: inode 3: block 2
[   43.519212][ T3820] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   43.519659][ T3820] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.93: Failed to acquire dquot type 0
[   43.519653][ T3823] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.94: lblock 2 mapped to illegal pblock 2 (length 1)
[   43.519707][ T3823] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   43.557083][ T3820] loop3: lost filesystem error report for type 5 error -117
[   43.563102][ T3823] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.94: lblock 0 mapped to illegal pblock 48 (length 1)
[   43.566179][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   43.566198][    C0] EXT4-fs (loop4): initial error at time 1782528537: ext4_map_blocks:791: inode 3: block 2
[   43.566237][    C0] EXT4-fs (loop4): last error at time 1782528537: ext4_map_blocks:791: inode 3: block 2
[   43.587929][ T3820] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[   43.627714][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   43.637683][ T3820] loop3: lost filesystem error report for type 5 error -117
[   43.637783][ T3820] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.93: mark_inode_dirty error
[   43.656565][ T3823] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   43.659227][ T3820] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   43.659538][ T3823] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.94: Failed to acquire dquot type 0
[   43.691063][ T3823] loop4: lost filesystem error report for type 5 error -117
[   43.691179][ T3823] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem
[   43.698793][ T3820] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[   43.724257][ T3820] EXT4-fs (loop3): 1 orphan inode deleted
[   43.731089][ T3820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.755874][   T30] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   43.774707][ T3820] FAULT_INJECTION: forcing a failure.
[   43.774707][ T3820] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   43.783056][ T3823] loop4: lost filesystem error report for type 5 error -117
[   43.791144][ T3823] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.94: mark_inode_dirty error
[   43.814818][   T30] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 0
[   43.826155][ T3820] CPU: 0 UID: 0 PID: 3820 Comm: syz.3.93 Not tainted syzkaller #0 PREEMPT(lazy) 
[   43.826272][ T3820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   43.826286][ T3820] Call Trace:
[   43.826292][ T3820]  <TASK>
[   43.826300][ T3820]  __dump_stack+0x1d/0x30
[   43.826328][ T3820]  dump_stack_lvl+0x95/0xd0
[   43.826429][ T3820]  dump_stack+0x15/0x1b
[   43.826497][ T3820]  should_fail_ex+0x25e/0x270
[   43.826603][ T3820]  should_fail+0xb/0x20
[   43.826687][ T3820]  should_fail_usercopy+0x1a/0x20
[   43.826773][ T3820]  _copy_to_user+0x20/0xa0
[   43.826835][ T3820]  simple_read_from_buffer+0xb5/0x130
[   43.826919][ T3820]  proc_fail_nth_read+0x10e/0x150
[   43.826990][ T3820]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   43.827064][ T3820]  vfs_read+0x18e/0x7c0
[   43.827233][ T3820]  ? kmem_cache_free+0xca/0x380
[   43.827328][ T3820]  ? fdget+0xbc/0x110
[   43.827408][ T3820]  ? do_sendfile+0x4f5/0x640
[   43.827483][ T3820]  ? putname+0x7c/0xc0
[   43.827566][ T3820]  ksys_read+0xdc/0x1a0
[   43.827690][ T3820]  __x64_sys_read+0x40/0x50
[   43.827745][ T3820]  x64_sys_call+0x2886/0x3020
[   43.827840][ T3820]  do_syscall_64+0x136/0x3c0
[   43.827968][ T3820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.828050][ T3820] RIP: 0033:0x7ff69c15d68e
[   43.828101][ T3820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   43.828202][ T3820] RSP: 002b:00007ff69abf6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   43.828279][ T3820] RAX: ffffffffffffffda RBX: 00007ff69abf76c0 RCX: 00007ff69c15d68e
[   43.828329][ T3820] RDX: 000000000000000f RSI: 00007ff69abf70a0 RDI: 0000000000000004
[   43.828441][ T3820] RBP: 00007ff69abf7090 R08: 0000000000000000 R09: 0000000000000000
[   43.828482][ T3820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.828524][ T3820] R13: 00007ff69c416038 R14: 00007ff69c415fa0 R15: 00007ffd68afc168
[   43.828622][ T3820]  </TASK>
[   43.936931][ T3823] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   43.971265][ T3833] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   44.022856][ T3820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.051883][ T3820] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.93: Invalid inode table block 1 in block_group 0
[   44.065567][ T3820] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[   44.076297][ T3823] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[   44.079891][ T3820] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz.3.93: mark_inode_dirty error
[   44.098189][ T3820] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   44.100200][ T3839] Zero length message leads to an empty skb
[   44.118228][ T3823] EXT4-fs (loop4): 1 orphan inode deleted
[   44.130284][ T3823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.142659][  T362] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[   44.208735][ T3847] netlink: 'syz.3.104': attribute type 21 has an invalid length.
[   44.216658][ T3847] IPv6: NLM_F_CREATE should be specified when creating new route
[   44.224457][ T3847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   44.231722][ T3847] IPv6: NLM_F_CREATE should be set when creating new route
[   44.238965][ T3847] IPv6: NLM_F_CREATE should be set when creating new route
[   44.246238][ T3847] IPv6: NLM_F_CREATE should be set when creating new route
[   44.256149][  T362] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 0
[   44.277910][ T3849] netlink: 'syz.3.104': attribute type 21 has an invalid length.
[   44.286721][ T3823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.310743][ T3823] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.94: Invalid inode table block 1 in block_group 0
[   44.328123][ T3849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   44.335624][ T3823] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem
[   44.354257][ T3823] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz.4.94: mark_inode_dirty error
[   44.377667][ T3847] vlan2: entered promiscuous mode
[   44.384527][ T3823] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   44.418035][ T3847] bridge0: entered promiscuous mode
[   44.488268][ T3857] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   44.504920][ T3857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.106'.
[   44.520688][ T3859] FAULT_INJECTION: forcing a failure.
[   44.520688][ T3859] name failslab, interval 1, probability 0, space 0, times 0
[   44.573882][ T3859] CPU: 0 UID: 0 PID: 3859 Comm: syz.4.107 Not tainted syzkaller #0 PREEMPT(lazy) 
[   44.573933][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   44.573950][ T3859] Call Trace:
[   44.573956][ T3859]  <TASK>
[   44.573964][ T3859]  __dump_stack+0x1d/0x30
[   44.573994][ T3859]  dump_stack_lvl+0x95/0xd0
[   44.574020][ T3859]  dump_stack+0x15/0x1b
[   44.574044][ T3859]  should_fail_ex+0x25e/0x270
[   44.574099][ T3859]  should_failslab+0x8c/0xb0
[   44.574132][ T3859]  __kmalloc_node_noprof+0xda/0x4c0
[   44.574234][ T3859]  ? __vmalloc_node_range_noprof+0x403/0x11e0
[   44.574262][ T3859]  ? __vmalloc_node_range_noprof+0x403/0x11e0
[   44.574355][ T3859]  __vmalloc_node_range_noprof+0x403/0x11e0
[   44.574388][ T3859]  ? __rcu_read_unlock+0x4e/0x70
[   44.574510][ T3859]  ? __account_obj_stock+0x52e/0x720
[   44.574549][ T3859]  ? __obj_cgroup_charge+0x177/0x230
[   44.574588][ T3859]  ? __memcg_slab_post_alloc_hook+0x346/0x860
[   44.574654][ T3859]  __vmalloc_node_noprof+0x89/0xc0
[   44.574743][ T3859]  ? copy_process+0x5a0/0x2340
[   44.574769][ T3859]  ? copy_process+0x5a0/0x2340
[   44.574796][ T3859]  dup_task_struct+0x229/0x670
[   44.574824][ T3859]  copy_process+0x5a0/0x2340
[   44.574849][ T3859]  ? ktime_expiry_to_cycles+0x1f1/0x210
[   44.574908][ T3859]  ? clockevents_program_event+0x109/0x340
[   44.574977][ T3859]  ? tick_program_event+0x79/0xc0
[   44.575011][ T3859]  kernel_clone+0x1c0/0x5f0
[   44.575035][ T3859]  __x64_sys_clone+0x143/0x180
[   44.575115][ T3859]  x64_sys_call+0x1222/0x3020
[   44.575144][ T3859]  do_syscall_64+0x136/0x3c0
[   44.575182][ T3859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.575282][ T3859] RIP: 0033:0x7efe925ece59
[   44.575302][ T3859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.575324][ T3859] RSP: 002b:00007efe91046fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   44.575360][ T3859] RAX: ffffffffffffffda RBX: 00007efe92865fa0 RCX: 00007efe925ece59
[   44.575377][ T3859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[   44.575393][ T3859] RBP: 00007efe91047090 R08: 0000000000000000 R09: 0000000000000000
[   44.575409][ T3859] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   44.575420][ T3859] R13: 00007efe92866038 R14: 00007efe92865fa0 R15: 00007fff400e99d8
[   44.575493][ T3859]  </TASK>
[   44.577845][ T3859] syz.4.107: vmalloc error: size 16384, failed to allocated page array size 32, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null)
[   44.726611][ T3866] sctp: [Deprecated]: syz.1.106 (pid 3866) Use of struct sctp_assoc_value in delayed_ack socket option.
[   44.726611][ T3866] Use struct sctp_sack_info instead
[   44.769644][ T3859] ,cpuset=/,mems_allowed=0
[   44.873052][ T3859] CPU: 1 UID: 0 PID: 3859 Comm: syz.4.107 Not tainted syzkaller #0 PREEMPT(lazy) 
[   44.873085][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   44.873100][ T3859] Call Trace:
[   44.873107][ T3859]  <TASK>
[   44.873116][ T3859]  __dump_stack+0x1d/0x30
[   44.873145][ T3859]  dump_stack_lvl+0x95/0xd0
[   44.873166][ T3859]  dump_stack+0x15/0x1b
[   44.873329][ T3859]  warn_alloc+0x145/0x1c0
[   44.873411][ T3859]  ? should_failslab+0x8c/0xb0
[   44.873513][ T3859]  ? __kmalloc_node_noprof+0xda/0x4c0
[   44.873540][ T3859]  __vmalloc_node_range_noprof+0x7e7/0x11e0
[   44.873565][ T3859]  ? __rcu_read_unlock+0x4e/0x70
[   44.873678][ T3859]  ? __account_obj_stock+0x52e/0x720
[   44.873716][ T3859]  ? __obj_cgroup_charge+0x177/0x230
[   44.873787][ T3859]  ? __memcg_slab_post_alloc_hook+0x346/0x860
[   44.873833][ T3859]  __vmalloc_node_noprof+0x89/0xc0
[   44.873923][ T3859]  ? copy_process+0x5a0/0x2340
[   44.873947][ T3859]  ? copy_process+0x5a0/0x2340
[   44.873970][ T3859]  dup_task_struct+0x229/0x670
[   44.874045][ T3859]  copy_process+0x5a0/0x2340
[   44.874067][ T3859]  ? ktime_expiry_to_cycles+0x1f1/0x210
[   44.874092][ T3859]  ? clockevents_program_event+0x109/0x340
[   44.874123][ T3859]  ? tick_program_event+0x79/0xc0
[   44.874232][ T3859]  kernel_clone+0x1c0/0x5f0
[   44.874464][ T3859]  __x64_sys_clone+0x143/0x180
[   44.874503][ T3859]  x64_sys_call+0x1222/0x3020
[   44.874534][ T3859]  do_syscall_64+0x136/0x3c0
[   44.874575][ T3859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.874639][ T3859] RIP: 0033:0x7efe925ece59
[   44.874659][ T3859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.874683][ T3859] RSP: 002b:00007efe91046fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   44.874708][ T3859] RAX: ffffffffffffffda RBX: 00007efe92865fa0 RCX: 00007efe925ece59
[   44.874726][ T3859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[   44.874741][ T3859] RBP: 00007efe91047090 R08: 0000000000000000 R09: 0000000000000000
[   44.874785][ T3859] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   44.874801][ T3859] R13: 00007efe92866038 R14: 00007efe92865fa0 R15: 00007fff400e99d8
[   44.874869][ T3859]  </TASK>
[   44.874990][ T3859] Mem-Info:
[   45.103901][ T3859] active_anon:9949 inactive_anon:0 isolated_anon:0
[   45.103901][ T3859]  active_file:0 inactive_file:11251 isolated_file:0
[   45.103901][ T3859]  unevictable:0 dirty:1600 writeback:29
[   45.103901][ T3859]  slab_reclaimable:3085 slab_unreclaimable:16445
[   45.103901][ T3859]  mapped:32849 shmem:3047 pagetables:1086
[   45.103901][ T3859]  sec_pagetables:0 bounce:0
[   45.103901][ T3859]  kernel_misc_reclaimable:0
[   45.103901][ T3859]  free:1891696 free_pcp:8981 free_cma:0
[   45.104715][ T3874] IPVS: Scheduler module ip_vs_ not found
[   45.155903][ T3859] Node 0 active_anon:39796kB inactive_anon:0kB active_file:0kB inactive_file:45004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131396kB dirty:6400kB writeback:116kB shmem:12188kB kernel_stack:3424kB pagetables:4344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   45.186964][ T3859] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   45.220405][ T3859] lowmem_reserve[]: 0 2878 7857 7857
[   45.226365][ T3859] Node 0 DMA32 free:2944204kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947728kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB
[   45.260958][ T3859] lowmem_reserve[]: 0 0 4978 4978
[   45.266121][ T3859] Node 0 Normal free:4607220kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39796kB inactive_anon:0kB active_file:0kB inactive_file:45004kB unevictable:0kB writepending:6400kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:32760kB local_pcp:6568kB free_cma:0kB
[   45.299731][ T3859] lowmem_reserve[]: 0 0 0 0
[   45.304352][ T3859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   45.317448][ T3859] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 5*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944204kB
[   45.333875][ T3859] Node 0 Normal: 43*4kB (UM) 37*8kB (UM) 5*16kB (UME) 8*32kB (UME) 14*64kB (UME) 14*128kB (UME) 9*256kB (UME) 5*512kB (UME) 5*1024kB (UM) 3*2048kB (UME) 1120*4096kB (M) = 4607140kB
[   45.361797][   T28] kauditd_printk_skb: 41 callbacks suppressed
[   45.361893][   T28] audit: type=1400 audit(1782528539.269:418): avc:  denied  { create } for  pid=3877 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   45.384981][ T3878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'.
[   45.387458][ T3859] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   45.426868][ T3859] 14308 total pagecache pages
[   45.432381][ T3878] x_tables: duplicate underflow at hook 3
[   45.436956][ T3859] 0 pages in swap cache
[   45.447949][ T3859] Free swap  = 124996kB
[   45.452221][   T28] audit: type=1400 audit(1782528539.339:419): avc:  denied  { write } for  pid=3877 comm="syz.1.113" name="snmp" dev="proc" ino=4026532417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   45.479034][ T3859] Total swap = 124996kB
[   45.483363][ T3859] 2097051 pages RAM
[   45.487870][ T3859] 0 pages HighMem/MovableOnly
[   45.492935][ T3859] 81720 pages reserved
[   45.522281][ T3882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'.
[   45.628331][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   45.736665][ T3898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'.
[   45.796028][   T28] audit: type=1400 audit(1782528539.699:420): avc:  denied  { map } for  pid=3899 comm="syz.3.122" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   45.922649][   T28] audit: type=1400 audit(1782528539.829:421): avc:  denied  { setopt } for  pid=3909 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   45.952483][ T3910] macvlan1: entered promiscuous mode
[   45.958499][ T3910] macvlan1: entered allmulticast mode
[   45.980891][ T3910] veth1_vlan: entered allmulticast mode
[   46.047743][ T3915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'.
[   46.090593][   T28] audit: type=1400 audit(1782528539.989:422): avc:  denied  { setopt } for  pid=3916 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   46.095309][ T3915] x_tables: duplicate underflow at hook 3
[   46.195995][   T28] audit: type=1400 audit(1782528540.099:423): avc:  denied  { unmount } for  pid=3920 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   46.270105][   T28] audit: type=1400 audit(1782528540.139:424): avc:  denied  { connect } for  pid=3922 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   46.295114][ T3928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'.
[   46.326741][ T3928] tc_dump_action: action bad kind
[   46.336097][ T3932] loop4: detected capacity change from 0 to 512
[   46.350069][ T3932] EXT4-fs: Ignoring removed nobh option
[   46.374886][ T3932] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[   46.394324][ T3932] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.135: inode has both inline data and extents flags
[   46.407520][ T3932] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   46.411348][ T3932] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.135: couldn't read orphan inode 13 (err -117)
[   46.440437][ T3932] fserror_report: 4 callbacks suppressed
[   46.440481][ T3932] loop4: lost filesystem error report for type 5 error -117
[   46.456289][    C0] EXT4-fs (loop4): error count since last fsck: 2
[   46.470930][    C0] EXT4-fs (loop4): initial error at time 1782528540: ext4_orphan_get:1399: inode 13
[   46.480899][    C0] EXT4-fs (loop4): last error at time 1782528540: ext4_orphan_get:1404
[   46.510738][ T3932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.527839][ T3936] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12
[   46.539950][ T3932] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12
[   46.561921][ T3936] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12
[   46.584352][ T3932] netlink: 'syz.4.135': attribute type 28 has an invalid length.
[   46.593697][ T3936] netlink: 'syz.4.135': attribute type 28 has an invalid length.
[   46.613199][ T3932] netlink: 'syz.4.135': attribute type 29 has an invalid length.
[   46.629157][ T3936] netlink: 'syz.4.135': attribute type 29 has an invalid length.
[   46.636991][ T3936] netlink: 132 bytes leftover after parsing attributes in process `syz.4.135'.
[   46.639421][ T3932] netlink: 132 bytes leftover after parsing attributes in process `syz.4.135'.
[   46.663824][ T3939] netlink: 72 bytes leftover after parsing attributes in process `syz.2.137'.
[   46.710967][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.759194][   T28] audit: type=1400 audit(1782528540.669:425): avc:  denied  { setopt } for  pid=3952 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   47.077825][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'.
[   47.175051][ T3975] x_tables: duplicate underflow at hook 3
[   47.537632][   T28] audit: type=1400 audit(1782528541.269:426): avc:  denied  { create } for  pid=3980 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   47.620836][   T28] audit: type=1400 audit(1782528541.299:427): avc:  denied  { write } for  pid=3980 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   48.603807][ T4013] netlink: 'syz.4.153': attribute type 39 has an invalid length.
[   48.906603][ T4025] x_tables: duplicate underflow at hook 3
[   49.095581][   T40] Bluetooth: hci0: Frame reassembly failed (-84)
[   49.104152][ T4029] Bluetooth: hci0: Frame reassembly failed (-84)
[   49.284601][ T4034] x_tables: duplicate underflow at hook 1
[   49.954906][ T4054] loop4: detected capacity change from 0 to 1024
[   50.051254][ T4054] EXT4-fs: Mount option(s) incompatible with ext3
[   50.394059][ T4070] loop0: detected capacity change from 0 to 1024
[   50.400931][ T4070] ext4: Unknown parameter 'nouser_xattr'
[   50.589948][ T4079] __nla_validate_parse: 1 callbacks suppressed
[   50.589965][ T4079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'.
[   50.620078][   T28] kauditd_printk_skb: 411 callbacks suppressed
[   50.620121][   T28] audit: type=1400 audit(1782528544.526:839): avc:  denied  { execute } for  pid=4078 comm="syz.4.174" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   50.648538][ T4079] process 'syz.4.174' launched '/dev/fd/14' with NULL argv: empty string added
[   50.662471][   T28] audit: type=1400 audit(1782528544.566:840): avc:  denied  { mounton } for  pid=4075 comm="syz.0.173" path="/33/file0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   50.662482][ T4080] 9p: Bad value for 'wfdno'
[   50.703401][   T28] audit: type=1400 audit(1782528544.596:841): avc:  denied  { execute_no_trans } for  pid=4078 comm="syz.4.174" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   50.949296][ T4082] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   51.073266][   T28] audit: type=1400 audit(1782528544.976:842): avc:  denied  { write } for  pid=4084 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   51.156259][ T3694] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   51.157354][ T4030] Bluetooth: hci0: command 0x1003 tx timeout
[   51.452788][ T4091] Driver unsupported XDP return value 0 on prog  (id 28) dev N/A, expect packet loss!
[   51.555826][ T4098] loop4: detected capacity change from 0 to 256
[   51.571518][ T4098] msdos: Unknown parameter 'time'
[   51.661617][   T28] audit: type=1400 audit(1782528545.456:843): avc:  denied  { read write } for  pid=4097 comm="syz.4.180" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   51.685310][   T28] audit: type=1400 audit(1782528545.456:844): avc:  denied  { open } for  pid=4097 comm="syz.4.180" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   51.709023][   T28] audit: type=1400 audit(1782528545.496:845): avc:  denied  { create } for  pid=4097 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   51.732000][ T4103] loop4: detected capacity change from 0 to 128
[   51.756131][ T4103] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   51.880511][ T4103] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.907557][   T28] audit: type=1400 audit(1782528545.796:846): avc:  denied  { write } for  pid=4102 comm="syz.4.182" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   52.053974][ T4109] loop0: detected capacity change from 0 to 512
[   52.204059][ T4109] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.179: corrupted inode contents
[   52.217217][ T4109] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   52.220576][ T4109] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.179: mark_inode_dirty error
[   52.230179][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   52.230217][    C0] EXT4-fs (loop0): initial error at time 1782528546: ext4_do_update_inode:5742: inode 16
[   52.230318][    C0] EXT4-fs (loop0): last error at time 1782528546: ext4_do_update_inode:5742: inode 16
[   52.270650][ T4109] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   52.273535][ T4109] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.179: corrupted inode contents
[   52.296379][ T4109] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   52.302433][ T4109] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.179: mark_inode_dirty error
[   52.324304][ T4109] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   52.329299][ T4109] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.179: corrupted inode contents
[   52.351378][ T4109] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   52.351879][ T4109] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   52.370978][ T4109] loop0: lost filesystem error report for type 5 error -117
[   52.377389][ T4109] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.179: corrupted inode contents
[   52.397591][ T4109] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   52.399103][ T4109] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.179: mark_inode_dirty error
[   52.420454][ T4109] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   52.423913][ T4109] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   52.443318][ T4109] loop0: lost filesystem error report for type 5 error -117
[   52.451724][ T4109] EXT4-fs (loop0): 1 truncate cleaned up
[   52.476917][ T4109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.491440][ T4109] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.587999][   T40] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   52.606239][   T40] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1
[   52.658122][   T28] audit: type=1400 audit(1782528545.796:847): avc:  denied  { create } for  pid=4102 comm="syz.4.182" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   52.758453][ T4113] loop3: detected capacity change from 0 to 512
[   52.798039][ T4113] EXT4-fs: inline encryption not supported
[   52.840139][ T4113] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   52.867884][ T4113] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   52.908176][ T4113] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   52.942525][ T4113] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.183: bg 0: block 248: padding at end of block bitmap is not set
[   52.985065][ T4113] loop3: lost filesystem error report for type 5 error -117
[   52.985381][ T4113] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.183: Failed to acquire dquot type 1
[   52.992794][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   52.992837][    C0] EXT4-fs (loop3): last error at time 1782528546: ext4_validate_block_bitmap:441
[   53.087046][ T4113] loop3: lost filesystem error report for type 5 error -28
[   53.087589][ T4113] EXT4-fs (loop3): 1 truncate cleaned up
[   53.110958][ T4113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   53.271740][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   53.609311][ T4122] loop3: detected capacity change from 0 to 256
[   53.794782][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.987676][ T4125] xt_NFQUEUE: number of total queues is 0
[   54.234026][ T4131] loop4: detected capacity change from 0 to 128
[   54.246821][ T4130] macvtap1: entered promiscuous mode
[   54.252296][ T4130] macvtap1: entered allmulticast mode
[   54.258515][ T4130] dummy0: entered allmulticast mode
[   54.263850][ T4130] dummy0: entered promiscuous mode
[   54.270991][ T4130] team0: Device macvtap1 failed to register rx_handler
[   54.286158][ T4130] dummy0: left allmulticast mode
[   54.301418][ T3375] dummy0: left promiscuous mode
[   54.308712][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.319252][ T4131] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   54.331877][ T4131] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.997007][ T4142] 9p: Bad value for 'rfdno'
[   55.088526][ T4151] netlink: 52 bytes leftover after parsing attributes in process `syz.1.195'.
[   55.333545][ T4165] loop3: detected capacity change from 0 to 512
[   55.359988][ T4165] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   55.388464][ T4165] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.199: corrupted in-inode xattr: e_value size too large
[   55.418457][ T4168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'.
[   55.435215][ T4165] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   55.435355][ T4165] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.199: couldn't read orphan inode 15 (err -117)
[   55.444724][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   55.444748][    C1] EXT4-fs (loop3): initial error at time 1782528549: ext4_iget_extra_inode:5180: inode 15
[   55.444806][    C1] EXT4-fs (loop3): last error at time 1782528549: ext4_iget_extra_inode:5180: inode 15
[   55.501602][ T4168] x_tables: duplicate underflow at hook 3
[   55.545737][ T4165] loop3: lost filesystem error report for type 5 error -117
[   55.546524][ T4165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.654541][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.913688][ T4175] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   55.931741][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   56.077853][ T4180] netlink: 40 bytes leftover after parsing attributes in process `syz.4.203'.
[   56.157257][ T4179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.203'.
[   56.294856][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   56.294873][   T28] audit: type=1400 audit(1782528550.196:853): avc:  denied  { read write } for  pid=4184 comm="syz.3.206" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   56.353621][   T28] audit: type=1400 audit(1782528550.196:854): avc:  denied  { open } for  pid=4184 comm="syz.3.206" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   56.406743][ T4187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.207'.
[   56.509305][ T4182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'.
[   56.841387][ T4200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'.
[   56.962064][ T4202] hsr0: entered allmulticast mode
[   56.971535][ T4202] hsr_slave_0: entered allmulticast mode
[   56.979681][ T4202] hsr_slave_1: entered allmulticast mode
[   56.999674][ T4202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'.
[   57.104594][ T4202] hsr_slave_0: left promiscuous mode
[   57.140022][ T4202] hsr_slave_1: left promiscuous mode
[   57.296931][ T4202] hsr0 (unregistering): left allmulticast mode
[   57.344886][ T4204] x_tables: duplicate underflow at hook 3
[   58.091802][ T4212] 9p: Bad value for 'rfdno'
[   58.446919][ T4214] loop3: detected capacity change from 0 to 1024
[   58.518457][ T4214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.626812][   T28] audit: type=1400 audit(1782528552.526:855): avc:  denied  { write } for  pid=4213 comm="syz.3.215" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   58.660610][   T28] audit: type=1400 audit(1782528552.536:856): avc:  denied  { write } for  pid=4213 comm="syz.3.215" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   58.726655][   T28] audit: type=1400 audit(1782528552.536:857): avc:  denied  { open } for  pid=4213 comm="syz.3.215" path="/32/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   58.778361][   T28] audit: type=1400 audit(1782528552.606:858): avc:  denied  { ioctl } for  pid=4213 comm="syz.3.215" path="/32/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   58.831886][ T4228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'.
[   58.879933][   T28] audit: type=1400 audit(1782528552.786:859): avc:  denied  { write } for  pid=3301 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   58.908892][   T28] audit: type=1400 audit(1782528552.786:860): avc:  denied  { remove_name } for  pid=3301 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   58.935522][ T3301] audit: audit_backlog=65 > audit_backlog_limit=64
[   58.937408][   T28] audit: type=1400 audit(1782528552.786:861): avc:  denied  { rmdir } for  pid=3301 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   59.433059][ T4243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'.
[   59.534333][ T4243] x_tables: duplicate underflow at hook 3
[   59.679140][ T3375] IPVS: starting estimator thread 0...
[   59.692724][ T4245] netlink: 'syz.1.226': attribute type 30 has an invalid length.
[   59.836267][ T4246] IPVS: using max 2256 ests per chain, 112800 per kthread
[   61.259480][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.304961][ T4260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'.
[   61.544400][   T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.738553][ T4273] xt_hashlimit: size too large, truncated to 1048576
[   61.919215][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'.
[   62.183263][ T3959] syz.2.137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   62.264707][ T3959] CPU: 0 UID: 0 PID: 3959 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   62.264817][ T3959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   62.264835][ T3959] Call Trace:
[   62.264844][ T3959]  <TASK>
[   62.264855][ T3959]  __dump_stack+0x1d/0x30
[   62.264883][ T3959]  dump_stack_lvl+0x95/0xd0
[   62.264909][ T3959]  dump_stack+0x15/0x1b
[   62.264929][ T3959]  dump_header+0x80/0x240
[   62.264973][ T3959]  oom_kill_process+0x295/0x350
[   62.265018][ T3959]  out_of_memory+0x981/0xbc0
[   62.265061][ T3959]  try_charge_memcg+0x621/0xa00
[   62.265119][ T3959]  charge_memcg+0x6d/0x120
[   62.265159][ T3959]  __mem_cgroup_charge+0x28/0xb0
[   62.265195][ T3959]  shmem_get_folio_gfp+0x49f/0xd90
[   62.265378][ T3959]  shmem_write_begin+0xfc/0x1f0
[   62.265405][ T3959]  generic_perform_write+0x186/0x490
[   62.265441][ T3959]  ? current_time+0x18d/0x250
[   62.265542][ T3959]  shmem_file_write_iter+0xc5/0xf0
[   62.265583][ T3959]  __kernel_write_iter+0x30f/0x590
[   62.265641][ T3959]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   62.265721][ T3959]  dump_user_range+0xa73/0xd00
[   62.265769][ T3959]  elf_core_dump+0x21c0/0x2340
[   62.265874][ T3959]  ? 0xffffffffff600000
[   62.265912][ T3959]  coredump_write+0xaf9/0xdd0
[   62.265981][ T3959]  vfs_coredump+0x2770/0x3290
[   62.266093][ T3959]  ? __memcg_slab_free_hook+0x75/0x2c0
[   62.266213][ T3959]  ? __sigqueue_free+0xf4/0x130
[   62.266311][ T3959]  ? proc_coredump_connector+0x160/0x2b0
[   62.266336][ T3959]  ? __sigqueue_free+0xf4/0x130
[   62.266358][ T3959]  ? kmem_cache_free+0xca/0x380
[   62.266412][ T3959]  get_signal+0xd33/0xf10
[   62.266468][ T3959]  arch_do_signal_or_restart+0x96/0x480
[   62.266542][ T3959]  irqentry_exit+0x14d/0x610
[   62.266568][ T3959]  ? force_sig+0x89/0xb0
[   62.266605][ T3959]  exc_general_protection+0x155/0x1e0
[   62.266656][ T3959]  asm_exc_general_protection+0x26/0x30
[   62.266719][ T3959] RIP: 0033:0x7f066d16ce61
[   62.266740][ T3959] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   62.266765][ T3959] RSP: 002b:0000200000000340 EFLAGS: 00010217
[   62.266788][ T3959] RAX: 0000000000000000 RBX: 00007f066d3e6090 RCX: 00007f066d16ce59
[   62.266806][ T3959] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000020000
[   62.266849][ T3959] RBP: 00007f066d202e6f R08: 0000200000000500 R09: 0000200000000500
[   62.266869][ T3959] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000
[   62.266888][ T3959] R13: 00007f066d3e6128 R14: 00007f066d3e6090 R15: 00007fff9340df28
[   62.266962][ T3959]  </TASK>
[   62.269747][ T4286] loop4: detected capacity change from 0 to 164
[   62.563464][ T3959] memory: usage 306932kB, limit 307200kB, failcnt 24513
[   62.571142][ T3959] memory+swap: usage 431840kB, limit 9007199254740988kB, failcnt 0
[   62.579631][ T3959] kmem: usage 5760kB, limit 9007199254740988kB, failcnt 0
[   62.591447][ T4286] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[   62.619508][ T3959] Memory cgroup stats for /syz2:
[   62.619765][ T3959] cache 307142656
[   62.628511][ T3959] rss 286720
[   62.631729][ T3959] shmem 304181248
[   62.635460][ T3959] mapped_file 2514944
[   62.639459][ T3959] dirty 4096
[   62.642680][ T3959] writeback 0
[   62.645988][ T3959] workingset_refault_anon 374
[   62.650689][ T3959] workingset_refault_file 5771
[   62.655475][ T3959] swap 127913984
[   62.659035][ T3959] swapcached 146264064
[   62.663127][ T3959] pgpgin 129017
[   62.666600][ T3959] pgpgout 53758
[   62.670078][ T3959] pgfault 22354
[   62.673566][ T3959] pgmajfault 167
[   62.677131][ T3959] inactive_anon 17526784
[   62.681547][ T3959] active_anon 287023104
[   62.685720][ T3959] inactive_file 397312
[   62.689803][ T3959] active_file 0
[   62.693280][ T3959] unevictable 0
[   62.696802][ T3959] hierarchical_memory_limit 314572800
[   62.702196][ T3959] hierarchical_memsw_limit 9223372036854771712
[   62.708363][ T3959] total_cache 307142656
[   62.712605][ T3959] total_rss 286720
[   62.716347][ T3959] total_shmem 304181248
[   62.774945][ T3959] total_mapped_file 2514944
[   62.795108][ T3959] total_dirty 4096
[   62.814474][ T3296] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[   62.826184][ T3296] iso9660: Corrupted directory entry in block 4 of inode 1792
[   62.833829][ T3296] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[   62.845512][ T3296] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[   62.858251][ T3296] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[   62.872548][ T3296] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[   62.882370][ T3959] total_writeback 0
[   62.886517][ T3296] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[   62.896359][ T3296] ISOFS: unable to read i-node block
[   62.902204][ T3296] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[   62.916275][ T3959] total_workingset_refault_anon 374
[   62.917835][ T3296] ISOFS: unable to read i-node block
[   62.921529][ T3959] total_workingset_refault_file 5771
[   62.921539][ T3959] total_swap 127913984
[   62.921549][ T3959] total_swapcached 146264064
[   62.921559][ T3959] total_pgpgin 129017
[   62.948659][ T3959] total_pgpgout 53758
[   62.952679][ T3959] total_pgfault 22354
[   62.956727][ T3959] total_pgmajfault 167
[   62.960993][ T3959] total_inactive_anon 17526784
[   62.965885][ T3959] total_active_anon 287023104
[   62.970606][ T3959] total_inactive_file 397312
[   62.975274][ T3959] total_active_file 0
[   62.979320][ T3959] total_unevictable 0
[   62.983337][ T3959] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.137,pid=3959,uid=0
[   62.998044][ T3959] Memory cgroup out of memory: Killed process 3959 (syz.2.137) total-vm:90460kB, anon-rss:1232kB, file-rss:22616kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000
[   63.040645][   T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.455637][   T28] kauditd_printk_skb: 126 callbacks suppressed
[   63.455653][   T28] audit: type=1400 audit(1782528557.356:953): avc:  denied  { create } for  pid=4303 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   63.492556][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.499725][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.508772][ T4266] bridge_slave_0: entered allmulticast mode
[   63.515568][ T4266] bridge_slave_0: entered promiscuous mode
[   63.522588][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.531275][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.538607][ T4266] bridge_slave_1: entered allmulticast mode
[   63.545152][ T4266] bridge_slave_1: entered promiscuous mode
[   63.565361][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.576261][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.597944][ T4266] team0: Port device team_slave_0 added
[   63.605178][ T4266] team0: Port device team_slave_1 added
[   63.623345][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.630388][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.638746][ T4310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.243'.
[   63.656937][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.763207][   T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.823663][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.830833][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.861146][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.928600][ T4266] hsr_slave_0: entered promiscuous mode
[   63.937850][ T4266] hsr_slave_1: entered promiscuous mode
[   63.944979][ T4322] loop0: detected capacity change from 0 to 1024
[   63.947280][ T4266] debugfs: 'hsr0' already exists in 'hsr'
[   63.962050][ T4266] Cannot create hsr debugfs directory
[   63.995043][ T4322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.031737][ T4322] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.064319][   T28] audit: type=1400 audit(1782528557.966:954): avc:  denied  { write } for  pid=4321 comm="syz.0.247" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   64.086858][ T4322] EXT4-fs (loop0): shut down requested (2)
[   64.096963][ T3959] syz.2.137 (3959) used greatest stack depth: 7816 bytes left
[   64.129641][ T4266] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   64.142136][   T28] audit: type=1400 audit(1782528557.966:955): avc:  denied  { read } for  pid=4321 comm="syz.0.247" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   64.191439][ T4266] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.201284][   T28] audit: type=1400 audit(1782528558.016:956): avc:  denied  { read } for  pid=2962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   64.237778][   T28] audit: type=1400 audit(1782528558.016:957): avc:  denied  { search } for  pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.270352][   T28] audit: type=1400 audit(1782528558.016:958): avc:  denied  { write search } for  pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.296300][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   64.327151][   T28] audit: type=1400 audit(1782528558.016:959): avc:  denied  { add_name } for  pid=2962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.358114][   T28] audit: type=1400 audit(1782528558.016:960): avc:  denied  { create } for  pid=2962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   64.396001][   T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.406529][   T28] audit: type=1400 audit(1782528558.016:961): avc:  denied  { append open } for  pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   64.419690][ T4339] netlink: 40 bytes leftover after parsing attributes in process `syz.0.249'.
[   64.438944][   T28] audit: type=1400 audit(1782528558.016:962): avc:  denied  { getattr } for  pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   64.467110][ T4340] netlink: 144 bytes leftover after parsing attributes in process `syz.1.248'.
[   64.493532][ T4266] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   64.505406][ T4266] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.513552][ T4266] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   64.547465][ T4266] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.572584][ T4266] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   64.614190][ T4266] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.757570][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.773198][ T4266] 8021q: adding VLAN 0 to HW filter on device team0
[   64.783667][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.790809][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.870628][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.877762][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.129578][   T30] bridge_slave_1: left allmulticast mode
[   65.135317][   T30] bridge_slave_1: left promiscuous mode
[   65.142794][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.223671][   T30] bridge_slave_0: left allmulticast mode
[   65.229665][   T30] bridge_slave_0: left promiscuous mode
[   65.244847][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.265977][ T4383] Cannot find del_set index 0 as target
[   65.334979][ T3948] syz.2.137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   65.344782][ T3948] CPU: 1 UID: 0 PID: 3948 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   65.344814][ T3948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   65.344831][ T3948] Call Trace:
[   65.344839][ T3948]  <TASK>
[   65.344850][ T3948]  __dump_stack+0x1d/0x30
[   65.344872][ T3948]  dump_stack_lvl+0x95/0xd0
[   65.344930][ T3948]  dump_stack+0x15/0x1b
[   65.344949][ T3948]  dump_header+0x80/0x240
[   65.344970][ T3948]  oom_kill_process+0x295/0x350
[   65.345064][ T3948]  out_of_memory+0x981/0xbc0
[   65.345134][ T3948]  try_charge_memcg+0x621/0xa00
[   65.345221][ T3948]  charge_memcg+0x6d/0x120
[   65.345253][ T3948]  __mem_cgroup_charge+0x28/0xb0
[   65.345288][ T3948]  shmem_get_folio_gfp+0x49f/0xd90
[   65.345391][ T3948]  shmem_write_begin+0xfc/0x1f0
[   65.345500][ T3948]  generic_perform_write+0x186/0x490
[   65.345525][ T3948]  shmem_file_write_iter+0xc5/0xf0
[   65.345581][ T3948]  __kernel_write_iter+0x30f/0x590
[   65.345615][ T3948]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   65.345649][ T3948]  dump_user_range+0xa73/0xd00
[   65.345769][ T3948]  elf_core_dump+0x21c0/0x2340
[   65.345801][ T3948]  ? 0xffffffffff600000
[   65.345830][ T3948]  coredump_write+0xaf9/0xdd0
[   65.345875][ T3948]  vfs_coredump+0x2770/0x3290
[   65.345918][ T3948]  ? __refill_obj_stock+0x1f8/0x3d0
[   65.346045][ T3948]  ? __memcg_slab_free_hook+0x75/0x2c0
[   65.346085][ T3948]  ? __sigqueue_free+0xf4/0x130
[   65.346116][ T3948]  ? proc_coredump_connector+0x160/0x2b0
[   65.346156][ T3948]  ? __sigqueue_free+0xf4/0x130
[   65.346247][ T3948]  ? kmem_cache_free+0xca/0x380
[   65.346353][ T3948]  get_signal+0xd33/0xf10
[   65.346397][ T3948]  arch_do_signal_or_restart+0x96/0x480
[   65.346532][ T3948]  irqentry_exit+0x14d/0x610
[   65.346606][ T3948]  ? force_sig+0x89/0xb0
[   65.346634][ T3948]  exc_general_protection+0x155/0x1e0
[   65.346675][ T3948]  asm_exc_general_protection+0x26/0x30
[   65.346737][ T3948] RIP: 0033:0x7f066d16ce61
[   65.346757][ T3948] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   65.346778][ T3948] RSP: 002b:0000200000000340 EFLAGS: 00010217
[   65.346794][ T3948] RAX: 0000000000000000 RBX: 00007f066d3e6090 RCX: 00007f066d16ce59
[   65.346880][ T3948] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000020000
[   65.346898][ T3948] RBP: 00007f066d202e6f R08: 0000200000000500 R09: 0000200000000500
[   65.346914][ T3948] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000
[   65.346971][ T3948] R13: 00007f066d3e6128 R14: 00007f066d3e6090 R15: 00007fff9340df28
[   65.346992][ T3948]  </TASK>
[   65.347001][ T3948] memory: usage 307200kB, limit 307200kB, failcnt 33490
[   65.866863][ T4388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.255'.
[   65.885212][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.947857][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.982976][   T30] bond0 (unregistering): Released all slaves
[   66.018012][ T3948] memory+swap: usage 432084kB, limit 9007199254740988kB, failcnt 0
[   66.053039][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.063657][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.088183][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1
[   66.106259][ T3948] kmem: usage 5616kB, limit 9007199254740988kB, failcnt 0
[   66.113448][ T3948] Memory cgroup stats for /syz2:
[   66.113652][ T3948] cache 308588544
[   66.122729][ T3948] rss 229376
[   66.131860][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.147949][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.180348][ T3948] shmem 307384320
[   66.184192][ T4315] bridge_slave_0: entered allmulticast mode
[   66.199874][ T4315] bridge_slave_0: entered promiscuous mode
[   66.225980][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.266432][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.282783][ T4315] bridge_slave_1: entered allmulticast mode
[   66.295846][ T4315] bridge_slave_1: entered promiscuous mode
[   66.360028][ T4315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.377106][ T3948] mapped_file 0
[   66.383110][ T4315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.424034][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.441393][ T4315] team0: Port device team_slave_0 added
[   66.455505][ T4315] team0: Port device team_slave_1 added
[   66.492155][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.512135][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.512171][ T4315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.512976][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.512988][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.513084][ T4315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.612789][ T4315] hsr_slave_0: entered promiscuous mode
[   66.618986][ T4315] hsr_slave_1: entered promiscuous mode
[   66.619360][ T4315] debugfs: 'hsr0' already exists in 'hsr'
[   66.619377][ T4315] Cannot create hsr debugfs directory
[   66.692921][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2
[   66.801298][ T4315] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   66.831170][ T4447] netlink: 'syz.1.261': attribute type 6 has an invalid length.
[   66.891057][ T4454] IPVS: ip_vs_add_dest(): server weight less than zero
[   66.927783][ T3948] dirty 0
[   67.060047][ T3948] writeback 0
[   67.147759][ T3948] workingset_refault_anon 374
[   67.192500][ T3948] workingset_refault_file 18168
[   67.233967][ T3948] swap 127983616
[   67.287423][ T3948] swapcached 151678976
[   67.312382][ T4315] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   67.334669][ T4454] netlink: 'syz.1.261': attribute type 6 has an invalid length.
[   67.362188][ T3948] pgpgin 147609
[   67.402138][ T3948] pgpgout 72213
[   67.469955][ T3948] pgfault 23216
[   67.508489][   T30] hsr_slave_0: left promiscuous mode
[   67.516514][ T3948] pgmajfault 333
[   67.581578][ T4475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.265'.
[   67.590615][ T3948] inactive_anon 52346880
[   67.590932][   T30] hsr_slave_1: left promiscuous mode
[   67.608436][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.625391][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.646986][ T4478] mmap: syz.1.266 (4478) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   67.682458][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.690222][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.713012][ T3948] active_anon 255270912
[   67.791719][   T30] veth1_macvtap: left promiscuous mode
[   67.797477][   T30] veth0_macvtap: left promiscuous mode
[   67.803088][   T30] veth1_vlan: left promiscuous mode
[   67.813043][   T30] veth0_vlan: left promiscuous mode
[   67.822683][ T3948] inactive_file 249856
[   67.871713][ T3948] active_file 0
[   67.947576][ T3948] unevictable 0
[   68.007230][ T3948] hierarchical_memory_limit 314572800
[   68.013230][ T3948] hierarchical_memsw_limit 9223372036854771712
[   68.020046][ T3948] total_cache 308588544
[   68.024303][ T3948] total_rss 229376
[   68.029656][ T3948] total_shmem 307384320
[   68.033898][ T3948] total_mapped_file 0
[   68.038232][ T3948] total_dirty 0
[   68.041939][ T3948] total_writeback 0
[   68.054374][ T4482] x_tables: duplicate underflow at hook 3
[   68.061004][ T3948] total_workingset_refault_anon 374
[   68.075869][ T3948] total_workingset_refault_file 18168
[   68.085365][ T3948] total_swap 127983616
[   68.093838][ T3948] total_swapcached 151678976
[   68.104276][ T3948] total_pgpgin 147609
[   68.120584][ T3948] total_pgpgout 72213
[   68.134428][   T30] team0 (unregistering): Port device team_slave_1 removed
[   68.135756][ T3948] total_pgfault 23216
[   68.148914][   T30] team0 (unregistering): Port device team_slave_0 removed
[   68.172073][ T3948] total_pgmajfault 333
[   68.180752][ T3948] total_inactive_anon 52346880
[   68.187341][ T3948] total_active_anon 255270912
[   68.192190][ T3948] total_inactive_file 249856
[   68.198338][ T3948] total_active_file 0
[   68.202429][ T3948] total_unevictable 0
[   68.207056][ T3948] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.137,pid=3976,uid=0
[   68.222329][ T3948] Memory cgroup out of memory: Killed process 3976 (syz.2.137) total-vm:90460kB, anon-rss:1232kB, file-rss:22852kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000
[   68.240303][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3
[   68.263005][ T4315] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   68.272818][ T4315] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.289431][ T4315] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   68.304958][ T4315] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.319712][ T4315] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   68.329893][ T3985] syz.2.137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   68.345180][ T4315] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.411057][ T3985] CPU: 0 UID: 0 PID: 3985 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   68.411093][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   68.411106][ T3985] Call Trace:
[   68.411111][ T3985]  <TASK>
[   68.411118][ T3985]  __dump_stack+0x1d/0x30
[   68.411141][ T3985]  dump_stack_lvl+0x95/0xd0
[   68.411257][ T3985]  dump_stack+0x15/0x1b
[   68.411306][ T3985]  dump_header+0x80/0x240
[   68.411333][ T3985]  oom_kill_process+0x295/0x350
[   68.411396][ T3985]  out_of_memory+0x981/0xbc0
[   68.411474][ T3985]  try_charge_memcg+0x621/0xa00
[   68.411526][ T3985]  charge_memcg+0x6d/0x120
[   68.411584][ T3985]  __mem_cgroup_charge+0x28/0xb0
[   68.411616][ T3985]  shmem_get_folio_gfp+0x49f/0xd90
[   68.411654][ T3985]  shmem_write_begin+0xfc/0x1f0
[   68.411700][ T3985]  generic_perform_write+0x186/0x490
[   68.411730][ T3985]  shmem_file_write_iter+0xc5/0xf0
[   68.411768][ T3985]  __kernel_write_iter+0x30f/0x590
[   68.411942][ T3985]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   68.412117][ T3985]  dump_user_range+0xa73/0xd00
[   68.412226][ T3985]  elf_core_dump+0x21c0/0x2340
[   68.412260][ T3985]  ? 0xffffffffff600000
[   68.412337][ T3985]  coredump_write+0xaf9/0xdd0
[   68.412389][ T3985]  vfs_coredump+0x2770/0x3290
[   68.412496][ T3985]  ? __memcg_slab_free_hook+0x75/0x2c0
[   68.412538][ T3985]  ? __sigqueue_free+0xf4/0x130
[   68.412569][ T3985]  ? proc_coredump_connector+0x160/0x2b0
[   68.412670][ T3985]  ? __sigqueue_free+0xf4/0x130
[   68.412696][ T3985]  ? kmem_cache_free+0xca/0x380
[   68.412727][ T3985]  get_signal+0xd33/0xf10
[   68.412773][ T3985]  arch_do_signal_or_restart+0x96/0x480
[   68.412888][ T3985]  irqentry_exit+0x14d/0x610
[   68.412916][ T3985]  ? force_sig+0x89/0xb0
[   68.412968][ T3985]  exc_general_protection+0x155/0x1e0
[   68.413048][ T3985]  asm_exc_general_protection+0x26/0x30
[   68.413078][ T3985] RIP: 0033:0x7f066d16ce61
[   68.413098][ T3985] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   68.413122][ T3985] RSP: 002b:0000200000000340 EFLAGS: 00010217
[   68.413144][ T3985] RAX: 0000000000000000 RBX: 00007f066d3e6090 RCX: 00007f066d16ce59
[   68.413206][ T3985] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000020000
[   68.413225][ T3985] RBP: 00007f066d202e6f R08: 0000200000000500 R09: 0000200000000500
[   68.413243][ T3985] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000
[   68.413260][ T3985] R13: 00007f066d3e6128 R14: 00007f066d3e6090 R15: 00007fff9340df28
[   68.413285][ T3985]  </TASK>
[   68.526856][ T3985] memory: usage 307200kB, limit 307200kB, failcnt 38380
[   68.714658][ T4266] veth0_vlan: entered promiscuous mode
[   68.723446][ T4315] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.742492][ T4266] veth1_vlan: entered promiscuous mode
[   68.752901][ T4315] 8021q: adding VLAN 0 to HW filter on device team0
[   68.769120][  T362] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.776302][  T362] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.823079][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.830249][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.838167][ T3985] memory+swap: usage 417440kB, limit 9007199254740988kB, failcnt 0
[   68.868590][ T4266] veth0_macvtap: entered promiscuous mode
[   68.870755][ T3985] kmem: usage 5268kB, limit 9007199254740988kB, failcnt 0
[   68.896286][   T28] kauditd_printk_skb: 130 callbacks suppressed
[   68.896300][   T28] audit: type=1400 audit(1782528562.796:1093): avc:  denied  { write } for  pid=4507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.939965][ T4266] veth1_macvtap: entered promiscuous mode
[   68.956729][   T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.982228][ T3985] Memory cgroup stats for /syz2:
[   68.982613][ T3985] cache 300679168
[   69.010971][   T28] audit: type=1400 audit(1782528562.916:1094): avc:  denied  { write } for  pid=4526 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.014576][ T3985] rss 69632
[   69.039456][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.064344][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.086946][ T4530] FAULT_INJECTION: forcing a failure.
[   69.086946][ T4530] name failslab, interval 1, probability 0, space 0, times 0
[   69.110767][   T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.121928][ T3985] shmem 300670976
[   69.128830][ T3985] mapped_file 4096
[   69.133367][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4
[   69.134544][ T4530] CPU: 1 UID: 0 PID: 4530 Comm: syz.0.275 Not tainted syzkaller #0 PREEMPT(lazy) 
[   69.134621][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   69.134663][ T4530] Call Trace:
[   69.134683][ T4530]  <TASK>
[   69.134712][ T4530]  __dump_stack+0x1d/0x30
[   69.134786][ T4530]  dump_stack_lvl+0x95/0xd0
[   69.134869][ T4530]  dump_stack+0x15/0x1b
[   69.134940][ T4530]  should_fail_ex+0x25e/0x270
[   69.135060][ T4530]  should_failslab+0x8c/0xb0
[   69.135203][ T4530]  __kmalloc_noprof+0xd4/0x4a0
[   69.135282][ T4530]  ? fib6_info_alloc+0x2e/0x90
[   69.135388][ T4530]  ? fib6_info_alloc+0x2e/0x90
[   69.135510][ T4530]  fib6_info_alloc+0x2e/0x90
[   69.135595][ T4530]  ip6_route_info_create+0xe5/0x4e0
[   69.135750][ T4530]  ip6_route_add+0x49/0x170
[   69.135911][ T4530]  ipv6_route_ioctl+0x2de/0x310
[   69.136031][ T4530]  inet6_ioctl+0x152/0x190
[   69.136135][ T4530]  sock_do_ioctl+0x73/0x230
[   69.136209][ T4530]  sock_ioctl+0x439/0x610
[   69.136387][ T4530]  ? mutex_lock+0x57/0x90
[   69.136492][ T4530]  ? __pfx_sock_ioctl+0x10/0x10
[   69.136663][ T4530]  __se_sys_ioctl+0xce/0x140
[   69.136745][ T4530]  __x64_sys_ioctl+0x43/0x50
[   69.136889][ T4530]  x64_sys_call+0x1563/0x3020
[   69.137010][ T4530]  do_syscall_64+0x136/0x3c0
[   69.137151][ T4530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.137223][ T4530] RIP: 0033:0x7f19a3e2ce59
[   69.137277][ T4530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.137339][ T4530] RSP: 002b:00007f19a2887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   69.137465][ T4530] RAX: ffffffffffffffda RBX: 00007f19a40a5fa0 RCX: 00007f19a3e2ce59
[   69.137519][ T4530] RDX: 0000200000000400 RSI: 000000000000890b RDI: 0000000000000003
[   69.137567][ T4530] RBP: 00007f19a2887090 R08: 0000000000000000 R09: 0000000000000000
[   69.137612][ T4530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.137654][ T4530] R13: 00007f19a40a6038 R14: 00007f19a40a5fa0 R15: 00007fff0b6dc898
[   69.137730][ T4530]  </TASK>
[   69.179558][ T3985] dirty 0
[   69.321068][   T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.390492][ T3976] syz.2.137 (3976) used greatest stack depth: 7608 bytes left
[   69.418860][   T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.422739][   T28] audit: type=1400 audit(1782528563.326:1095): avc:  denied  { create } for  pid=4535 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   69.436468][   T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.450059][ T4536] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   69.472593][ T4536] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   69.483438][   T28] audit: type=1400 audit(1782528563.326:1096): avc:  denied  { read } for  pid=4535 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   69.516067][ T3985] writeback 0
[   69.520733][ T3985] workingset_refault_anon 374
[   69.526728][   T28] audit: type=1400 audit(1782528563.416:1097): avc:  denied  { write } for  pid=4535 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   69.555100][ T4540] x_tables: duplicate underflow at hook 3
[   69.557415][ T3985] workingset_refault_file 19457
[   69.570212][   T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.576533][ T3985] swap 116019200
[   69.589964][   T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.593062][ T3985] swapcached 151941120
[   69.666412][   T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.681636][ T3985] pgpgin 150001
[   69.686356][ T3985] pgpgout 76545
[   69.689881][ T3985] pgfault 23441
[   69.693374][ T3985] pgmajfault 409
[   69.697168][ T3985] inactive_anon 290844672
[   69.703436][ T4315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.729333][ T4552] 9p: Bad value for 'rfdno'
[   69.734617][ T3985] active_anon 9957376
[   69.738927][ T3985] inactive_file 0
[   69.742601][ T3985] active_file 8192
[   69.747177][ T3985] unevictable 0
[   69.750710][ T3985] hierarchical_memory_limit 314572800
[   69.756225][ T3985] hierarchical_memsw_limit 9223372036854771712
[   69.781708][ T4554] netlink: 'syz.0.279': attribute type 13 has an invalid length.
[   69.816678][   T28] audit: type=1400 audit(1782528563.676:1098): avc:  denied  { map } for  pid=4553 comm="syz.0.279" path="socket:[8982]" dev="sockfs" ino=8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   69.869193][   T28] audit: type=1400 audit(1782528563.676:1099): avc:  denied  { read accept } for  pid=4553 comm="syz.0.279" path="socket:[8982]" dev="sockfs" ino=8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   69.893195][ T3985] total_cache 300679168
[   69.897574][ T3985] total_rss 69632
[   69.901250][ T3985] total_shmem 300670976
[   69.905451][ T3985] total_mapped_file 4096
[   69.917995][ T3985] total_dirty 0
[   69.922826][ T3985] total_writeback 0
[   69.931124][ T3985] total_workingset_refault_anon 374
[   69.954712][ T4559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.280'.
[   69.972726][ T3985] total_workingset_refault_file 19457
[   69.984341][ T3985] total_swap 116019200
[   69.992606][ T3985] total_swapcached 151941120
[   70.004522][ T3985] total_pgpgin 150001
[   70.015522][ T3985] total_pgpgout 76545
[   70.024670][ T3985] total_pgfault 23441
[   70.036295][ T3985] total_pgmajfault 409
[   70.050338][ T3985] total_inactive_anon 290844672
[   70.061882][ T4554] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.069260][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.076791][ T3985] total_active_anon 9957376
[   70.087617][ T3985] total_inactive_file 0
[   70.108123][ T3985] total_active_file 8192
[   70.112521][ T3985] total_unevictable 0
[   70.116583][ T3985] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.137,pid=3978,uid=0
[   70.157080][ T3985] Memory cgroup out of memory: Killed process 3978 (syz.2.137) total-vm:90460kB, anon-rss:1232kB, file-rss:22916kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000
[   70.313718][ T3951] syz.2.137 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   70.355566][ T4554] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.376908][ T4554] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.499169][ T3951] CPU: 0 UID: 0 PID: 3951 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   70.499204][ T3951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   70.499217][ T3951] Call Trace:
[   70.499225][ T3951]  <TASK>
[   70.499235][ T3951]  __dump_stack+0x1d/0x30
[   70.499265][ T3951]  dump_stack_lvl+0x95/0xd0
[   70.499321][ T3951]  dump_stack+0x15/0x1b
[   70.499345][ T3951]  dump_header+0x80/0x240
[   70.499372][ T3951]  oom_kill_process+0x295/0x350
[   70.499446][ T3951]  out_of_memory+0x981/0xbc0
[   70.499488][ T3951]  try_charge_memcg+0x621/0xa00
[   70.499521][ T3951]  ? should_fail_ex+0x30/0x270
[   70.499562][ T3951]  charge_memcg+0x6d/0x120
[   70.499601][ T3951]  __mem_cgroup_charge+0x28/0xb0
[   70.499642][ T3951]  filemap_add_folio+0x110/0x350
[   70.499756][ T3951]  __filemap_get_folio_mpol+0x32e/0x840
[   70.499842][ T3951]  filemap_fault+0x458/0xb60
[   70.499872][ T3951]  handle_mm_fault+0x167a/0x2da0
[   70.499943][ T3951]  __get_user_pages+0x129c/0x1f10
[   70.499984][ T3951]  ? up_write+0x18/0x60
[   70.500022][ T3951]  get_dump_page+0xb4/0x240
[   70.500125][ T3951]  dump_user_range+0x142/0xd00
[   70.500173][ T3951]  elf_core_dump+0x21c0/0x2340
[   70.500207][ T3951]  ? 0xffffffffff600000
[   70.500302][ T3951]  coredump_write+0xaf9/0xdd0
[   70.500412][ T3951]  vfs_coredump+0x2770/0x3290
[   70.500858][ T3951]  ? __memcg_slab_free_hook+0x75/0x2c0
[   70.500903][ T3951]  ? __sigqueue_free+0xf4/0x130
[   70.501338][ T3951]  ? proc_coredump_connector+0x160/0x2b0
[   70.501372][ T3951]  ? __sigqueue_free+0xf4/0x130
[   70.501395][ T3951]  ? kmem_cache_free+0xca/0x380
[   70.501423][ T3951]  get_signal+0xd33/0xf10
[   70.501882][ T3951]  arch_do_signal_or_restart+0x96/0x480
[   70.501924][ T3951]  irqentry_exit+0x14d/0x610
[   70.502028][ T3951]  ? force_sig+0x89/0xb0
[   70.502441][ T3951]  exc_general_protection+0x155/0x1e0
[   70.502909][ T3951]  asm_exc_general_protection+0x26/0x30
[   70.502932][ T3951] RIP: 0033:0x7f066d16ce61
[   70.502950][ T3951] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   70.502979][ T3951] RSP: 002b:0000200000000340 EFLAGS: 00010217
[   70.503432][ T3951] RAX: 0000000000000000 RBX: 00007f066d3e6090 RCX: 00007f066d16ce59
[   70.503450][ T3951] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000020000
[   70.503467][ T3951] RBP: 00007f066d202e6f R08: 0000200000000500 R09: 0000200000000500
[   70.503484][ T3951] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000
[   70.503520][ T3951] R13: 00007f066d3e6128 R14: 00007f066d3e6090 R15: 00007fff9340df28
[   70.503550][ T3951]  </TASK>
[   70.786658][ T3951] memory: usage 307032kB, limit 307200kB, failcnt 40036
[   70.807938][ T3951] memory+swap: usage 425652kB, limit 9007199254740988kB, failcnt 0
[   70.841064][ T3951] kmem: usage 5136kB, limit 9007199254740988kB, failcnt 0
[   70.862887][ T3951] Memory cgroup stats for /syz2:
[   70.863098][ T3951] cache 309071872
[   70.894050][ T3951] rss 69632
[   70.903098][ T3951] shmem 306900992
[   70.914052][ T3951] mapped_file 1474560
[   70.925956][ T3951] dirty 0
[   70.936231][ T3951] writeback 0
[   70.946889][ T3951] workingset_refault_anon 374
[   70.962207][ T3951] workingset_refault_file 19787
[   70.978836][ T3951] swap 124698624
[   70.987260][ T3951] swapcached 168124416
[   71.003538][ T3951] pgpgin 158838
[   71.023908][ T3951] pgpgout 83358
[   71.067203][ T3951] pgfault 23967
[   71.070870][ T3951] pgmajfault 414
[   71.074574][ T3951] inactive_anon 231702528
[   71.078968][ T3951] active_anon 74506240
[   71.083083][ T3951] inactive_file 262144
[   71.113260][ T3951] active_file 1904640
[   71.132784][ T3951] unevictable 0
[   71.147081][ T3951] hierarchical_memory_limit 314572800
[   71.175126][ T3951] hierarchical_memsw_limit 9223372036854771712
[   71.232500][ T4549] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.239760][ T4549] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.241096][ T3951] total_cache 309071872
[   71.259995][ T4549] bridge0: entered allmulticast mode
[   71.280146][ T4561] bridge_slave_1: left allmulticast mode
[   71.289302][ T4561] bridge_slave_1: left promiscuous mode
[   71.295492][ T4561] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.338248][ T4561] bridge_slave_0: left allmulticast mode
[   71.344008][ T4561] bridge_slave_0: left promiscuous mode
[   71.349824][ T4574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.352895][ T4561] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.363642][ T4574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.366680][   T28] audit: type=1400 audit(1782528565.246:1100): avc:  denied  { shutdown } for  pid=4572 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   71.395637][ T3951] total_rss 69632
[   71.401577][ T3951] total_shmem 306900992
[   71.401615][   T28] audit: type=1400 audit(1782528565.296:1101): avc:  denied  { setattr } for  pid=4572 comm="syz.0.281" name="SCTPv6" dev="sockfs" ino=7946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   71.405968][ T3951] total_mapped_file 1474560
[   71.433299][ T3951] total_dirty 0
[   71.437765][ T3951] total_writeback 0
[   71.441729][ T3951] total_workingset_refault_anon 374
[   71.447248][ T3951] total_workingset_refault_file 19787
[   71.455581][   T28] audit: type=1400 audit(1782528565.296:1102): avc:  denied  { bind } for  pid=4572 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   71.456029][   T40] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.488039][ T3951] total_swap 124698624
[   71.499119][   T40] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.509967][ T3951] total_swapcached 168124416
[   71.515364][   T40] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.536982][   T40] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.573774][ T3951] total_pgpgin 158838
[   71.603136][ T3951] total_pgpgout 83358
[   71.623661][ T3951] total_pgfault 23967
[   71.628296][   T30] bridge_slave_1: left allmulticast mode
[   71.634126][   T30] bridge_slave_1: left promiscuous mode
[   71.657771][ T3951] total_pgmajfault 414
[   71.661990][ T3951] total_inactive_anon 231702528
[   71.666923][ T3951] total_active_anon 74506240
[   71.673126][ T3951] total_inactive_file 262144
[   71.677848][ T3951] total_active_file 1904640
[   71.682389][ T3951] total_unevictable 0
[   71.686666][ T3951] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.137,pid=3948,uid=0
[   71.706321][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.714908][   T30] bridge_slave_0: left allmulticast mode
[   71.720923][   T30] bridge_slave_0: left promiscuous mode
[   71.727280][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.734687][ T3951] Memory cgroup out of memory: Killed process 3948 (syz.2.137) total-vm:90460kB, anon-rss:1232kB, file-rss:37488kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000
[   72.092170][ T3977] syz.2.137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   72.663062][ T4595] loop0: detected capacity change from 0 to 164
[   72.716935][ T3977] CPU: 0 UID: 0 PID: 3977 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   72.717014][ T3977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   72.717031][ T3977] Call Trace:
[   72.717039][ T3977]  <TASK>
[   72.717049][ T3977]  __dump_stack+0x1d/0x30
[   72.717115][ T3977]  dump_stack_lvl+0x95/0xd0
[   72.717141][ T3977]  dump_stack+0x15/0x1b
[   72.717168][ T3977]  dump_header+0x80/0x240
[   72.717190][ T3977]  oom_kill_process+0x295/0x350
[   72.717236][ T3977]  out_of_memory+0x981/0xbc0
[   72.717272][ T3977]  try_charge_memcg+0x621/0xa00
[   72.717363][ T3977]  charge_memcg+0x6d/0x120
[   72.717481][ T3977]  __mem_cgroup_charge+0x28/0xb0
[   72.717522][ T3977]  shmem_get_folio_gfp+0x49f/0xd90
[   72.717553][ T3977]  shmem_write_begin+0xfc/0x1f0
[   72.717579][ T3977]  generic_perform_write+0x186/0x490
[   72.717605][ T3977]  shmem_file_write_iter+0xc5/0xf0
[   72.717666][ T3977]  __kernel_write_iter+0x30f/0x590
[   72.717724][ T3977]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   72.717765][ T3977]  dump_user_range+0xa73/0xd00
[   72.717880][ T3977]  elf_core_dump+0x21c0/0x2340
[   72.717935][ T3977]  ? 0xffffffffff600000
[   72.717971][ T3977]  coredump_write+0xaf9/0xdd0
[   72.718009][ T3977]  vfs_coredump+0x2770/0x3290
[   72.718067][ T3977]  ? __memcg_slab_free_hook+0x75/0x2c0
[   72.718112][ T3977]  ? __sigqueue_free+0xf4/0x130
[   72.718136][ T3977]  ? proc_coredump_connector+0x160/0x2b0
[   72.718226][ T3977]  ? __sigqueue_free+0xf4/0x130
[   72.718257][ T3977]  ? kmem_cache_free+0xca/0x380
[   72.718288][ T3977]  get_signal+0xd33/0xf10
[   72.718344][ T3977]  arch_do_signal_or_restart+0x96/0x480
[   72.718385][ T3977]  irqentry_exit+0x14d/0x610
[   72.718415][ T3977]  ? force_sig+0x89/0xb0
[   72.718549][ T3977]  exc_general_protection+0x155/0x1e0
[   72.718588][ T3977]  asm_exc_general_protection+0x26/0x30
[   72.718614][ T3977] RIP: 0033:0x7f066d16ce61
[   72.718686][ T3977] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   72.718708][ T3977] RSP: 002b:0000200000000340 EFLAGS: 00010217
[   72.718782][ T3977] RAX: 0000000000000000 RBX: 00007f066d3e6090 RCX: 00007f066d16ce59
[   72.718795][ T3977] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000020000
[   72.718825][ T3977] RBP: 00007f066d202e6f R08: 0000200000000500 R09: 0000200000000500
[   72.718841][ T3977] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000
[   72.718854][ T3977] R13: 00007f066d3e6128 R14: 00007f066d3e6090 R15: 00007fff9340df28
[   72.718873][ T3977]  </TASK>
[   73.011070][ T3977] memory: usage 307200kB, limit 307200kB, failcnt 42884
[   73.090664][ T3977] memory+swap: usage 432000kB, limit 9007199254740988kB, failcnt 0
[   73.112259][ T3977] kmem: usage 5036kB, limit 9007199254740988kB, failcnt 0
[   73.127656][ T3977] Memory cgroup stats for /syz2:
[   73.127975][ T3977] cache 309346304
[   73.156323][ T3977] rss 40960
[   73.165870][ T3977] shmem 309342208
[   73.179560][ T3977] mapped_file 0
[   73.184505][ T3977] dirty 0
[   73.189439][ T3977] writeback 0
[   73.192923][ T3977] workingset_refault_anon 374
[   73.209746][ T3977] workingset_refault_file 20094
[   73.227351][ T3977] swap 127795200
[   73.238672][ T3977] swapcached 172195840
[   73.254197][ T3977] pgpgin 163326
[   73.269764][ T3977] pgpgout 87792
[   73.287866][ T3977] pgfault 24225
[   73.302859][ T3977] pgmajfault 422
[   73.319559][ T3977] inactive_anon 187826176
[   73.374227][ T3977] active_anon 121556992
[   73.426396][ T4595] iso9660: Corrupted directory entry in block 2 of inode 1792
[   73.453818][ T3977] inactive_file 0
[   73.488030][ T3977] active_file 4096
[   73.524451][ T3977] unevictable 0
[   73.579555][ T3977] hierarchical_memory_limit 314572800
[   73.618841][ T3977] hierarchical_memsw_limit 9223372036854771712
[   73.634963][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.659368][ T3948] syz.2.137 (3948) used greatest stack depth: 7552 bytes left
[   73.667382][ T3977] total_cache 309346304
[   73.673988][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.690808][ T3977] total_rss 40960
[   73.700926][ T3977] total_shmem 309342208
[   73.712754][   T30] bond0 (unregistering): Released all slaves
[   73.731243][ T3977] total_mapped_file 0
[   73.738308][ T3977] total_dirty 0
[   73.746467][ T3977] total_writeback 0
[   73.760241][ T3977] total_workingset_refault_anon 374
[   73.784527][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6
[   73.794013][ T3977] total_workingset_refault_file 20094
[   73.812389][ T3977] total_swap 127795200
[   73.827369][ T3977] total_swapcached 172195840
[   73.840314][ T3977] total_pgpgin 163326
[   73.853930][ T3977] total_pgpgout 87792
[   73.885836][ T3977] total_pgfault 24225
[   73.902099][ T3977] total_pgmajfault 422
[   73.916372][ T3977] total_inactive_anon 187826176
[   73.932042][ T3977] total_active_anon 121556992
[   73.944422][ T3977] total_inactive_file 0
[   73.961424][ T3977] total_active_file 4096
[   73.978429][ T3977] total_unevictable 0
[   73.992748][ T3977] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.137,pid=3969,uid=0
[   74.028876][ T3977] Memory cgroup out of memory: Killed process 3969 (syz.2.137) total-vm:90460kB, anon-rss:1232kB, file-rss:26820kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000
[   74.172759][   T28] kauditd_printk_skb: 3 callbacks suppressed
[   74.172795][   T28] audit: type=1400 audit(1782528568.076:1106): avc:  denied  { write } for  pid=4609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.269160][   T28] audit: type=1400 audit(1782528568.166:1107): avc:  denied  { write } for  pid=4625 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.315443][ T4315] veth0_vlan: entered promiscuous mode
[   74.335582][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5
[   74.345131][ T4315] veth1_vlan: entered promiscuous mode
[   74.390805][ T4315] veth0_macvtap: entered promiscuous mode
[   74.405049][ T4315] veth1_macvtap: entered promiscuous mode
[   74.453249][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.476442][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.493224][   T96] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.537614][ T4640] loop0: detected capacity change from 0 to 512
[   74.567051][ T4640] EXT4-fs: Ignoring removed oldalloc option
[   74.578151][ T4640] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   74.599108][ T4640] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.288: invalid indirect mapped block 83886080 (level 1)
[   74.672163][ T4640] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   74.672384][ T4640] EXT4-fs (loop0): Remounting filesystem read-only
[   74.681618][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   74.681645][    C1] EXT4-fs (loop0): initial error at time 1782528568: ext4_free_branches:1023: inode 16
[   74.681684][    C1] EXT4-fs (loop0): last error at time 1782528568: ext4_free_branches:1023: inode 16
[   74.751829][   T28] audit: type=1400 audit(1782528568.656:1108): avc:  denied  { write } for  pid=4636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.786970][ T4640] EXT4-fs (loop0): 1 orphan inode deleted
[   74.792801][ T4640] EXT4-fs (loop0): 1 truncate cleaned up
[   74.798929][ T4640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.824010][   T28] audit: type=1400 audit(1782528568.726:1109): avc:  denied  { write } for  pid=4656 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.871627][   T28] audit: type=1400 audit(1782528568.776:1110): avc:  denied  { setopt } for  pid=4657 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   74.902958][   T30] hsr_slave_0: left promiscuous mode
[   74.936885][   T30] hsr_slave_1: left promiscuous mode
[   74.949202][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.957441][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.967326][   T28] audit: type=1400 audit(1782528568.876:1111): avc:  denied  { ioctl } for  pid=4657 comm="syz.1.289" path="socket:[8144]" dev="sockfs" ino=8144 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   74.973265][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.019988][ T4662] netlink: 324 bytes leftover after parsing attributes in process `syz.0.290'.
[   75.064990][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.080456][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.106435][ T4665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'.
[   75.176461][   T30] veth1_macvtap: left promiscuous mode
[   75.182109][   T30] veth0_macvtap: left promiscuous mode
[   75.188039][   T30] veth1_vlan: left promiscuous mode
[   75.193369][   T30] veth0_vlan: left promiscuous mode
[   75.211927][   T28] audit: type=1400 audit(1782528569.116:1112): avc:  denied  { create } for  pid=4672 comm="syz.5.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   75.271251][ T3981] syz.2.137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   75.281031][ T3981] CPU: 1 UID: 0 PID: 3981 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   75.281122][ T3981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   75.281138][ T3981] Call Trace:
[   75.281146][ T3981]  <TASK>
[   75.281155][ T3981]  __dump_stack+0x1d/0x30
[   75.281183][ T3981]  dump_stack_lvl+0x95/0xd0
[   75.281208][ T3981]  dump_stack+0x15/0x1b
[   75.281249][ T3981]  dump_header+0x80/0x240
[   75.281274][ T3981]  oom_kill_process+0x295/0x350
[   75.281352][ T3981]  out_of_memory+0x981/0xbc0
[   75.281422][ T3981]  try_charge_memcg+0x621/0xa00
[   75.281462][ T3981]  charge_memcg+0x6d/0x120
[   75.281503][ T3981]  __mem_cgroup_charge+0x28/0xb0
[   75.281586][ T3981]  shmem_get_folio_gfp+0x49f/0xd90
[   75.281617][ T3981]  shmem_write_begin+0xfc/0x1f0
[   75.281666][ T3981]  generic_perform_write+0x186/0x490
[   75.281688][ T3981]  ? current_time+0x18d/0x250
[   75.281723][ T3981]  shmem_file_write_iter+0xc5/0xf0
[   75.281809][ T3981]  __kernel_write_iter+0x30f/0x590
[   75.281848][ T3981]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   75.281881][ T3981]  dump_user_range+0xa73/0xd00
[   75.282006][ T3981]  elf_core_dump+0x21c0/0x2340
[   75.282038][ T3981]  ? 0xffffffffff600000
[   75.282104][ T3981]  coredump_write+0xaf9/0xdd0
[   75.282145][ T3981]  vfs_coredump+0x2770/0x3290
[   75.282191][ T3981]  ? __memcg_slab_free_hook+0x75/0x2c0
[   75.282224][ T3981]  ? __sigqueue_free+0xf4/0x130
[   75.282259][ T3981]  ? proc_coredump_connector+0x160/0x2b0
[   75.282285][ T3981]  ? __sigqueue_free+0xf4/0x130
[   75.282308][ T3981]  ? kmem_cache_free+0xca/0x380
[   75.282367][ T3981]  get_signal+0xd33/0xf10
[   75.282411][ T3981]  arch_do_signal_or_restart+0x96/0x480
[   75.282445][ T3981]  irqentry_exit+0x14d/0x610
[   75.282470][ T3981]  ? force_sig+0x89/0xb0
[   75.282643][ T3981]  exc_general_protection+0x155/0x1e0
[   75.282683][ T3981]  asm_exc_general_protection+0x26/0x30
[   75.282757][ T3981] RIP: 0033:0x7f066d16ce61
[   75.282775][ T3981] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   75.282794][ T3981] RSP: 002b:0000200000000340 EFLAGS: 00010217
[   75.282810][ T3981] RAX: 0000000000000000 RBX: 00007f066d3e6090 RCX: 00007f066d16ce59
[   75.282824][ T3981] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000020000
[   75.282838][ T3981] RBP: 00007f066d202e6f R08: 0000200000000500 R09: 0000200000000500
[   75.282923][ T3981] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000
[   75.282936][ T3981] R13: 00007f066d3e6128 R14: 00007f066d3e6090 R15: 00007fff9340df28
[   75.283038][ T3981]  </TASK>
[   75.283046][ T3981] memory: usage 306952kB, limit 307200kB, failcnt 45032
[   75.359028][   T28] audit: type=1400 audit(1782528569.266:1113): avc:  denied  { create } for  pid=4648 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   75.371725][ T3981] memory+swap: usage 431736kB, limit 9007199254740988kB, failcnt 0
[   75.461929][   T28] audit: type=1400 audit(1782528569.366:1114): avc:  denied  { write } for  pid=4648 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   75.535999][ T4676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'.
[   75.619045][ T3981] kmem: usage 4932kB, limit 9007199254740988kB, failcnt 0
[   75.636866][ T3981] Memory cgroup stats for /syz2:
[   75.637172][ T3981] cache 308895744
[   75.711836][ T4680] loop5: detected capacity change from 0 to 128
[   75.718953][ T4680] msdos: Bad value for 'gid'
[   75.723592][ T4680] msdos: Bad value for 'gid'
[   75.906251][ T3981] rss 200704
[   75.909625][ T3981] shmem 308789248
[   75.940145][ T3981] mapped_file 106496
[   76.052850][ T3981] dirty 0
[   76.172344][ T3981] writeback 0
[   76.225466][ T3981] workingset_refault_anon 386
[   76.230305][ T3981] workingset_refault_file 20573
[   76.235233][ T3981] swap 127467520
[   76.238846][ T3981] swapcached 185470976
[   76.243012][ T3981] pgpgin 174712
[   76.246573][ T3981] pgpgout 99196
[   76.250053][ T3981] pgfault 25013
[   76.253529][ T3981] pgmajfault 430
[   76.257123][ T3981] inactive_anon 241930240
[   76.261470][ T3981] active_anon 66830336
[   76.265631][ T3981] inactive_file 0
[   76.269377][ T3981] active_file 0
[   76.272867][ T3981] unevictable 0
[   76.276385][ T3981] hierarchical_memory_limit 314572800
[   76.281774][ T3981] hierarchical_memsw_limit 9223372036854771712
[   76.288115][ T3981] total_cache 308895744
[   76.313746][ T3981] total_rss 200704
[   76.340971][ T3981] total_shmem 308789248
[   76.346526][ T3981] total_mapped_file 106496
[   76.351072][ T3981] total_dirty 0
[   76.353138][   T30] team0 (unregistering): Port device team_slave_1 removed
[   76.354667][ T3981] total_writeback 0
[   76.366090][ T3981] total_workingset_refault_anon 386
[   76.373071][ T3981] total_workingset_refault_file 20573
[   76.385961][ T3981] total_swap 127467520
[   76.390509][ T3981] total_swapcached 185470976
[   76.395148][ T3981] total_pgpgin 174712
[   76.399556][ T3981] total_pgpgout 99196
[   76.403751][ T3981] total_pgfault 25013
[   76.417504][ T3981] total_pgmajfault 430
[   76.433575][   T30] team0 (unregistering): Port device team_slave_0 removed
[   76.467607][ T3981] total_inactive_anon 241930240
[   76.472528][ T3981] total_active_anon 66830336
[   76.477779][   T96] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.486279][ T3981] total_inactive_file 0
[   76.487692][   T96] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.518847][ T3981] total_active_file 0
[   76.529870][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7
[   76.600976][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'.
[   76.623507][ T4697] netlink: 112 bytes leftover after parsing attributes in process `syz.0.296'.
[   76.683615][ T3981] total_unevictable 0
[   76.688256][ T3981] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.137,pid=3947,uid=0
[   76.711083][ T3981] Memory cgroup out of memory: Killed process 3947 (syz.2.137) total-vm:90460kB, anon-rss:1232kB, file-rss:29892kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000
[   76.787239][   T28] audit: type=1400 audit(1782528570.696:1115): avc:  denied  { write } for  pid=4701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   76.822466][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.294'.
[   76.863231][   T96] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.968169][ T4718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.982962][ T4718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.009479][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8
[   77.048701][ T4724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.060232][ T4724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.089846][ T3981] syz.2.137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   77.185192][ T3981] CPU: 1 UID: 0 PID: 3981 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   77.185227][ T3981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   77.185275][ T3981] Call Trace:
[   77.185282][ T3981]  <TASK>
[   77.185290][ T3981]  __dump_stack+0x1d/0x30
[   77.185326][ T3981]  dump_stack_lvl+0x95/0xd0
[   77.185362][ T3981]  dump_stack+0x15/0x1b
[   77.185382][ T3981]  dump_header+0x80/0x240
[   77.185404][ T3981]  oom_kill_process+0x295/0x350
[   77.185446][ T3981]  out_of_memory+0x981/0xbc0
[   77.185588][ T3981]  try_charge_memcg+0x621/0xa00
[   77.185637][ T3981]  charge_memcg+0x6d/0x120
[   77.185678][ T3981]  __mem_cgroup_charge+0x28/0xb0
[   77.185736][ T3981]  shmem_get_folio_gfp+0x49f/0xd90
[   77.185766][ T3981]  shmem_write_begin+0xfc/0x1f0
[   77.185791][ T3981]  generic_perform_write+0x186/0x490
[   77.185825][ T3981]  shmem_file_write_iter+0xc5/0xf0
[   77.185914][ T3981]  __kernel_write_iter+0x30f/0x590
[   77.186033][ T3981]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   77.186074][ T3981]  dump_user_range+0xa73/0xd00
[   77.186130][ T3981]  elf_core_dump+0x21c0/0x2340
[   77.186180][ T3981]  ? 0xffffffffff600000
[   77.186279][ T3981]  coredump_write+0xaf9/0xdd0
[   77.186350][ T3981]  vfs_coredump+0x2770/0x3290
[   77.186425][ T3981]  ? __memcg_slab_free_hook+0x75/0x2c0
[   77.186466][ T3981]  ? __sigqueue_free+0xf4/0x130
[   77.186490][ T3981]  ? proc_coredump_connector+0x160/0x2b0
[   77.186515][ T3981]  ? __sigqueue_free+0xf4/0x130
[   77.186578][ T3981]  ? kmem_cache_free+0xca/0x380
[   77.186644][ T3981]  get_signal+0xd33/0xf10
[   77.186688][ T3981]  arch_do_signal_or_restart+0x96/0x480
[   77.186797][ T3981]  irqentry_exit+0x14d/0x610
[   77.186825][ T3981]  ? force_sig+0x89/0xb0
[   77.186987][ T3981]  exc_general_protection+0x155/0x1e0
[   77.187097][ T3981]  asm_exc_general_protection+0x26/0x30
[   77.187126][ T3981] RIP: 0033:0x7f066d16ce61
[   77.187143][ T3981] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   77.187162][ T3981] RSP: 002b:0000200000000340 EFLAGS: 00010217
[   77.187241][ T3981] RAX: 0000000000000000 RBX: 00007f066d3e6090 RCX: 00007f066d16ce59
[   77.187259][ T3981] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000020000
[   77.187276][ T3981] RBP: 00007f066d202e6f R08: 0000200000000500 R09: 0000200000000500
[   77.187290][ T3981] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000
[   77.187380][ T3981] R13: 00007f066d3e6128 R14: 00007f066d3e6090 R15: 00007fff9340df28
[   77.187400][ T3981]  </TASK>
[   77.441875][ T3981] memory: usage 307200kB, limit 307200kB, failcnt 47620
[   77.449149][ T3981] memory+swap: usage 431952kB, limit 9007199254740988kB, failcnt 0
[   77.457268][ T3981] kmem: usage 5056kB, limit 9007199254740988kB, failcnt 0
[   77.464741][ T3981] Memory cgroup stats for /syz2:
[   77.465056][ T3981] cache 308932608
[   77.474259][ T3981] rss 413696
[   77.479207][ T3981] shmem 308932608
[   77.483043][ T3981] mapped_file 0
[   77.486632][ T3981] dirty 0
[   77.489900][ T3981] writeback 0
[   77.493270][ T3981] workingset_refault_anon 399
[   77.500408][ T3981] workingset_refault_file 20574
[   77.549165][ T3981] swap 127385600
[   77.562412][ T3981] swapcached 192454656
[   77.613418][ T3981] pgpgin 180672
[   77.645826][ T3981] pgpgout 105137
[   77.657914][ T3981] pgfault 25465
[   77.670755][ T3981] pgmajfault 443
[   77.684641][ T3981] inactive_anon 245714944
[   77.692572][ T3981] active_anon 63676416
[   77.697096][ T3981] inactive_file 0
[   77.701325][ T3981] active_file 0
[   77.717301][ T3981] unevictable 0
[   77.729784][ T3981] hierarchical_memory_limit 314572800
[   77.752125][ T3981] hierarchical_memsw_limit 9223372036854771712
[   77.803783][ T3981] total_cache 308932608
[   77.828542][ T3981] total_rss 413696
[   77.849363][ T3981] total_shmem 308932608
[   77.866358][ T3981] total_mapped_file 0
[   77.878913][ T3981] total_dirty 0
[   77.886328][ T3981] total_writeback 0
[   77.896304][ T3981] total_workingset_refault_anon 399
[   77.901637][ T3981] total_workingset_refault_file 20574
[   77.918100][ T3981] total_swap 127385600
[   77.925469][ T3981] total_swapcached 192454656
[   77.935545][ T3981] total_pgpgin 180672
[   77.946251][ T3981] total_pgpgout 105137
[   77.950369][ T3981] total_pgfault 25465
[   77.954366][ T3981] total_pgmajfault 443
[   77.970123][ T3981] total_inactive_anon 245714944
[   77.975074][ T3981] total_active_anon 63676416
[   77.982799][ T3981] total_inactive_file 0
[   78.003283][ T3981] total_active_file 0
[   78.007468][ T3981] total_unevictable 0
[   78.011489][ T3981] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.287,pid=4648,uid=0
[   78.049266][ T3981] Memory cgroup out of memory: Killed process 4681 (syz.2.287) total-vm:88700kB, anon-rss:1432kB, file-rss:30936kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[   78.066612][ T4735] loop6: detected capacity change from 0 to 512
[   78.845987][ T4754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.305'.
[   79.236237][ T3963] ==================================================================
[   79.244384][ T3963] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64
[   79.254313][ T3963] 
[   79.256680][ T3963] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 1:
[   79.264776][ T3963]  tick_do_update_jiffies64+0x113/0x1c0
[   79.270361][ T3963]  tick_nohz_handler+0x88/0x380
[   79.275246][ T3963]  __hrtimer_run_queues+0x1f8/0x510
[   79.280483][ T3963]  hrtimer_interrupt+0x257/0x810
[   79.285455][ T3963]  __sysvec_apic_timer_interrupt+0x5f/0x1c0
[   79.291382][ T3963]  sysvec_apic_timer_interrupt+0x6f/0x80
[   79.297042][ T3963]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   79.303056][ T3963]  __sanitizer_cov_trace_const_cmp8+0x8/0x90
[   79.309080][ T3963]  lruvec_lru_size+0x86/0x130
[   79.313785][ T3963]  count_shadow_nodes+0x16d/0x250
[   79.318837][ T3963]  do_shrink_slab+0x61/0x650
[   79.323452][ T3963]  shrink_slab+0x53b/0x8e0
[   79.327889][ T3963]  shrink_node+0x6d9/0x20f0
[   79.332427][ T3963]  do_try_to_free_pages+0x408/0xc90
[   79.337661][ T3963]  try_to_free_mem_cgroup_pages+0x201/0x420
[   79.343590][ T3963]  try_charge_memcg+0x375/0xa00
[   79.348471][ T3963]  __obj_cgroup_charge+0x105/0x230
[   79.353619][ T3963]  __memcg_slab_post_alloc_hook+0x492/0x860
[   79.359544][ T3963]  kmem_cache_alloc_noprof+0x1f1/0x3c0
[   79.365029][ T3963]  alloc_empty_file+0x70/0x1e0
[   79.369825][ T3963]  path_openat+0x54/0x2000
[   79.374268][ T3963]  do_file_open+0x16c/0x290
[   79.378814][ T3963]  do_sys_openat2+0xa0/0x130
[   79.383433][ T3963]  __x64_sys_openat+0xf2/0x120
[   79.388228][ T3963]  x64_sys_call+0x1e39/0x3020
[   79.392939][ T3963]  do_syscall_64+0x136/0x3c0
[   79.397990][ T3963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.403946][ T3963] 
[   79.406285][ T3963] read to 0xffffffff86c07a00 of 8 bytes by task 3963 on cpu 0:
[   79.413859][ T3963]  mem_cgroup_flush_stats_ratelimited+0x29/0x50
[   79.420132][ T3963]  count_shadow_nodes+0x6a/0x250
[   79.425097][ T3963]  do_shrink_slab+0x61/0x650
[   79.429706][ T3963]  shrink_slab+0x53b/0x8e0
[   79.434148][ T3963]  shrink_node+0x6d9/0x20f0
[   79.438777][ T3963]  do_try_to_free_pages+0x408/0xc90
[   79.444004][ T3963]  try_to_free_mem_cgroup_pages+0x201/0x420
[   79.449932][ T3963]  try_charge_memcg+0x375/0xa00
[   79.454818][ T3963]  charge_memcg+0x6d/0x120
[   79.459269][ T3963]  __mem_cgroup_charge+0x28/0xb0
[   79.464236][ T3963]  shmem_get_folio_gfp+0x49f/0xd90
[   79.469375][ T3963]  shmem_write_begin+0xfc/0x1f0
[   79.474266][ T3963]  generic_perform_write+0x186/0x490
[   79.479609][ T3963]  shmem_file_write_iter+0xc5/0xf0
[   79.484755][ T3963]  __kernel_write_iter+0x30f/0x590
[   79.489902][ T3963]  dump_user_range+0xa73/0xd00
[   79.494700][ T3963]  elf_core_dump+0x21c0/0x2340
[   79.499571][ T3963]  coredump_write+0xaf9/0xdd0
[   79.504289][ T3963]  vfs_coredump+0x2770/0x3290
[   79.509002][ T3963]  get_signal+0xd33/0xf10
[   79.513370][ T3963]  arch_do_signal_or_restart+0x96/0x480
[   79.518949][ T3963]  irqentry_exit+0x14d/0x610
[   79.523566][ T3963]  exc_general_protection+0x155/0x1e0
[   79.528970][ T3963]  asm_exc_general_protection+0x26/0x30
[   79.534546][ T3963] 
[   79.536892][ T3963] value changed: 0x00000000ffffa987 -> 0x00000000ffffa988
[   79.544020][ T3963] 
[   79.546360][ T3963] Reported by Kernel Concurrency Sanitizer on:
[   79.552528][ T3963] CPU: 0 UID: 0 PID: 3963 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   79.561836][ T3963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   79.571996][ T3963] ==================================================================
[   79.802242][ T3973] syz.2.137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   79.846209][ T3973] CPU: 0 UID: 0 PID: 3973 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   79.846284][ T3973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   79.846299][ T3973] Call Trace:
[   79.846306][ T3973]  <TASK>
[   79.846315][ T3973]  __dump_stack+0x1d/0x30
[   79.846341][ T3973]  dump_stack_lvl+0x95/0xd0
[   79.846364][ T3973]  dump_stack+0x15/0x1b
[   79.846385][ T3973]  dump_header+0x80/0x240
[   79.846424][ T3973]  oom_kill_process+0x295/0x350
[   79.846460][ T3973]  out_of_memory+0x981/0xbc0
[   79.846507][ T3973]  try_charge_memcg+0x621/0xa00
[   79.846557][ T3973]  charge_memcg+0x6d/0x120
[   79.846591][ T3973]  __mem_cgroup_charge+0x28/0xb0
[   79.846655][ T3973]  shmem_get_folio_gfp+0x49f/0xd90
[   79.846750][ T3973]  shmem_write_begin+0xfc/0x1f0
[   79.846785][ T3973]  generic_perform_write+0x186/0x490
[   79.846817][ T3973]  shmem_file_write_iter+0xc5/0xf0
[   79.846869][ T3973]  __kernel_write_iter+0x30f/0x590
[   79.846934][ T3973]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   79.847006][ T3973]  dump_user_range+0xa73/0xd00
[   79.847105][ T3973]  elf_core_dump+0x21c0/0x2340
[   79.847137][ T3973]  ? 0xffffffffff600000
[   79.847172][ T3973]  coredump_write+0xaf9/0xdd0
[   79.847263][ T3973]  vfs_coredump+0x2770/0x3290
[   79.847362][ T3973]  ? __memcg_slab_free_hook+0x75/0x2c0
[   79.847422][ T3973]  ? __sigqueue_free+0xf4/0x130
[   79.847449][ T3973]  ? proc_coredump_connector+0x160/0x2b0
[   79.847525][ T3973]  ? __sigqueue_free+0xf4/0x130
[   79.847548][ T3973]  ? kmem_cache_free+0xca/0x380
[   79.847576][ T3973]  get_signal+0xd33/0xf10
[   79.847687][ T3973]  arch_do_signal_or_restart+0x96/0x480
[   79.847718][ T3973]  irqentry_exit+0x14d/0x610
[   79.847763][ T3973]  ? force_sig+0x89/0xb0
[   79.847872][ T3973]  exc_general_protection+0x155/0x1e0
[   79.847909][ T3973]  asm_exc_general_protection+0x26/0x30
[   79.847933][ T3973] RIP: 0033:0x7f066d16ce61
[   79.847953][ T3973] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   79.848041][ T3973] RSP: 002b:0000200000000340 EFLAGS: 00010217
[   79.848100][ T3973] RAX: 0000000000000000 RBX: 00007f066d3e6090 RCX: 00007f066d16ce59
[   79.848117][ T3973] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000020000
[   79.848136][ T3973] RBP: 00007f066d202e6f R08: 0000200000000500 R09: 0000200000000500
[   79.848153][ T3973] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000
[   79.848166][ T3973] R13: 00007f066d3e6128 R14: 00007f066d3e6090 R15: 00007fff9340df28
[   79.848185][ T3973]  </TASK>
[   79.848222][ T3973] memory: usage 307200kB, limit 307200kB, failcnt 50262
[   80.106364][ T3973] memory+swap: usage 432120kB, limit 9007199254740988kB, failcnt 0
[   80.114418][ T3973] kmem: usage 4784kB, limit 9007199254740988kB, failcnt 0
[   80.121728][ T3973] Memory cgroup stats for /syz2:
[   80.121954][ T3973] cache 309514240
[   80.130804][ T3973] rss 98304
[   80.133922][ T3973] shmem 309510144
[   80.137600][ T3973] mapped_file 0
[   80.141151][ T3973] dirty 0
[   80.144112][ T3973] writeback 0
[   80.147535][ T3973] workingset_refault_anon 399
[   80.152277][ T3973] workingset_refault_file 20581
[   80.157305][ T3973] swap 127918080
[   80.160878][ T3973] swapcached 203649024
[   80.165066][ T3973] pgpgin 188356
[   80.168621][ T3973] pgpgout 112756
[   80.186912][ T3973] pgfault 25921
[   80.190564][ T3973] pgmajfault 445
[   80.194253][ T3973] inactive_anon 135348224
[   80.207077][ T3973] active_anon 174305280
[   80.214028][ T3973] inactive_file 0
[   80.218306][ T3973] active_file 4096
[   80.223066][ T3973] unevictable 0
[   80.226769][ T3973] hierarchical_memory_limit 314572800
[   80.232288][ T3973] hierarchical_memsw_limit 9223372036854771712
[   80.246285][ T3973] total_cache 309514240
[   80.252881][ T3973] total_rss 98304
[   80.256812][ T3973] total_shmem 309510144
[   80.261995][ T3973] total_mapped_file 0
[   80.266041][ T3973] total_dirty 0
[   80.269853][ T3973] total_writeback 0
[   80.277521][ T3973] total_workingset_refault_anon 399
[   80.288252][ T3973] total_workingset_refault_file 20581
[   80.298181][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   80.298195][   T28] audit: type=1400 audit(1782528574.206:1123): avc:  denied  { write } for  pid=4762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   80.301499][ T3973] total_swap 127918080
[   80.341487][   T28] audit: type=1400 audit(1782528574.246:1124): avc:  denied  { write } for  pid=4773 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   80.353355][ T3973] total_swapcached 203649024
[   80.382910][ T3973] total_pgpgin 188356
[   80.388253][ T3973] total_pgpgout 112756
[   80.392367][ T3973] total_pgfault 25921
[   80.396571][ T3973] total_pgmajfault 445
[   80.400668][ T3973] total_inactive_anon 135348224
[   80.405555][ T3973] total_active_anon 174305280
[   80.410707][ T3973] total_inactive_file 0
[   80.414895][ T3973] total_active_file 4096
[   80.419457][ T3973] total_unevictable 0
[   80.423581][ T3973] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.137,pid=3979,uid=0
[   80.439544][ T3973] Memory cgroup out of memory: Killed process 3979 (syz.2.137) total-vm:90460kB, anon-rss:1232kB, file-rss:36836kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000
[   80.458465][ T3970] syz.2.137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   80.477150][ T3970] CPU: 0 UID: 0 PID: 3970 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   80.477177][ T3970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   80.477194][ T3970] Call Trace:
[   80.477201][ T3970]  <TASK>
[   80.477211][ T3970]  __dump_stack+0x1d/0x30
[   80.477299][ T3970]  dump_stack_lvl+0x95/0xd0
[   80.477321][ T3970]  dump_stack+0x15/0x1b
[   80.477339][ T3970]  dump_header+0x80/0x240
[   80.477361][ T3970]  oom_kill_process+0x295/0x350
[   80.477494][ T3970]  out_of_memory+0x981/0xbc0
[   80.477606][ T3970]  try_charge_memcg+0x621/0xa00
[   80.477658][ T3970]  charge_memcg+0x6d/0x120
[   80.477688][ T3970]  __mem_cgroup_charge+0x28/0xb0
[   80.477721][ T3970]  shmem_get_folio_gfp+0x49f/0xd90
[   80.477822][ T3970]  shmem_write_begin+0xfc/0x1f0
[   80.477855][ T3970]  generic_perform_write+0x186/0x490
[   80.477878][ T3970]  ? current_time+0x18d/0x250
[   80.477910][ T3970]  shmem_file_write_iter+0xc5/0xf0
[   80.477990][ T3970]  __kernel_write_iter+0x30f/0x590
[   80.478033][ T3970]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   80.478075][ T3970]  dump_user_range+0xa73/0xd00
[   80.478133][ T3970]  elf_core_dump+0x21c0/0x2340
[   80.478156][ T3970]  ? 0xffffffffff600000
[   80.478188][ T3970]  coredump_write+0xaf9/0xdd0
[   80.478348][ T3970]  vfs_coredump+0x2770/0x3290
[   80.478389][ T3970]  ? __memcg_slab_free_hook+0x75/0x2c0
[   80.478430][ T3970]  ? __sigqueue_free+0xf4/0x130
[   80.478499][ T3970]  ? proc_coredump_connector+0x160/0x2b0
[   80.478569][ T3970]  ? __sigqueue_free+0xf4/0x130
[   80.478591][ T3970]  ? kmem_cache_free+0xca/0x380
[   80.478626][ T3970]  get_signal+0xd33/0xf10
[   80.478718][ T3970]  arch_do_signal_or_restart+0x96/0x480
[   80.478756][ T3970]  irqentry_exit+0x14d/0x610
[   80.478781][ T3970]  ? force_sig+0x89/0xb0
[   80.478809][ T3970]  exc_general_protection+0x155/0x1e0
[   80.478852][ T3970]  asm_exc_general_protection+0x26/0x30
[   80.478879][ T3970] RIP: 0033:0x7f066d16ce61
[   80.478899][ T3970] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   80.478921][ T3970] RSP: 002b:0000200000000340 EFLAGS: 00010217
[   80.479022][ T3970] RAX: 0000000000000000 RBX: 00007f066d3e6090 RCX: 00007f066d16ce59
[   80.479040][ T3970] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000020000
[   80.479054][ T3970] RBP: 00007f066d202e6f R08: 0000200000000500 R09: 0000200000000500
[   80.479067][ T3970] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000
[   80.479080][ T3970] R13: 00007f066d3e6128 R14: 00007f066d3e6090 R15: 00007fff9340df28
[   80.479101][ T3970]  </TASK>
[   80.480693][ T3970] memory: usage 307200kB, limit 307200kB, failcnt 50366
[   80.744598][ T3970] memory+swap: usage 431548kB, limit 9007199254740988kB, failcnt 0
[   80.752717][ T3970] kmem: usage 4624kB, limit 9007199254740988kB, failcnt 0
[   80.760205][ T3970] Memory cgroup stats for /syz2:
[   80.760412][ T3970] cache 308412416
[   80.769349][ T3970] rss 98304
[   80.772518][ T3970] shmem 308408320
[   80.776717][ T3970] mapped_file 0
[   80.780264][ T3970] dirty 0
[   80.783264][ T3970] writeback 0
[   80.786931][ T3970] workingset_refault_anon 399
[   80.791688][ T3970] workingset_refault_file 20581
[   80.796845][ T3970] swap 125030400
[   80.800488][ T3970] swapcached 203649024
[   80.804995][ T3970] pgpgin 188399
[   80.808861][ T3970] pgpgout 113046
[   80.812475][ T3970] pgfault 25924
[   80.815996][ T3970] pgmajfault 445
[   80.819938][ T3970] inactive_anon 135319552
[   80.824320][ T3970] active_anon 173322240
[   80.828682][ T3970] inactive_file 0
[   80.832374][ T3970] active_file 4096
[   80.836476][ T3970] unevictable 0
[   80.840053][ T3970] hierarchical_memory_limit 314572800
[   80.845545][ T3970] hierarchical_memsw_limit 9223372036854771712
[   80.854412][ T3970] total_cache 308412416
[   80.858739][ T3970] total_rss 98304
[   80.862441][ T3970] total_shmem 308408320
[   80.866817][ T3970] total_mapped_file 0
[   80.870931][ T3970] total_dirty 0
[   80.874448][ T3970] total_writeback 0
[   80.878546][ T3970] total_workingset_refault_anon 399
[   80.883801][ T3970] total_workingset_refault_file 20581
[   80.889482][ T3970] total_swap 125030400
[   80.893605][ T3970] total_swapcached 203649024
[   80.898540][ T3970] total_pgpgin 188399
[   80.900617][ T3979] syz.2.137 (3979) used greatest stack depth: 7240 bytes left
[   80.902642][ T3970] total_pgpgout 113046
[   80.914126][ T3970] total_pgfault 25924
[   80.918174][ T3970] total_pgmajfault 445
[   80.922255][ T3970] total_inactive_anon 135319552
[   80.927241][ T3970] total_active_anon 173322240
[   80.931994][ T3970] total_inactive_file 0
[   80.936223][ T3970] total_active_file 4096
[   80.940518][ T3970] total_unevictable 0
[   80.944548][ T3970] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.137,pid=3985,uid=0
[   80.959165][ T3970] Memory cgroup out of memory: Killed process 3985 (syz.2.137) total-vm:90460kB, anon-rss:1232kB, file-rss:33000kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000
[   81.551148][ T3971] syz.2.137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   81.580092][ T3971] CPU: 0 UID: 0 PID: 3971 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   81.580139][ T3971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   81.580156][ T3971] Call Trace:
[   81.580165][ T3971]  <TASK>
[   81.580176][ T3971]  __dump_stack+0x1d/0x30
[   81.580206][ T3971]  dump_stack_lvl+0x95/0xd0
[   81.580275][ T3971]  dump_stack+0x15/0x1b
[   81.580297][ T3971]  dump_header+0x80/0x240
[   81.580332][ T3971]  oom_kill_process+0x295/0x350
[   81.580378][ T3971]  out_of_memory+0x981/0xbc0
[   81.580414][ T3971]  try_charge_memcg+0x621/0xa00
[   81.580467][ T3971]  charge_memcg+0x6d/0x120
[   81.580548][ T3971]  __mem_cgroup_charge+0x28/0xb0
[   81.580585][ T3971]  shmem_get_folio_gfp+0x49f/0xd90
[   81.580616][ T3971]  shmem_write_begin+0xfc/0x1f0
[   81.580650][ T3971]  generic_perform_write+0x186/0x490
[   81.580716][ T3971]  ? current_time+0x18d/0x250
[   81.580751][ T3971]  shmem_file_write_iter+0xc5/0xf0
[   81.580788][ T3971]  __kernel_write_iter+0x30f/0x590
[   81.580892][ T3971]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   81.580931][ T3971]  dump_user_range+0xa73/0xd00
[   81.581024][ T3971]  elf_core_dump+0x21c0/0x2340
[   81.581049][ T3971]  ? 0xffffffffff600000
[   81.581154][ T3971]  coredump_write+0xaf9/0xdd0
[   81.581270][ T3971]  vfs_coredump+0x2770/0x3290
[   81.581326][ T3971]  ? __memcg_slab_free_hook+0x75/0x2c0
[   81.581369][ T3971]  ? __sigqueue_free+0xf4/0x130
[   81.581439][ T3971]  ? proc_coredump_connector+0x160/0x2b0
[   81.581465][ T3971]  ? __sigqueue_free+0xf4/0x130
[   81.581519][ T3971]  ? kmem_cache_free+0xca/0x380
[   81.581625][ T3971]  get_signal+0xd33/0xf10
[   81.581664][ T3971]  arch_do_signal_or_restart+0x96/0x480
[   81.581750][ T3971]  irqentry_exit+0x14d/0x610
[   81.581779][ T3971]  ? force_sig+0x89/0xb0
[   81.581814][ T3971]  exc_general_protection+0x155/0x1e0
[   81.581865][ T3971]  asm_exc_general_protection+0x26/0x30
[   81.581941][ T3971] RIP: 0033:0x7f066d16ce61
[   81.581956][ T3971] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   81.581980][ T3971] RSP: 002b:0000200000000340 EFLAGS: 00010217
[   81.582161][ T3971] RAX: 0000000000000000 RBX: 00007f066d3e6090 RCX: 00007f066d16ce59
[   81.582179][ T3971] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000020000
[   81.582273][ T3971] RBP: 00007f066d202e6f R08: 0000200000000500 R09: 0000200000000500
[   81.582291][ T3971] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000
[   81.582304][ T3971] R13: 00007f066d3e6128 R14: 00007f066d3e6090 R15: 00007fff9340df28
[   81.582361][ T3971]  </TASK>
[   81.582460][ T3971] memory: usage 307200kB, limit 307200kB, failcnt 53636
[   81.849764][   T28] audit: type=1400 audit(1782528575.696:1125): avc:  denied  { write } for  pid=4776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   81.872870][ T3971] memory+swap: usage 432120kB, limit 9007199254740988kB, failcnt 0
[   81.880937][ T3971] kmem: usage 4288kB, limit 9007199254740988kB, failcnt 0
[   81.888189][   T28] audit: type=1400 audit(1782528575.756:1126): avc:  denied  { write } for  pid=4787 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   81.910189][ T3971] Memory cgroup stats for /syz2:
[   81.910445][ T3971] cache 310038528
[   81.919209][ T3971] rss 98304
[   81.922485][ T3971] shmem 310034432
[   81.926257][ T3971] mapped_file 0
[   81.929792][ T3971] dirty 0
[   81.932934][ T3971] writeback 0
[   81.936408][ T3971] workingset_refault_anon 399
[   81.941148][ T3971] workingset_refault_file 21320
[   81.946067][ T3971] swap 127918080
[   81.949727][ T3971] swapcached 217989120
[   81.953979][ T3971] pgpgin 204140
[   81.957672][ T3971] pgpgout 128412
[   81.961341][ T3971] pgfault 26645
[   81.964905][ T3971] pgmajfault 452
[   81.968592][ T3971] inactive_anon 89321472
[   81.972959][ T3971] active_anon 220856320
[   81.977241][ T3971] inactive_file 0
[   81.980941][ T3971] active_file 4096
[   81.984761][ T3971] unevictable 0
[   81.988467][ T3971] hierarchical_memory_limit 314572800
[   81.993954][ T3971] hierarchical_memsw_limit 9223372036854771712
[   82.000220][ T3971] total_cache 310038528
[   82.004540][ T3971] total_rss 98304
[   82.008402][ T3971] total_shmem 310034432
[   82.012707][ T3971] total_mapped_file 0
[   82.016771][ T3971] total_dirty 0
[   82.020295][ T3971] total_writeback 0
[   82.024353][ T3971] total_workingset_refault_anon 399
[   82.029623][ T3971] total_workingset_refault_file 21320
[   82.035112][ T3971] total_swap 127918080
[   82.040020][ T3971] total_swapcached 217989120
[   82.044870][ T3971] total_pgpgin 204140
[   82.049107][ T3971] total_pgpgout 128412
[   82.053297][ T3971] total_pgfault 26645
[   82.057563][ T3971] total_pgmajfault 452
[   82.061789][ T3971] total_inactive_anon 89321472
[   82.066925][ T3971] total_active_anon 220856320
[   82.071687][ T3971] total_inactive_file 0
[   82.075914][ T3971] total_active_file 4096
[   82.080510][   T28] audit: type=1400 audit(1782528575.986:1127): avc:  denied  { write } for  pid=4790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.103563][ T3971] total_unevictable 0
[   82.107645][ T3971] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.137,pid=3963,uid=0
[   82.122853][ T3971] Memory cgroup out of memory: Killed process 3963 (syz.2.137) total-vm:90460kB, anon-rss:1232kB, file-rss:39136kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000
[   82.140060][   T28] audit: type=1400 audit(1782528576.036:1128): avc:  denied  { write } for  pid=4801 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.260827][ T3973] syz.2.137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   82.276547][   T28] audit: type=1400 audit(1782528576.176:1129): avc:  denied  { write } for  pid=4804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.313104][ T3973] CPU: 0 UID: 0 PID: 3973 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   82.313178][ T3973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   82.313195][ T3973] Call Trace:
[   82.313204][ T3973]  <TASK>
[   82.313214][ T3973]  __dump_stack+0x1d/0x30
[   82.313247][ T3973]  dump_stack_lvl+0x95/0xd0
[   82.313288][ T3973]  dump_stack+0x15/0x1b
[   82.313313][ T3973]  dump_header+0x80/0x240
[   82.313341][ T3973]  oom_kill_process+0x295/0x350
[   82.313455][ T3973]  out_of_memory+0x981/0xbc0
[   82.313573][ T3973]  try_charge_memcg+0x621/0xa00
[   82.313624][ T3973]  charge_memcg+0x6d/0x120
[   82.313673][ T3973]  __mem_cgroup_charge+0x28/0xb0
[   82.313766][ T3973]  shmem_get_folio_gfp+0x49f/0xd90
[   82.313802][ T3973]  shmem_write_begin+0xfc/0x1f0
[   82.313908][ T3973]  generic_perform_write+0x186/0x490
[   82.313936][ T3973]  ? current_time+0x18d/0x250
[   82.313978][ T3973]  shmem_file_write_iter+0xc5/0xf0
[   82.314024][ T3973]  __kernel_write_iter+0x30f/0x590
[   82.314068][ T3973]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   82.314110][ T3973]  dump_user_range+0xa73/0xd00
[   82.314171][ T3973]  elf_core_dump+0x21c0/0x2340
[   82.314203][ T3973]  ? 0xffffffffff600000
[   82.314289][ T3973]  coredump_write+0xaf9/0xdd0
[   82.314379][ T3973]  vfs_coredump+0x2770/0x3290
[   82.314432][ T3973]  ? __memcg_slab_free_hook+0x75/0x2c0
[   82.314553][ T3973]  ? __sigqueue_free+0xf4/0x130
[   82.314657][ T3973]  ? proc_coredump_connector+0x160/0x2b0
[   82.314746][ T3973]  ? __sigqueue_free+0xf4/0x130
[   82.314844][ T3973]  ? kmem_cache_free+0xca/0x380
[   82.314886][ T3973]  get_signal+0xd33/0xf10
[   82.314960][ T3973]  arch_do_signal_or_restart+0x96/0x480
[   82.314997][ T3973]  irqentry_exit+0x14d/0x610
[   82.315021][ T3973]  ? force_sig+0x89/0xb0
[   82.315117][ T3973]  exc_general_protection+0x155/0x1e0
[   82.315167][ T3973]  asm_exc_general_protection+0x26/0x30
[   82.315282][ T3973] RIP: 0033:0x7f066d16ce61
[   82.315304][ T3973] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   82.315328][ T3973] RSP: 002b:0000200000000340 EFLAGS: 00010217
[   82.315380][ T3973] RAX: 0000000000000000 RBX: 00007f066d3e6090 RCX: 00007f066d16ce59
[   82.315393][ T3973] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000020000
[   82.315411][ T3973] RBP: 00007f066d202e6f R08: 0000200000000500 R09: 0000200000000500
[   82.315430][ T3973] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000
[   82.315448][ T3973] R13: 00007f066d3e6128 R14: 00007f066d3e6090 R15: 00007fff9340df28
[   82.315483][ T3973]  </TASK>
[   82.315539][ T3973] memory: usage 307200kB, limit 307200kB, failcnt 53927
[   82.363127][   T28] audit: type=1400 audit(1782528576.246:1130): avc:  denied  { write } for  pid=4815 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.493528][ T3973] memory+swap: usage 432108kB, limit 9007199254740988kB, failcnt 0
[   82.608618][ T3973] kmem: usage 4276kB, limit 9007199254740988kB, failcnt 0
[   82.615891][ T3973] Memory cgroup stats for /syz2:
[   82.616057][ T3973] cache 309383168
[   82.626992][ T3973] rss 98304
[   82.630180][ T3973] shmem 309379072
[   82.633951][ T3973] mapped_file 0
[   82.637764][ T3973] dirty 0
[   82.640796][ T3973] writeback 0
[   82.644144][ T3973] workingset_refault_anon 399
[   82.649108][ T3973] workingset_refault_file 21320
[   82.654059][ T3973] swap 126799872
[   82.657938][ T3973] swapcached 217989120
[   82.662107][ T3973] pgpgin 204140
[   82.665606][ T3973] pgpgout 128572
[   82.669476][ T3973] pgfault 26645
[   82.673047][ T3973] pgmajfault 452
[   82.676873][ T3973] inactive_anon 181977088
[   82.681301][ T3973] active_anon 127545344
[   82.685580][ T3973] inactive_file 0
[   82.689495][ T3973] active_file 4096
[   82.693304][ T3973] unevictable 0
[   82.696998][ T3973] hierarchical_memory_limit 314572800
[   82.702419][ T3973] hierarchical_memsw_limit 9223372036854771712
[   82.709386][ T3973] total_cache 309383168
[   82.713619][ T3973] total_rss 98304
[   82.717633][ T3973] total_shmem 309379072
[   82.721980][ T3973] total_mapped_file 0
[   82.726013][ T3973] total_dirty 0
[   82.730858][ T3973] total_writeback 0
[   82.734730][ T3973] total_workingset_refault_anon 399
[   82.740861][ T3973] total_workingset_refault_file 21320
[   82.746452][ T3973] total_swap 126799872
[   82.750662][ T3973] total_swapcached 217989120
[   82.755300][ T3973] total_pgpgin 204140
[   82.761590][ T3973] total_pgpgout 128572
[   82.765713][ T3973] total_pgfault 26645
[   82.769828][ T3973] total_pgmajfault 452
[   82.773977][ T3973] total_inactive_anon 181977088
[   82.778919][ T3973] total_active_anon 127545344
[   82.783649][ T3973] total_inactive_file 0
[   82.787891][ T3973] total_active_file 4096
[   82.792167][ T3973] total_unevictable 0
[   82.796191][ T3973] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.137,pid=3971,uid=0
[   82.810878][ T3973] Memory cgroup out of memory: Killed process 3971 (syz.2.137) total-vm:90460kB, anon-rss:1232kB, file-rss:37544kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000
[   83.683393][ T3943] syz.2.137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   83.710829][ T3943] CPU: 1 UID: 0 PID: 3943 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   83.710863][ T3943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   83.710880][ T3943] Call Trace:
[   83.710889][ T3943]  <TASK>
[   83.710899][ T3943]  __dump_stack+0x1d/0x30
[   83.710929][ T3943]  dump_stack_lvl+0x95/0xd0
[   83.711004][ T3943]  dump_stack+0x15/0x1b
[   83.711061][ T3943]  dump_header+0x80/0x240
[   83.711090][ T3943]  oom_kill_process+0x295/0x350
[   83.711132][ T3943]  out_of_memory+0x981/0xbc0
[   83.711256][ T3943]  try_charge_memcg+0x621/0xa00
[   83.711307][ T3943]  charge_memcg+0x6d/0x120
[   83.711342][ T3943]  __mem_cgroup_charge+0x28/0xb0
[   83.711384][ T3943]  shmem_get_folio_gfp+0x49f/0xd90
[   83.711463][ T3943]  shmem_write_begin+0xfc/0x1f0
[   83.711535][ T3943]  generic_perform_write+0x186/0x490
[   83.711562][ T3943]  shmem_file_write_iter+0xc5/0xf0
[   83.711698][ T3943]  __kernel_write_iter+0x30f/0x590
[   83.711742][ T3943]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   83.711795][ T3943]  dump_user_range+0xa73/0xd00
[   83.711888][ T3943]  elf_core_dump+0x21c0/0x2340
[   83.711914][ T3943]  ? 0xffffffffff600000
[   83.711976][ T3943]  coredump_write+0xaf9/0xdd0
[   83.712021][ T3943]  vfs_coredump+0x2770/0x3290
[   83.712062][ T3943]  ? __memcg_slab_free_hook+0x75/0x2c0
[   83.712172][ T3943]  ? __sigqueue_free+0xf4/0x130
[   83.712211][ T3943]  ? proc_coredump_connector+0x160/0x2b0
[   83.712240][ T3943]  ? __sigqueue_free+0xf4/0x130
[   83.712268][ T3943]  ? kmem_cache_free+0xca/0x380
[   83.712367][ T3943]  get_signal+0xd33/0xf10
[   83.712402][ T3943]  arch_do_signal_or_restart+0x96/0x480
[   83.712439][ T3943]  irqentry_exit+0x14d/0x610
[   83.712471][ T3943]  ? force_sig+0x89/0xb0
[   83.712507][ T3943]  exc_general_protection+0x155/0x1e0
[   83.712636][ T3943]  asm_exc_general_protection+0x26/0x30
[   83.712663][ T3943] RIP: 0033:0x7f066d16ce61
[   83.712678][ T3943] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   83.712696][ T3943] RSP: 002b:0000200000000340 EFLAGS: 00010217
[   83.712746][ T3943] RAX: 0000000000000000 RBX: 00007f066d3e6090 RCX: 00007f066d16ce59
[   83.712760][ T3943] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000020000
[   83.712791][ T3943] RBP: 00007f066d202e6f R08: 0000200000000500 R09: 0000200000000500
[   83.712810][ T3943] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000
[   83.712827][ T3943] R13: 00007f066d3e6128 R14: 00007f066d3e6090 R15: 00007fff9340df28
[   83.712866][ T3943]  </TASK>
[   83.715590][ T3943] memory: usage 307200kB, limit 307200kB, failcnt 58192
[   83.972954][ T3943] memory+swap: usage 432112kB, limit 9007199254740988kB, failcnt 0
[   83.980984][ T3943] kmem: usage 3988kB, limit 9007199254740988kB, failcnt 0
[   83.988170][ T3943] Memory cgroup stats for /syz2:
[   83.988677][ T3943] cache 310353920
[   83.997318][ T3943] rss 90112
[   84.003590][ T3943] shmem 310341632
[   84.008626][ T3943] mapped_file 0
[   84.012252][ T3943] dirty 0
[   84.015283][ T3943] writeback 0
[   84.019059][ T3943] workingset_refault_anon 399
[   84.023807][ T3943] workingset_refault_file 23728
[   84.030030][ T3943] swap 127909888
[   84.037446][ T3943] swapcached 232558592
[   84.044846][ T3943] pgpgin 222673
[   84.048901][ T3943] pgpgout 146870
[   84.052481][ T3943] pgfault 27504
[   84.055969][ T3943] pgmajfault 507
[   84.059736][ T3943] inactive_anon 217620480
[   84.064134][ T3943] active_anon 92856320
[   84.068305][ T3943] inactive_file 8192
[   84.072236][ T3943] active_file 4096
[   84.075952][ T3943] unevictable 0
[   84.079498][ T3943] hierarchical_memory_limit 314572800
[   84.084960][ T3943] hierarchical_memsw_limit 9223372036854771712
[   84.091175][ T3943] total_cache 310353920
[   84.095370][ T3943] total_rss 90112
[   84.099053][ T3943] total_shmem 310341632
[   84.103222][ T3943] total_mapped_file 0
[   84.107324][ T3943] total_dirty 0
[   84.110825][ T3943] total_writeback 0
[   84.114643][ T3943] total_workingset_refault_anon 399
[   84.120008][ T3943] total_workingset_refault_file 23728
[   84.125464][ T3943] total_swap 127909888
[   84.129584][ T3943] total_swapcached 232558592
[   84.134238][ T3943] total_pgpgin 222673
[   84.138284][ T3943] total_pgpgout 146870
[   84.142441][ T3943] total_pgfault 27504
[   84.146471][ T3943] total_pgmajfault 507
[   84.150558][ T3943] total_inactive_anon 217620480
[   84.155420][ T3943] total_active_anon 92856320
[   84.160088][ T3943] total_inactive_file 8192
[   84.164569][ T3943] total_active_file 4096
[   84.168866][ T3943] total_unevictable 0
[   84.172868][ T3943] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.137,pid=3981,uid=0
[   84.187574][ T3943] Memory cgroup out of memory: Killed process 3981 (syz.2.137) total-vm:90460kB, anon-rss:1232kB, file-rss:43256kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000
[   84.222937][ T3966] syz.2.137 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   84.252625][ T3966] CPU: 1 UID: 0 PID: 3966 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(lazy) 
[   84.252661][ T3966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   84.252679][ T3966] Call Trace:
[   84.252687][ T3966]  <TASK>
[   84.252696][ T3966]  __dump_stack+0x1d/0x30
[   84.252753][ T3966]  dump_stack_lvl+0x95/0xd0
[   84.252837][ T3966]  dump_stack+0x15/0x1b
[   84.252855][ T3966]  dump_header+0x80/0x240
[   84.252882][ T3966]  oom_kill_process+0x295/0x350
[   84.252984][ T3966]  out_of_memory+0x981/0xbc0
[   84.253016][ T3966]  try_charge_memcg+0x621/0xa00
[   84.253102][ T3966]  ? should_fail_ex+0x30/0x270
[   84.253218][ T3966]  charge_memcg+0x6d/0x120
[   84.253253][ T3966]  __mem_cgroup_charge+0x28/0xb0
[   84.253343][ T3966]  filemap_add_folio+0x110/0x350
[   84.253383][ T3966]  __filemap_get_folio_mpol+0x32e/0x840
[   84.253431][ T3966]  filemap_fault+0x458/0xb60
[   84.253462][ T3966]  handle_mm_fault+0x167a/0x2da0
[   84.253540][ T3966]  __get_user_pages+0x129c/0x1f10
[   84.253628][ T3966]  ? up_write+0x18/0x60
[   84.253660][ T3966]  get_dump_page+0xb4/0x240
[   84.253776][ T3966]  dump_user_range+0x142/0xd00
[   84.253823][ T3966]  elf_core_dump+0x21c0/0x2340
[   84.253856][ T3966]  ? 0xffffffffff600000
[   84.253883][ T3966]  coredump_write+0xaf9/0xdd0
[   84.253986][ T3966]  vfs_coredump+0x2770/0x3290
[   84.254039][ T3966]  ? __memcg_slab_free_hook+0x75/0x2c0
[   84.254075][ T3966]  ? __sigqueue_free+0xf4/0x130
[   84.254154][ T3966]  ? proc_coredump_connector+0x160/0x2b0
[   84.254178][ T3966]  ? __sigqueue_free+0xf4/0x130
[   84.254208][ T3966]  ? kmem_cache_free+0xca/0x380
[   84.254314][ T3966]  get_signal+0xd33/0xf10
[   84.254392][ T3966]  arch_do_signal_or_restart+0x96/0x480
[   84.254428][ T3966]  irqentry_exit+0x14d/0x610
[   84.254460][ T3966]  ? force_sig+0x89/0xb0
[   84.254494][ T3966]  exc_general_protection+0x155/0x1e0
[   84.254585][ T3966]  asm_exc_general_protection+0x26/0x30
[   84.254610][ T3966] RIP: 0033:0x7f066d16ce61
[   84.254707][ T3966] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   84.254725][ T3966] RSP: 002b:0000200000000340 EFLAGS: 00010217
[   84.254741][ T3966] RAX: 0000000000000000 RBX: 00007f066d3e6090 RCX: 00007f066d16ce59
[   84.254834][ T3966] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000020000
[   84.254950][ T3966] RBP: 00007f066d202e6f R08: 0000200000000500 R09: 0000200000000500
[   84.254963][ T3966] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000
[   84.254978][ T3966] R13: 00007f066d3e6128 R14: 00007f066d3e6090 R15: 00007fff9340df28
[   84.255002][ T3966]  </TASK>
[   84.320197][ T3966] memory: usage 307200kB, limit 307200kB, failcnt 58381
[   84.521493][ T3966] memory+swap: usage 432096kB, limit 9007199254740988kB, failcnt 0
[   84.529456][ T3966] kmem: usage 3976kB, limit 9007199254740988kB, failcnt 0
[   84.536706][ T3966] Memory cgroup stats for /syz2:
[   84.537051][ T3966] cache 309637120
[   84.545647][ T3966] rss 90112
[   84.548816][ T3966] shmem 309616640
[   84.552719][ T3966] mapped_file 0
[   84.556268][ T3966] dirty 0
[   84.559235][ T3966] writeback 0
[   84.562583][ T3966] workingset_refault_anon 399
[   84.567428][ T3966] workingset_refault_file 23732
[   84.572367][ T3966] swap 125194240
[   84.575933][ T3966] swapcached 232558592
[   84.580257][ T3966] pgpgin 222678
[   84.583848][ T3966] pgpgout 147050
[   84.587526][ T3966] pgfault 27508
[   84.591013][ T3966] pgmajfault 508
[   84.594659][ T3966] inactive_anon 217219072
[   84.599287][ T3966] active_anon 92532736
[   84.603392][ T3966] inactive_file 16384
[   84.607519][ T3966] active_file 4096
[   84.611299][ T3966] unevictable 0
[   84.614801][ T3966] hierarchical_memory_limit 314572800
[   84.620338][ T3966] hierarchical_memsw_limit 9223372036854771712
[   84.626678][ T3966] total_cache 309637120
[   84.630920][ T3966] total_rss 90112
[   84.634572][ T3966] total_shmem 309616640
[   84.638959][ T3966] total_mapped_file 0
[   84.643019][ T3966] total_dirty 0
[   84.646667][ T3966] total_writeback 0
[   84.650524][ T3966] total_workingset_refault_anon 399
[   84.655812][ T3966] total_workingset_refault_file 23732
[   84.661395][ T3966] total_swap 125194240
[   84.665623][ T3966] total_swapcached 232558592
[   84.670802][ T3966] total_pgpgin 222678
[   84.674849][ T3966] total_pgpgout 147050
[   84.679223][ T3966] total_pgfault 27508
[   84.683268][ T3966] total_pgmajfault 508
[   84.687468][ T3966] total_inactive_anon 217219072
[   84.692355][ T3966] total_active_anon 92532736
[   84.697099][ T3966] total_inactive_file 16384
[   84.701699][ T3966] total_active_file 4096
[   84.705976][ T3966] total_unevictable 0
[   84.710280][ T3966] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.137,pid=3977,uid=0
[   84.724984][ T3966] Memory cgroup out of memory: Killed process 3977 (syz.2.137) total-vm:90460kB, anon-rss:1232kB, file-rss:38248kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000
[   85.548759][ T3968] syz.2.137 (3968) used greatest stack depth: 7176 bytes left
[   88.157277][   T28] audit: type=1400 audit(1782528582.066:1131): avc:  denied  { write } for  pid=4822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   88.191448][   T28] audit: type=1400 audit(1782528582.096:1132): avc:  denied  { write } for  pid=4833 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   88.666485][   T28] audit: type=1400 audit(1782528582.576:1133): avc:  denied  { write } for  pid=4836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   88.699878][   T28] audit: type=1400 audit(1782528582.606:1134): avc:  denied  { write } for  pid=4847 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   88.933404][   T28] audit: type=1400 audit(1782528582.836:1135): avc:  denied  { write } for  pid=4850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   88.972488][   T28] audit: type=1400 audit(1782528582.876:1136): avc:  denied  { write } for  pid=4861 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   89.067405][   T28] audit: type=1400 audit(1782528582.976:1137): avc:  denied  { write } for  pid=4864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   89.100755][   T28] audit: type=1400 audit(1782528583.006:1138): avc:  denied  { write } for  pid=4875 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1